Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
File: 333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft (raw, json)
Hash identifier: ry24qZ6persVyGFZIgPHS5mNl2Xh/CO4RsAyQLpswiY=
Subject key identifier: 59:59:C7:E7:3D:C9:1F:7C:BD:4A:D4:41:07:D4:F7:DF:9B:72:FF:41
Authority key identifier: 33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
Certificate issuer: /CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
Certificate serial: 59F94BF94BA53BA6597A4EF4CF0C7B14E5C60BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
Manifest number: 4A
Signing time: Thu 08 May 2025 00:21:56 +0000
Manifest this update: Thu 08 May 2025 00:16:56 +0000
Manifest next update: Fri 09 May 2025 03:31:56 +0000
Files and hashes: 1: 333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl (hash: REkwu2m0SjKyuYx1zPUw3WPHMFd+AI+Zz56/KgCCeC0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 03:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f9:4b:f9:4b:a5:3b:a6:59:7a:4e:f4:cf:0c:7b:14:e5:c6:0b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333190ca0710cd1a9121c0e7e96bf0e1d5375fd5
Validity
Not Before: May 8 00:16:56 2025 GMT
Not After : May 9 03:31:56 2025 GMT
Subject: CN=5959C7E73DC91F7CBD4AD44107D4F7DF9B72FF41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:ed:f3:e0:6c:ec:b3:30:eb:09:e8:60:96:
f5:97:84:dd:c4:ad:b5:a0:55:ce:bb:18:41:8f:b9:
dc:9a:00:12:47:8e:d9:d5:de:12:73:d8:d6:75:a7:
1c:80:79:f0:0b:a0:5a:67:e6:fd:fe:8a:21:0b:48:
6b:0f:9e:2f:90:0f:8b:0e:fa:46:a3:8f:cf:1c:c4:
df:db:57:fa:2a:6c:65:ae:c5:95:8a:3f:aa:f4:33:
e4:78:da:64:1c:79:fb:75:68:ca:db:9e:96:89:34:
2a:55:8c:5c:62:ce:b8:a2:db:94:e0:09:2b:94:b3:
38:18:b7:70:fe:49:61:8f:e5:0f:26:4b:1d:11:c2:
53:30:22:3c:fe:e6:9b:b0:18:4a:82:2c:fe:11:a0:
7f:43:51:c1:39:75:95:79:a7:24:d6:da:f5:22:2f:
4d:b6:26:e9:9c:da:29:76:e6:dd:2e:84:26:52:da:
d9:e4:ea:08:13:1f:e2:0d:0f:e4:b6:13:31:5b:41:
14:e3:2f:d7:94:03:62:8a:72:1e:0f:4b:6d:4b:c4:
14:34:0d:fd:c4:3a:c7:93:57:6e:5c:74:6c:c1:ec:
1c:3f:97:36:9b:63:ba:79:5d:02:05:ed:f6:f9:dc:
af:20:b1:cd:8b:eb:c3:d3:6b:04:38:54:a1:72:0d:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:C7:E7:3D:C9:1F:7C:BD:4A:D4:41:07:D4:F7:DF:9B:72:FF:41
X509v3 Authority Key Identifier:
keyid:33:31:90:CA:07:10:CD:1A:91:21:C0:E7:E9:6B:F0:E1:D5:37:5F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzGQygcQzRqRIcDn6Wvw4dU3X9U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/0/333190CA0710CD1A9121C0E7E96BF0E1D5375FD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e2:74:6b:47:4c:18:6a:70:b8:b9:83:42:58:7f:b1:60:aa:
