Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier: TaGUOhk8xJEU+w4vlvbFJB5xW5Pn6zH7obXHptZGjTE=
Subject key identifier: D0:06:10:02:A4:15:E9:43:DC:C1:3E:3F:F8:66:C8:60:E4:7F:1E:0B
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer: /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial: 68A7A4F7FD67FE1829257631849288C52C864DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number: 0188
Signing time: Sat 28 Jun 2025 16:38:58 +0000
Manifest this update: Sat 28 Jun 2025 16:33:58 +0000
Manifest next update: Sun 29 Jun 2025 17:43:58 +0000
Files and hashes: 1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: W0IpgXnVmIfT5WDdyzNTl3SrV+Y9j7zkz2XO+kZzXRA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a7:a4:f7:fd:67:fe:18:29:25:76:31:84:92:88:c5:2c:86:4d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Validity
Not Before: Jun 28 16:33:58 2025 GMT
Not After : Jun 29 17:43:58 2025 GMT
Subject: CN=D0061002A415E943DCC13E3FF866C860E47F1E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:2b:67:19:2c:be:38:8a:92:59:5f:f8:f7:
4a:6d:de:93:d1:52:5b:e3:d6:da:e8:48:e1:45:74:
c8:ec:ba:5d:a6:61:42:5f:6f:87:70:3e:0b:92:b1:
a3:e5:a9:1b:73:9f:37:ed:4e:3e:dd:5a:47:90:49:
50:9e:0f:32:b3:59:1c:91:cd:f2:97:61:39:ed:1b:
91:3c:ca:ea:6e:42:2a:6f:db:49:e2:3b:95:2b:d3:
1e:b0:a2:49:2b:5b:a5:d4:18:14:99:51:60:36:5a:
0e:e2:78:37:5b:7a:3e:2a:61:8b:3c:dd:b5:12:f0:
39:0a:25:60:9a:a6:ef:51:5a:27:48:2a:e3:54:46:
bd:e7:c1:24:02:b3:7e:09:0c:b0:b4:17:f0:7b:2d:
29:43:3f:57:30:9a:8f:4a:f0:1a:b4:21:cf:e1:8e:
7c:1b:bb:ee:b3:4b:8d:3d:4e:24:c8:cf:92:70:ba:
2c:95:d5:ca:5e:91:c6:ca:eb:fd:81:fa:fb:e8:cb:
85:88:db:27:62:02:90:ef:1f:d8:b3:9d:53:aa:37:
1c:b2:f7:18:17:d1:4b:3c:ad:7e:3b:11:41:cd:fd:
07:f5:80:81:b5:20:10:7d:06:a3:49:60:a3:0f:4c:
d3:6b:82:4b:36:30:d8:f2:1a:fd:4f:37:b3:94:b3:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:06:10:02:A4:15:E9:43:DC:C1:3E:3F:F8:66:C8:60:E4:7F:1E:0B
X509v3 Authority Key Identifier:
keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8d:35:2b:89:ff:ad:67:bf:cf:f7:68:08:32:7d:d6:32:54:
66:63:bb:9a:4c:d1:e7:cc:31:27:96:75:b2:4e:69:71:c3:1d:
79:bb:a1:77:ce:08:86:22:66:8c:23:96:9b:26:56:72:77:59:
ea:b9:49:63:20:08:16:04:32:30:00:62:28:69:26:8e:f2:57:
d2:cb:95:8e:95:9d:3e:9c:58:9f:f1:01:4d:7a:02:77:97:7d:
bb:d7:e9:01:00:c2:09:a3:9e:ef:6b:f8:15:cf:b8:ea:74:49:
99:98:91:8c:bc:73:e0:92:87:5c:6a:79:35:e7:df:7d:74:94:
be:32:da:fc:a2:b7:ab:aa:87:a1:cc:4f:40:56:7c:66:d5:74:
71:ff:3a:a7:ec:8c:a3:37:f8:68:26:42:87:15:d4:55:e0:4f:
32:97:4d:f1:fb:d1:70:7b:c3:19:0c:3d:13:21:5c:93:49:26:
40:7f:3a:ef:02:89:10:cb:a5:b7:bf:c0:14:97:78:59:c6:84:
cd:de:e9:10:62:1e:49:20:95:c6:90:1c:2d:16:33:76:ee:bc:
c6:66:32:55:6a:df:9f:08:23:a5:03:8e:2e:c3:b6:f7:c9:11:
15:d6:28:99:77:cc:fe:fe:39:aa:54:9f:2f:3d:d0:b8:f0:97:
28:f2:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:05 2025 by rpki-client