Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: rdb5pCgmmCMdpAgAR+meSMAWsmZXNMbGvj4eIPxh4io=
Subject key identifier: 8D:ED:A1:7F:95:EE:FB:10:1B:AF:AE:26:1E:84:C3:AB:9C:F3:C4:B6
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 451B6FDD9CDDC975F6F4BF6F2A47C545D4698049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 0534
Signing time: Sat 28 Jun 2025 17:12:44 +0000
Manifest this update: Sat 28 Jun 2025 17:07:44 +0000
Manifest next update: Sun 29 Jun 2025 17:18:44 +0000
Files and hashes: 1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
2: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: UulQeQkV6DLtuijZx5L+3tnKUAwEmNR5GE0YzvSoe1Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:1b:6f:dd:9c:dd:c9:75:f6:f4:bf:6f:2a:47:c5:45:d4:69:80:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Jun 28 17:07:44 2025 GMT
Not After : Jun 29 17:18:44 2025 GMT
Subject: CN=8DEDA17F95EEFB101BAFAE261E84C3AB9CF3C4B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:de:bb:31:e7:2b:1a:31:a6:0a:53:f7:4c:
a5:6a:6f:2c:04:41:56:25:cf:84:0b:9f:9e:1b:a8:
7a:f0:d4:5b:37:0c:69:81:c5:7b:76:d0:2b:e9:46:
e2:3a:0e:8f:32:32:d6:24:74:d4:d8:bf:e9:83:96:
35:b8:7f:9a:33:e5:cf:f2:cd:b5:fa:e1:be:d4:2e:
c1:0e:d0:25:f0:1e:bb:1c:36:05:98:22:50:ca:b6:
84:f5:87:58:39:6c:83:88:07:a6:52:74:0e:7e:60:
aa:ad:e4:14:81:5b:3a:79:9d:93:69:fd:c3:5e:28:
55:01:2f:6f:0b:37:c0:33:fe:90:80:00:d7:57:43:
af:c6:2a:8f:7f:b1:f0:53:36:d7:bf:f4:e2:27:00:
b7:e2:4f:9f:de:04:04:7b:19:ea:09:d8:48:9f:a6:
83:99:98:cd:12:75:2f:35:cf:36:64:63:14:e6:3c:
e3:e9:9e:b9:a7:ed:6b:ca:ca:80:03:c6:3e:3c:df:
85:f9:06:7f:05:60:6a:a9:e1:c7:28:54:6a:4c:f9:
08:01:7c:c8:37:ec:6f:b1:d3:d4:ba:b9:2f:30:7f:
e1:6b:07:2c:0f:eb:db:97:86:d9:bb:11:51:8a:32:
56:ba:de:d0:d8:01:eb:78:f8:c0:64:d5:d6:88:6d:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:A1:7F:95:EE:FB:10:1B:AF:AE:26:1E:84:C3:AB:9C:F3:C4:B6
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6d:dc:a6:c9:cf:ee:e0:c3:0f:f9:62:b7:61:73:ce:96:00:
c1:43:33:bd:8a:10:aa:96:f4:3a:e2:66:87:83:52:1b:c0:d4:
20:7c:02:b3:d7:e0:c2:7b:16:18:0a:3d:f4:53:bb:78:fd:dc:
a2:ff:f7:1d:b6:77:ac:4c:6a:11:76:1b:cb:2b:c7:65:72:31:
0d:d2:55:0f:24:9b:4f:cc:26:8c:cf:6a:68:7d:12:8d:10:66:
da:ae:38:21:53:25:fb:ae:df:f8:d4:f4:59:5d:73:67:64:6c:
04:64:1a:50:1f:69:7c:76:69:ad:dd:16:f5:62:a6:3f:88:31:
95:c3:83:f1:f8:22:f4:a7:2c:93:b5:20:e9:41:77:cf:dc:ac:
58:7c:41:67:29:31:c7:32:1c:4b:b1:c8:c5:4b:62:5f:6b:4e:
23:84:43:b7:4d:25:1d:9b:75:d0:d4:3e:dd:d6:65:5c:9a:8c:
3c:a5:39:1a:01:2b:a0:7c:9e:68:78:74:ef:5f:6f:d8:2c:7b:
b9:b9:c0:94:c3:fd:ee:3a:ba:04:56:6c:4f:72:d2:0a:61:8d:
9e:89:9b:68:c5:e1:b3:2a:34:12:22:c0:8d:a3:db:e7:3b:69:
0c:5d:0d:74:60:81:9d:d5:15:a3:71:f8:7b:6b:a9:37:ad:29:
7f:24:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:49 2025 by rpki-client