Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: dIWvuy4ojB6rh5N5lNb4Jlw64WQGo3DH6Qmqob6Ez/k=
Subject key identifier: FE:15:39:DE:EE:38:A9:62:8E:0F:18:89:5B:F3:54:8A:8A:70:F6:37
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 77A042AF71EED0A83C61BD79863AB477A96D9E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 01EA
Signing time: Sun 19 Oct 2025 09:45:50 +0000
Manifest this update: Sun 19 Oct 2025 09:40:50 +0000
Manifest next update: Mon 20 Oct 2025 11:02:50 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: wXwl54H2Xkof4tw9Nl1MZy9nO6a6Uf/rHsGBkXm8FHw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a0:42:af:71:ee:d0:a8:3c:61:bd:79:86:3a:b4:77:a9:6d:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Oct 19 09:40:50 2025 GMT
Not After : Oct 20 11:02:50 2025 GMT
Subject: CN=FE1539DEEE38A9628E0F18895BF3548A8A70F637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:c0:61:80:98:97:6e:d6:9f:42:74:98:4c:
e6:af:5e:7e:69:c8:f0:21:37:8d:6f:dc:7f:4f:19:
0a:64:e0:c4:95:14:d8:08:ab:bb:a3:0e:e3:af:70:
b1:65:08:8e:61:fb:e0:f3:6c:f2:6a:81:57:8b:c8:
cc:cf:ba:7c:94:c2:b1:42:ee:42:b0:15:03:6a:f6:
4f:3e:a1:16:df:ed:3f:25:2c:a5:cc:c1:b7:a8:4c:
5f:54:89:e8:86:c6:fd:b8:cf:d3:52:7b:0d:a4:16:
80:98:bf:2a:42:bc:b9:ba:7c:59:df:f9:8d:f8:75:
af:71:bd:99:d3:00:ce:ce:be:e6:f4:30:77:3c:2e:
df:db:8c:a3:20:1b:4c:7f:f0:7e:7f:ad:b2:ab:d1:
08:24:e1:9e:60:07:e4:4d:93:f2:f3:b2:ea:b5:f0:
04:e2:a5:ec:45:fc:df:c4:da:c0:5d:b0:6a:0d:c3:
d1:15:02:e0:ec:1b:1d:27:1b:53:46:42:f1:fd:dc:
14:5e:3d:c4:5d:97:38:41:ba:6b:f4:a8:3f:ac:3d:
e9:b0:d6:d9:05:99:d8:c6:82:50:99:d0:58:c5:12:
66:85:3b:94:62:42:50:f2:b4:cc:10:ea:41:70:c8:
db:38:4d:21:a8:1c:e8:73:71:d0:cb:64:6c:27:9d:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:39:DE:EE:38:A9:62:8E:0F:18:89:5B:F3:54:8A:8A:70:F6:37
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8e:20:fc:37:76:17:b5:8b:69:e2:d0:a2:ec:e5:28:d2:59:
08:b9:3b:16:79:91:9f:1e:e3:38:b7:28:d5:70:72:bc:e2:40:
a4:cf:b7:55:2f:cb:1e:2c:dd:31:2c:da:df:8c:18:e7:d4:5e:
e5:07:b9:16:5d:84:ad:60:86:91:b5:8b:df:8d:6e:6b:24:18:
e3:12:5c:be:96:ec:ec:a5:78:41:54:db:71:d1:4a:80:22:7c:
26:5b:9a:7b:59:99:76:69:26:61:91:f2:23:da:80:2d:90:53:
e3:ea:03:98:62:45:a0:4b:68:14:bd:da:7f:43:34:23:d3:0a:
51:22:58:7b:e0:61:65:ca:d8:23:ce:fb:36:6c:0e:f8:7f:11:
89:55:03:cc:d8:48:f5:8e:90:32:d4:b1:23:36:0a:64:1b:19:
86:d6:a5:4d:a2:18:8b:73:3f:09:37:cc:a0:eb:e7:8f:81:e6:
ed:b7:e0:33:fe:74:ee:43:7c:34:4e:eb:07:dd:24:c1:fa:62:
e4:0a:cd:fa:2a:56:b5:64:70:c4:07:fc:b0:31:5d:18:51:de:
48:26:5d:7a:9c:28:68:71:04:d2:1a:80:4d:ed:f9:37:87:64:
00:8a:2a:6a:f1:47:ce:f3:fd:3d:e1:f6:a8:90:a6:8b:9a:cf:
d4:a4:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:19 2025 by rpki-client