Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
File: 1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft (raw, json)
Hash identifier: gHb1DoqrkYlUK/ep5ZH4WE0cI1BKdXAFun9hBrUoxMQ=
Subject key identifier: DC:94:4B:3C:16:4D:9D:0A:70:0A:1F:07:AF:F1:A4:98:08:D1:D0:59
Authority key identifier: 1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA
Certificate issuer: /CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
Certificate serial: 558AEB4ACBBE9EB6B712D5A3AB6E5E87EB52A194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
Manifest number: 018A
Signing time: Fri 09 May 2025 22:48:55 +0000
Manifest this update: Fri 09 May 2025 22:43:55 +0000
Manifest next update: Sat 10 May 2025 23:32:55 +0000
Files and hashes: 1: 323030313a3637633a313830343a3a2f34382d3438203d3e20323134343836.roa (hash: 1nPQzGJag6lw540UIscUM9owVGr1DZNIl1AFUvQr+XA=)
2: 1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl (hash: x+qBtLMcZ1SUfnSEJNNEigdu1GiW+KHWiDl04IXm+gI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl
rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8a:eb:4a:cb:be:9e:b6:b7:12:d5:a3:ab:6e:5e:87:eb:52:a1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
Validity
Not Before: May 9 22:43:55 2025 GMT
Not After : May 10 23:32:55 2025 GMT
Subject: CN=DC944B3C164D9D0A700A1F07AFF1A49808D1D059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:22:df:88:44:dc:2d:ba:05:ce:51:41:0b:
14:e0:19:18:ec:99:56:e4:d4:51:7a:d0:b3:66:0c:
d3:70:e6:cc:83:21:5f:f3:90:06:be:26:63:a0:da:
75:a1:c7:f2:b8:2b:35:01:41:84:a7:ea:ee:b0:2e:
48:28:a8:86:7f:2e:6b:d2:52:2f:07:48:85:1c:94:
96:3b:6b:ac:06:2b:a6:a0:79:35:e2:ec:0f:e9:e7:
64:f7:a4:31:81:60:8a:5b:cf:14:3b:cc:ac:20:7d:
45:9e:7b:f7:fd:44:e3:0c:c7:37:44:1c:1f:ef:ca:
de:f8:14:95:3f:de:4e:df:47:2a:5e:5e:c0:2d:64:
e2:7a:7c:ba:ba:2b:bd:d2:63:6a:e0:83:de:5f:3b:
c0:10:a6:67:25:40:f1:c8:f3:05:10:6b:7f:74:b2:
a7:6c:bd:e0:88:35:e7:b6:da:cb:4c:69:4f:20:8e:
11:21:41:3a:d7:26:03:2e:d8:0e:19:a1:0a:28:4c:
0d:2d:47:ae:1f:61:d2:5f:a4:0d:8d:ea:ed:93:41:
93:09:47:71:e9:46:a7:45:12:b4:71:d4:d8:dc:5e:
29:1d:2b:39:d9:b6:d9:a5:e0:f1:34:80:55:92:af:
af:3f:7d:9c:11:c4:38:ec:6c:f3:d5:57:7d:ba:68:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:94:4B:3C:16:4D:9D:0A:70:0A:1F:07:AF:F1:A4:98:08:D1:D0:59
X509v3 Authority Key Identifier:
keyid:1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9e:89:6e:bd:99:ab:04:0b:19:54:1a:dd:70:00:73:cd:a3:
e6:e6:8a:08:eb:19:3a:b8:0d:6c:69:69:83:52:e5:d7:a2:e2:
26:31:63:b7:e4:41:e7:88:de:b4:d0:9a:d6:76:b7:50:89:d4:
2e:85:bb:67:37:33:c6:a2:14:26:eb:2a:ec:5e:d3:da:ed:7d:
eb:64:5a:80:dd:00:f9:99:ac:04:21:68:7c:9a:e6:04:fc:5f:
af:28:3d:9e:fd:5f:67:94:5c:5c:b3:d0:23:a3:a3:04:da:3a:
20:a7:d0:5b:22:aa:d3:18:43:9a:41:0a:6b:e2:87:cf:53:41:
45:c3:e8:1c:04:fe:17:2c:32:d2:d5:72:02:f0:36:9c:07:b0:
25:dc:6e:f0:12:61:b6:4c:2c:f0:7c:fe:45:85:61:16:b7:4b:
e0:b0:67:23:c6:ca:6c:6b:bc:ba:7b:59:1d:ae:b2:74:6d:b7:
ab:99:94:03:29:c5:02:eb:43:9f:0c:12:ab:bb:99:5f:d4:3c:
7c:40:4b:5d:fa:75:16:1f:8a:c1:5b:6e:41:71:fe:7e:6e:aa:
71:f7:0e:e3:66:53:08:c1:f0:98:4c:93:c9:b8:7b:79:6c:e4:
53:f3:e2:57:27:30:ed:59:9c:a3:d4:3a:fa:85:8b:39:52:9a:
ea:08:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:08:26 2025 by rpki-client