Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: 2wGP71W4W09Lh5CJSVlxQ+zBdsRw3UUPK35oN+h3/wk=
Subject key identifier: 6A:DF:2B:07:45:00:2E:33:65:62:EB:F6:C5:5C:C3:EB:8D:86:FE:76
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 485AFEADD6784F8BD0C456392A5C1E0BD95AC2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 0225
Signing time: Sat 28 Jun 2025 02:34:06 +0000
Manifest this update: Sat 28 Jun 2025 02:29:06 +0000
Manifest next update: Sun 29 Jun 2025 04:25:06 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: bJeMMFbRj4HP5sZAeCJa/Om52o699uZuhyiMH/osgJw=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 04:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5a:fe:ad:d6:78:4f:8b:d0:c4:56:39:2a:5c:1e:0b:d9:5a:c2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Jun 28 02:29:06 2025 GMT
Not After : Jun 29 04:25:06 2025 GMT
Subject: CN=6ADF2B0745002E336562EBF6C55CC3EB8D86FE76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:12:b8:f1:88:2d:36:cf:87:5f:cd:cb:7e:
be:76:49:a1:2a:cf:b8:fe:c0:9d:9f:f0:c5:92:60:
b4:5e:42:bf:c0:aa:8c:aa:63:86:53:6d:e2:32:0a:
54:88:34:17:0b:be:84:d1:78:3d:42:b3:09:85:4e:
55:16:64:fe:ce:f8:52:42:39:72:db:a7:2d:9e:14:
6b:ae:b1:41:91:71:c9:81:21:2a:03:be:e0:c3:2b:
b5:32:59:8c:9c:19:c1:08:e1:73:d6:6e:53:4c:8f:
93:e7:68:a7:b5:fe:51:21:73:d9:81:1a:94:d1:1f:
22:5f:f6:fc:14:c1:bf:40:60:26:4f:54:2c:7c:6f:
5d:d5:2d:c4:19:31:05:bd:54:4d:c8:20:ed:ad:6b:
f8:f4:a5:12:7a:37:fd:fd:5f:be:9a:bd:b2:96:d4:
f0:45:88:76:d2:21:30:60:b9:37:47:83:d9:20:90:
42:ff:66:10:13:7a:4f:e1:fa:b2:f6:10:fe:80:cd:
9e:7c:94:28:ee:3c:85:b4:fb:2b:60:fc:3f:4c:42:
9b:37:58:36:e3:93:9a:a4:22:9f:3d:62:f3:54:1b:
0d:97:09:a4:9b:08:bc:cf:a7:32:7d:64:99:34:2f:
95:f0:bc:85:b0:d4:7a:32:11:5d:1b:dc:89:db:3c:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:2B:07:45:00:2E:33:65:62:EB:F6:C5:5C:C3:EB:8D:86:FE:76
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7e:7e:e9:4e:31:9a:b3:55:f4:d7:ed:d6:d9:f9:3f:c5:86:
f6:f2:d2:b2:96:3a:67:85:bc:44:e2:76:6a:aa:3c:76:b0:90:
e1:07:5f:61:59:ed:f0:69:1a:51:31:a9:7b:16:ea:af:4a:6e:
5b:46:88:2e:f0:b1:43:9d:52:d4:7c:37:66:97:30:0e:b5:5f:
20:26:79:01:77:95:d1:25:de:e0:a9:41:bf:ca:28:45:91:c3:
03:50:bf:be:e2:00:f0:22:f8:7a:38:81:97:6a:f6:ea:cb:3a:
90:2a:0f:80:a3:4a:ac:1d:40:e3:4d:f1:04:8e:de:11:c6:36:
d5:74:ef:f7:82:0f:91:e9:96:d1:9e:92:ec:2b:45:a3:fc:c0:
d9:49:c0:ed:2d:30:97:0b:8b:2f:ba:2e:49:5d:58:04:3e:e2:
c2:4c:dd:4d:f3:ad:95:31:51:ff:1e:fa:31:34:45:25:1c:1d:
9d:8d:7f:0d:a9:a3:ba:b0:46:4e:b9:df:80:fd:11:5e:17:10:
db:f3:a9:28:52:d1:06:ee:5b:c3:14:f6:7e:95:d7:00:c9:03:
0c:29:1e:9d:a5:56:86:a0:f7:5f:59:a4:9c:59:b9:9e:e5:bf:
46:fa:73:b9:a2:00:38:92:55:25:22:28:ce:d5:22:06:6f:cd:
c7:3f:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:27 2025 by rpki-client