Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: NefCJOzwt4ThLpbguzqaU704t/V/eJ2kzLdluXN1Ot8=
Subject key identifier: C2:D3:AF:16:ED:6C:FA:9F:18:58:39:E2:B5:6E:19:8F:42:B5:ED:DD
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 4854342078163A165F28146B106479B02F90D3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 019F
Signing time: Sat 23 Aug 2025 03:51:59 +0000
Manifest this update: Sat 23 Aug 2025 03:46:59 +0000
Manifest next update: Sun 24 Aug 2025 06:23:59 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: QXi5ylx1yI85HOCIPQocMrLdLJv1HeCKUqey9uI3FlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:54:34:20:78:16:3a:16:5f:28:14:6b:10:64:79:b0:2f:90:d3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Aug 23 03:46:59 2025 GMT
Not After : Aug 24 06:23:59 2025 GMT
Subject: CN=C2D3AF16ED6CFA9F185839E2B56E198F42B5EDDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:5e:88:f0:8a:21:69:0b:23:8a:27:c0:e5:
4f:dd:a6:89:21:b6:fc:ea:98:df:12:b4:ca:e1:74:
99:57:76:f5:75:5c:03:ad:60:54:da:bd:3b:c1:a9:
7d:ee:0a:c2:64:55:ed:a7:f6:a6:6e:24:64:cd:1b:
4b:3f:e9:e6:9f:6a:43:ac:55:98:4f:8b:ec:68:88:
0c:2c:37:40:04:e5:74:7c:de:01:37:ab:ef:09:af:
e5:fd:a3:4c:02:43:d8:94:d3:2a:8d:66:a3:13:07:
cf:d3:b9:f0:44:27:53:42:a6:d8:d5:cf:e7:80:8f:
18:56:3b:e3:73:1e:1b:a6:56:e0:d5:85:4a:79:f0:
34:83:dd:44:d1:28:f5:e8:93:13:e7:51:51:45:14:
0f:01:5a:7b:e9:71:5c:ca:2a:eb:24:b6:c3:0e:6b:
02:32:28:eb:f4:e5:d2:43:4e:71:64:9a:26:3b:61:
fe:bd:36:bb:1f:86:9d:1c:b3:8d:fe:69:39:50:c5:
95:59:11:03:60:4c:f5:58:dc:45:b0:de:4a:2a:ac:
a4:a6:bd:7d:a6:01:3b:45:89:5c:7b:3c:71:dc:33:
c5:01:28:e4:e0:ed:4a:07:0d:46:ca:35:1c:18:12:
57:38:aa:f4:8b:e5:3a:8b:44:3f:d2:c5:1e:06:37:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:AF:16:ED:6C:FA:9F:18:58:39:E2:B5:6E:19:8F:42:B5:ED:DD
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:03:ff:e3:db:4b:5c:1f:67:b9:8e:8f:d7:b5:12:a1:a0:a6:
2b:1f:a5:b3:66:c3:bc:7a:10:ff:7b:b2:9f:c3:5e:35:9d:3b:
15:c9:f8:ed:43:2f:e7:0b:87:ab:4c:f6:71:cf:4f:56:88:9a:
a1:33:ee:c7:22:63:fd:f2:97:15:d5:3f:37:2d:e8:05:f7:a4:
9e:26:98:17:a4:f8:8e:f2:b3:46:0f:30:a4:a6:dd:87:30:55:
73:95:6c:95:b0:d6:b5:b8:36:f8:77:2a:ce:70:89:57:48:b7:
9a:ad:53:99:2a:7a:50:d7:eb:ff:05:83:7d:3a:dc:a2:78:1c:
40:3c:62:db:3e:f6:5b:b6:fe:54:99:38:53:22:ed:db:e3:9f:
1d:71:f9:c4:28:19:11:c5:ca:3c:c9:68:2e:f9:94:9e:6a:85:
8c:4d:c1:05:92:4a:be:b6:94:fa:82:70:7f:24:a1:eb:b9:39:
3c:d2:b5:77:fb:dd:3c:dd:d8:b3:fa:d9:14:2e:c8:84:fb:2a:
74:67:ad:42:4b:c9:aa:08:d9:d1:a4:2b:68:ea:12:45:48:55:
44:0c:f5:5c:bd:a4:c0:77:d9:bb:87:d1:44:fb:13:c5:4c:c3:
75:0c:7f:ac:ca:1f:c0:fc:27:67:87:8f:df:2d:1b:9e:f3:b4:
ca:0f:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:27 2025 by rpki-client