Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier: 2CNZOkRn6I2C2cLwWpz/wSnfjGN4na2U0sDvSZ+pRTY=
Subject key identifier: A9:28:8D:5D:F2:BE:F5:9A:9F:8A:53:9B:BC:9C:FA:3F:6C:3A:86:E9
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer: /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial: 16128FA53D58292E9EB14E7D667CE2231EE0BE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number: 01D5
Signing time: Sat 23 Aug 2025 01:37:52 +0000
Manifest this update: Sat 23 Aug 2025 01:32:52 +0000
Manifest next update: Sun 24 Aug 2025 03:23:52 +0000
Files and hashes: 1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: dvTfMxkqUOaQlvZMcXAndVyB5TEdlz/5sA7t5Wubr/Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:12:8f:a5:3d:58:29:2e:9e:b1:4e:7d:66:7c:e2:23:1e:e0:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Validity
Not Before: Aug 23 01:32:52 2025 GMT
Not After : Aug 24 03:23:52 2025 GMT
Subject: CN=A9288D5DF2BEF59A9F8A539BBC9CFA3F6C3A86E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:36:d6:fa:1a:6b:19:6b:7d:7a:ea:65:e7:
9b:97:a7:48:4d:c6:a7:dd:a3:28:75:a3:1a:8b:f6:
d6:54:53:87:11:ff:fa:9c:4b:2e:c7:6f:86:6f:c2:
07:64:6a:0b:7e:1b:7f:d8:6a:62:60:c0:ab:b8:ad:
9c:9b:0d:29:b6:05:02:6a:be:2b:0f:3a:e9:ac:83:
7a:c3:58:ec:66:4f:31:21:74:e9:95:3c:13:95:21:
13:84:61:d9:0c:63:9c:0d:a3:bb:9b:6c:b2:49:e0:
3e:c2:59:66:c0:3e:44:47:11:40:c2:e8:63:0c:44:
68:6c:74:35:e6:fc:60:93:5c:dc:d0:87:70:72:ec:
1e:04:4e:59:46:76:e5:96:01:66:c0:7e:4c:d8:bc:
64:6b:38:eb:af:e8:35:d1:4a:a2:9f:dc:47:a5:8f:
42:03:6f:b8:f2:2c:d9:0e:0a:7e:0f:47:67:7b:22:
e5:74:95:e0:e9:5b:17:a2:f4:e8:cf:4f:af:11:4e:
86:6f:10:08:59:bd:7b:31:54:f9:8a:f1:a2:02:53:
d7:4b:10:68:2c:44:98:d6:6e:49:88:0a:4c:a4:04:
25:16:78:35:2d:14:e2:e3:e5:eb:ce:0a:22:0f:7a:
85:ca:b5:b1:db:ec:58:18:66:29:bf:3b:e2:9c:11:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:8D:5D:F2:BE:F5:9A:9F:8A:53:9B:BC:9C:FA:3F:6C:3A:86:E9
X509v3 Authority Key Identifier:
keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:29:73:a8:73:f2:5f:83:f0:f6:8b:b7:b2:16:50:73:f7:c7:
42:85:a3:69:e7:51:e7:21:62:fc:d9:65:7f:d1:4a:e8:7a:f5:
42:09:4b:4c:b4:37:b6:f1:88:31:a0:bb:9d:4d:c9:92:09:4b:
c4:07:06:a3:24:40:b7:3e:7f:1f:2c:fe:ad:88:a2:9c:d2:0e:
0c:12:39:12:14:d5:fe:d0:ce:1c:cc:1a:e7:20:ea:ed:96:a5:
b1:18:38:66:4a:9c:fc:e2:60:f2:07:27:6b:f8:15:98:af:a0:
1c:42:ee:5e:b2:d3:3d:81:72:4d:df:8d:be:32:1c:e3:4e:d6:
dd:6f:23:8b:ab:59:ec:44:64:95:75:75:5d:cf:ba:9d:6c:73:
d5:ea:82:65:ac:45:dc:df:e4:ea:c8:d6:c2:43:cc:99:36:45:
11:23:bc:07:a0:3e:6e:a6:99:60:bd:25:b2:ad:2b:30:9e:e4:
93:b9:55:4f:46:db:ef:c3:25:bb:70:e5:b4:f6:e6:21:69:ab:
dd:d6:61:e9:17:46:98:f3:d3:4b:93:93:a6:11:ba:a0:7b:f5:
06:d0:ec:32:72:25:d4:b4:76:07:a2:f9:fa:f0:54:bf:35:80:
64:ab:c2:84:99:f3:67:61:de:90:d5:a7:d2:ab:28:15:0c:f3:
f3:34:fa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:00 2025 by rpki-client