Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier: SIPjni7XDM6cc5u/+HDCyNVVzbh9aiBA2L/1ifLlWvY=
Subject key identifier: 6F:D4:E6:A8:29:AE:3E:9D:B1:43:A3:AC:31:CB:72:73:E7:20:4F:42
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer: /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial: 2D380CC9769D0AB89EE7B23AC3EE1DBC8937B42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number: 02AC
Signing time: Sun 19 Oct 2025 05:11:12 +0000
Manifest this update: Sun 19 Oct 2025 05:06:12 +0000
Manifest next update: Mon 20 Oct 2025 08:53:12 +0000
Files and hashes: 1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: Z60zJULoOUecgjVQs9rLm2qp5qgnNozZ79DSAqLdaiw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:38:0c:c9:76:9d:0a:b8:9e:e7:b2:3a:c3:ee:1d:bc:89:37:b4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Validity
Not Before: Oct 19 05:06:12 2025 GMT
Not After : Oct 20 08:53:12 2025 GMT
Subject: CN=6FD4E6A829AE3E9DB143A3AC31CB7273E7204F42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:2f:6f:8d:0f:2e:8f:df:60:db:85:88:26:
08:fa:9a:1d:1e:9a:5e:76:07:9e:8d:3c:76:ae:5e:
58:e1:6b:21:ff:d2:8b:1f:a9:00:33:f3:ea:11:6c:
f2:01:42:d6:c6:de:5b:ea:a8:42:72:f1:20:73:d3:
e4:26:a2:ab:ef:e4:78:97:90:15:59:ed:2f:fa:83:
0d:fd:b5:7a:44:42:b9:75:d2:14:c6:6e:e7:6c:b6:
0d:b7:93:f6:36:20:5c:1c:06:f5:f9:ef:22:6b:15:
b2:f2:ca:0c:b5:c5:d4:3a:83:6b:eb:22:e9:12:58:
06:18:e6:d2:9a:47:d9:bd:e4:78:21:3a:fc:bc:74:
33:8c:92:e5:90:35:26:70:17:d2:97:db:ba:3f:55:
50:b1:15:c5:c5:2f:71:be:e8:fc:da:8c:87:7c:28:
13:d8:c1:19:e3:c6:22:c0:b8:17:2f:b3:6e:b5:81:
44:19:b2:d0:a8:f1:cd:57:2a:43:0e:33:f6:9a:b5:
cc:5d:b7:8f:ea:4d:c6:88:dc:3c:cb:7c:05:96:b5:
81:05:4f:e8:65:dd:8e:3d:be:26:c0:bc:0a:c0:86:
c0:af:a6:dd:6a:4f:49:58:50:b4:c5:cd:3f:9f:18:
1c:84:ec:6e:5a:3a:3f:da:c8:37:87:58:5e:82:40:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:E6:A8:29:AE:3E:9D:B1:43:A3:AC:31:CB:72:73:E7:20:4F:42
X509v3 Authority Key Identifier:
keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8f:e8:ac:ad:33:09:23:49:c4:ac:d1:33:27:93:9a:d3:3a:
d7:5e:35:60:5e:fc:ae:16:d3:4c:93:ba:02:e6:d4:eb:6b:e5:
fc:35:2a:d9:bd:9f:8b:2c:0f:fb:c5:0c:2c:7d:09:a2:ac:86:
0e:84:a5:dd:b5:7c:56:97:11:6b:78:76:58:72:81:92:74:52:
0a:d8:96:3d:14:82:ea:a1:28:55:b9:f1:81:3e:21:3e:54:69:
9e:7f:a6:88:96:56:e3:7b:21:ac:7a:b3:6b:5f:d1:1f:0c:2d:
2d:d3:a7:55:a9:86:c2:ae:be:df:0c:a6:c4:a3:df:19:59:e7:
b2:2f:45:56:84:44:d4:cd:f8:94:87:81:da:52:53:b8:ca:83:
fc:3f:47:f7:56:72:19:3f:7b:27:bb:ff:ea:02:4a:94:64:fc:
25:94:24:5f:e1:81:22:f1:9a:38:53:3f:48:65:0c:3c:4c:c2:
9d:4f:46:b4:5c:46:cf:15:41:bc:6b:aa:c1:ed:6e:bc:8c:fa:
e6:d1:d6:12:c9:60:11:e4:5b:92:13:e3:7a:5f:09:84:58:83:
04:41:c3:29:93:76:c6:63:05:c1:c6:86:2b:f1:6e:c0:1f:5c:
5d:0c:42:4b:80:c1:1e:1e:5e:6a:2f:ed:79:e1:d8:41:0b:c4:
12:a0:9b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:45 2025 by rpki-client