Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
File: B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json)
Hash identifier: K+Ju1RpaeaKW4AzHjhPRZnX3+qJ6TV9KephD/ZfYcp8=
Subject key identifier: 05:C8:A8:73:CE:B3:AE:FF:2B:15:A8:37:E8:20:C9:96:71:82:59:39
Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
Certificate issuer: /CN=b056811cb944a23c757f57affd483c6fcfb80119
Certificate serial: 70C839E79925039ADD764E3C20466FE87A39CDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
Manifest number: 0D2C
Signing time: Sat 28 Jun 2025 20:36:53 +0000
Manifest this update: Sat 28 Jun 2025 20:31:53 +0000
Manifest next update: Sun 29 Jun 2025 22:59:53 +0000
Files and hashes: 1: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=)
2: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: Vpk6Qgf5ZLHNZVDZXeOQLlyEL92nqgP216y2XkD24Vs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c8:39:e7:99:25:03:9a:dd:76:4e:3c:20:46:6f:e8:7a:39:cd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119
Validity
Not Before: Jun 28 20:31:53 2025 GMT
Not After : Jun 29 22:59:53 2025 GMT
Subject: CN=05C8A873CEB3AEFF2B15A837E820C99671825939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:29:03:c6:bd:6a:1d:d5:04:18:5d:7a:a4:
36:fa:75:57:47:e4:41:67:8d:82:38:2e:09:cb:0c:
f2:e6:c8:b1:10:a7:bd:58:1a:b7:7d:70:9d:d0:1b:
24:e0:e8:1f:87:41:4e:0a:e0:f3:2b:6d:27:b4:f6:
33:75:04:1c:aa:df:6b:f3:9d:04:5d:c6:f5:d5:32:
a0:9a:34:51:62:15:57:18:eb:f2:ae:ae:02:8e:95:
5e:50:5e:03:68:b7:5a:06:ab:12:aa:34:ff:12:84:
c5:66:78:71:87:93:86:8d:df:b8:d2:2e:c3:ce:85:
c5:e8:6c:19:e4:79:d0:58:04:67:46:56:6c:a5:29:
bd:d1:cd:02:02:6a:65:2d:a0:70:9a:02:14:a1:a1:
35:e1:e3:0e:07:46:c1:bf:dd:f7:f0:a5:c5:40:a1:
b0:a6:da:f0:f6:fa:93:94:31:53:62:8e:7a:cb:58:
f5:81:2b:6e:19:c9:53:95:97:0e:78:f8:3d:a9:aa:
5a:0d:55:2a:2a:10:52:eb:63:79:b3:64:c7:e6:49:
c3:7c:fb:a7:b1:1a:24:59:01:7e:e5:e0:a7:80:74:
d2:2e:b2:3c:04:35:14:80:98:bc:6f:40:0d:e4:89:
3d:00:c9:d2:47:ac:ac:16:5b:0b:07:64:02:cb:f7:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:A8:73:CE:B3:AE:FF:2B:15:A8:37:E8:20:C9:96:71:82:59:39
X509v3 Authority Key Identifier:
keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:99:89:b2:be:06:6b:6c:01:ee:fd:39:07:7d:e5:79:72:
57:36:d6:01:f8:51:14:65:1a:64:15:71:ad:b0:78:51:eb:46:
3e:42:45:7f:66:08:3f:b1:57:45:6e:21:6c:12:1b:ca:9a:a6:
b2:13:e4:76:2a:17:ad:cb:13:61:26:b5:ce:f2:c9:e6:0d:23:
03:a4:b1:87:ed:41:b0:61:6a:f2:d3:77:a3:78:83:8b:63:23:
0a:2e:50:7a:61:fc:c3:03:d2:03:48:85:c6:01:98:52:2d:d7:
4c:05:50:07:22:e5:89:2c:1c:5c:30:8e:43:d8:6f:6b:e6:4a:
3d:74:a1:68:2e:08:c5:20:b2:4d:4f:0c:13:c8:df:8f:60:10:
88:46:46:0b:31:af:42:57:1c:e4:d2:36:ba:7d:b5:8d:76:75:
88:3f:3c:a0:41:b1:62:a7:10:b1:92:db:d3:b4:b9:49:af:05:
72:fd:1a:20:82:cd:9f:6b:3b:45:ba:69:be:04:6f:34:85:cb:
4e:2b:84:3a:c0:2e:f1:b5:91:d8:1d:c9:b7:1d:e0:f0:84:ab:
11:47:2c:5a:dd:fd:96:49:8c:7d:84:ed:70:90:70:f8:64:09:
b5:72:69:33:5b:f8:e0:24:d5:ae:61:3c:55:b2:16:ca:0d:3c:
5b:ae:8e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:20 2025 by rpki-client