af:32:28:69:91:ee:fd:77:fe:69:df:49:b3:e9:9c:59:07:54:
83:8a:7c:18:8f:84:e9:94:46:46:a6:51:cd:c6:d1:dd:55:73:
2d:14:dc:43:89:5a:eb:a8:ec:c9:d7:23:ac:ef:a4:e9:66:ad:
ff:c4:b3:29:b7:7e:23:b6:1a:09:c6:8b:80:01:ac:3c:b1:67:
0b:ff:15:59:3b:e1:89:fb:02:93:d3:70:d0:d6:fa:27:4c:81:
93:4e:62:53:89:3f:6e:2d:94:a9:d1:0a:4e:06:48:15:7c:4e:
13:2f:10:a1:2d:26:1c:36:4a:39:65:d2:e8:d2:5f:1c:5c:6e:
c7:e8:b7:fe:c3:64:3e:64:a2:4f:fc:04:1d:46:15:26:af:1c:
0c:d2:7e:36:7c:aa:d5:56:0f:25:e6:b7:c8:eb:af:99:82:c3:
1d:b2:46:5f:88:9f:1d:23:45:79:d4:0e:b8:ee:08:d0:db:68:
a0:9a:77:c2:fa:c4:88:99:23:a0:25:5b:e3:67:05:eb:6d:c0:
ce:53:ea:3c:33:f2:b5:a8:2b:68:1f:4f:12:41:21:ee:e8:b2:
b7:9f:81:68:06:51:12:be:5c:54:25:ab:6a:e8:6a:7f:f6:f3:
9f:07:0c:be
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWflL+UulO6ZZek70zwx7FOXGC6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMzMTkwY2EwNzEwY2QxYTkxMjFjMGU3ZTk2YmYwZTFk
NTM3NWZkNTAeFw0yNTA1MDgwMDE2NTZaFw0yNTA1MDkwMzMxNTZaMDMxMTAvBgNV
BAMTKDU5NTlDN0U3M0RDOTFGN0NCRDRBRDQ0MTA3RDRGN0RGOUI3MkZGNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93e3z4GzsszDrCehglvWXhN3E
rbWgVc67GEGPudyaABJHjtnV3hJz2NZ1pxyAefALoFpn5v3+iiELSGsPni+QD4sO
+kajj88cxN/bV/oqbGWuxZWKP6r0M+R42mQceft1aMrbnpaJNCpVjFxizrii25Tg
CSuUszgYt3D+SWGP5Q8mSx0RwlMwIjz+5puwGEqCLP4RoH9DUcE5dZV5pyTW2vUi
L022Jumc2il25t0uhCZS2tnk6ggTH+IND+S2EzFbQRTjL9eUA2KKch4PS21LxBQ0
Df3EOseTV25cdGzB7Bw/lzabY7p5XQIF7fb53K8gsc2L68PTawQ4VKFyDeAXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUWVnH5z3JH3y9StRBB9T335ty/0EwHwYDVR0j
BBgwFoAUMzGQygcQzRqRIcDn6Wvw4dU3X9UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM4ZDE5ZDAtZDIyMS00NDQ4LTgxMWEtMGUxNjExYTQ2
NDQyLzAvMzMzMTkwQ0EwNzEwQ0QxQTkxMjFDMEU3RTk2QkYwRTFENTM3NUZENS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL016R1F5Z2NRelJxUkljRG42V3Z3NGRV
M1g5VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzhkMTlkMC1k
MjIxLTQ0NDgtODExYS0wZTE2MTFhNDY0NDIvMC8zMzMxOTBDQTA3MTBDRDFBOTEy
MUMwRTdFOTZCRjBFMUQ1Mzc1RkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeJ0a0dMGGpwuLmDQlh/
sWCqrzIoaZHu/Xf+ad9Js+mcWQdUg4p8GI+E6ZRGRqZRzcbR3VVzLRTcQ4la66js
ydcjrO+k6Wat/8SzKbd+I7YaCcaLgAGsPLFnC/8VWTvhifsCk9Nw0Nb6J0yBk05i
U4k/bi2UqdEKTgZIFXxOEy8QoS0mHDZKOWXS6NJfHFxux+i3/sNkPmSiT/wEHUYV
Jq8cDNJ+Nnyq1VYPJea3yOuvmYLDHbJGX4ifHSNFedQOuO4I0NtooJp3wvrEiJkj
oCVb42cF623AzlPqPDPytagraB9PEkEh7uiyt5+BaAZREr5cVCWrauhqf/bznwcM
vg==
-----END CERTIFICATE-----
Generated at Thu May 8 13:37:10 2025 by rpki-client