Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
File: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft (raw, json)
Hash identifier: 1o3M7EtmCyRlRxdfzdJZgaZdT/TuIOlLKDnvD7Qwz7A=
Subject key identifier: CB:A9:B4:77:DD:4E:B5:A8:39:D2:1A:94:4B:9F:F4:B1:D1:62:05:0A
Authority key identifier: AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
Certificate issuer: /CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Certificate serial: 4A49821779C07CD869BB4009157CDB92FC13310F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
Manifest number: 0187
Signing time: Sat 28 Jun 2025 10:20:56 +0000
Manifest this update: Sat 28 Jun 2025 10:15:56 +0000
Manifest next update: Sun 29 Jun 2025 12:46:56 +0000
Files and hashes: 1: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl (hash: r4xcgkCJqttHM5H4FU9Ij/I7TBoGKIRaFqKl2+kbJDI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 12:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:49:82:17:79:c0:7c:d8:69:bb:40:09:15:7c:db:92:fc:13:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Validity
Not Before: Jun 28 10:15:56 2025 GMT
Not After : Jun 29 12:46:56 2025 GMT
Subject: CN=CBA9B477DD4EB5A839D21A944B9FF4B1D162050A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:ef:99:bf:6f:26:46:fb:3f:f9:34:46:8a:
ef:6f:93:7f:f7:8b:3c:6f:b9:32:7b:d9:f2:7a:64:
78:a8:16:01:dd:f3:0b:41:29:4e:8f:b1:d4:4d:c3:
ef:97:ce:ad:af:5a:fe:24:17:7a:c0:67:8c:e7:11:
4c:b3:7d:1e:ed:40:71:01:f1:c0:10:6c:42:03:10:
e2:2c:5f:50:29:c8:2e:fb:0e:70:1e:f7:09:62:ec:
b4:04:aa:fa:24:31:5b:16:75:09:7d:3b:f2:82:79:
6f:80:02:ec:25:df:d4:0d:01:27:28:0c:ae:4a:ad:
d1:e1:93:6c:ec:33:48:62:d7:25:1d:82:37:88:4d:
8c:63:36:a0:b1:7e:83:b7:88:dc:50:80:a6:14:a1:
bf:33:e2:6e:04:bb:e3:dc:fe:4d:cd:a3:b1:f4:5d:
03:35:9a:e3:3c:70:93:9c:9e:dd:b0:20:86:90:ef:
53:f1:ec:af:09:0e:2f:c7:9d:9e:15:22:9f:6b:c3:
c6:35:67:ad:9e:1a:3a:a5:99:9d:29:31:02:d3:3d:
21:0e:dc:e2:77:97:3a:e7:c7:34:ea:78:b7:92:43:
95:da:0c:ad:1d:17:6f:f7:45:11:62:a9:14:43:2c:
0a:25:db:2b:76:b5:f1:1c:4c:a6:40:6b:3d:d0:3f:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:B4:77:DD:4E:B5:A8:39:D2:1A:94:4B:9F:F4:B1:D1:62:05:0A
X509v3 Authority Key Identifier:
keyid:AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:81:91:53:d3:0d:d7:8d:26:fd:f7:7c:5d:5a:5a:7e:a1:dd:
d0:3e:3c:9f:d2:8d:dc:63:a0:00:e6:a6:34:e7:a9:01:0c:55:
f1:b2:0b:6a:6d:62:d7:63:6b:9b:d1:d2:1e:bc:13:41:78:b3:
6d:b9:07:d7:f2:86:2c:e6:4e:90:1e:f6:ed:3c:76:00:0d:44:
08:ae:2e:0b:44:2c:78:3b:68:6f:76:2f:98:f3:fc:76:43:b7:
07:af:a8:93:4e:bc:1c:2d:d4:d4:66:ca:ad:e4:3c:ad:bd:c6:
78:ae:a1:d9:93:10:e1:f8:b4:5d:b6:09:ed:df:57:1e:da:02:
cc:a1:24:01:8b:f0:df:a2:0b:44:8f:d7:bb:d4:93:a5:38:16:
ff:50:58:c0:92:e3:85:7e:17:78:6a:4b:4a:bf:9c:c0:34:a0:
ca:2b:d6:f8:5f:02:3a:a6:05:d0:5f:9d:3a:ff:b2:eb:81:c9:
30:d4:2f:10:e1:41:17:dc:8e:7e:a3:42:2f:91:ef:60:d5:0a:
1a:19:d2:da:35:87:6e:ca:96:bd:31:5a:3b:ce:57:e6:6d:22:
d5:b2:0b:72:49:42:0d:af:4d:8f:36:44:15:5f:f8:03:7d:f0:
96:7c:6f:d4:ae:b0:a2:7a:46:30:4d:6f:97:9a:5d:87:24:af:
1c:d9:1b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:53 2025 by rpki-client