Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: kqlyM5Z8hQSvsd08jVRBIhFdPREyyU/i3oepH2Q7bUo=
Subject key identifier: 3F:69:92:05:CD:F6:6A:46:94:BB:AC:9B:48:9F:E8:00:85:41:81:67
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 6B3B19F8C0ABF96C096C1D5BD1790F085FC2D9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 036A
Signing time: Sun 19 Oct 2025 08:35:13 +0000
Manifest this update: Sun 19 Oct 2025 08:30:13 +0000
Manifest next update: Mon 20 Oct 2025 09:07:13 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: iDFQGKG0jfLNt3ys5OArkwWFeIKiIu8v10IH0b6MZ/o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3b:19:f8:c0:ab:f9:6c:09:6c:1d:5b:d1:79:0f:08:5f:c2:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Oct 19 08:30:13 2025 GMT
Not After : Oct 20 09:07:13 2025 GMT
Subject: CN=3F699205CDF66A4694BBAC9B489FE80085418167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:42:8a:c6:9a:43:73:ac:79:3d:66:83:b4:
a7:a7:c4:a1:cd:61:f3:45:94:08:b9:2c:af:6e:a3:
d8:08:03:60:c3:77:6f:a4:2b:e3:87:07:90:4f:ed:
f2:8f:44:c4:d2:5d:52:0f:81:3c:dc:a9:3f:3f:72:
8f:ad:51:b9:5a:5c:59:bb:93:67:82:97:7f:92:c4:
50:e0:a0:9a:54:21:59:7c:5c:a0:4d:82:01:44:16:
a5:ad:56:f9:82:ca:d5:87:f5:94:a5:b7:52:b3:33:
5a:6e:30:1d:eb:74:bf:6f:f4:e0:96:67:7c:d4:7e:
b2:f6:81:8b:8e:d3:d9:18:e0:8b:c3:09:08:8c:3a:
2e:41:07:2d:f4:ec:d1:63:e3:9b:20:55:17:f9:7d:
46:d1:35:10:41:df:ff:94:1d:17:08:d2:ea:75:5b:
47:2b:6e:35:7e:3c:21:ea:31:af:69:b5:29:47:22:
17:a9:57:40:48:ac:42:db:6b:ee:6d:b1:00:a3:56:
e8:4f:ab:22:f2:52:6f:a3:89:af:77:ac:ee:55:de:
f9:24:bb:e8:81:40:67:2e:c2:71:91:89:eb:f1:6f:
46:09:c7:77:46:9e:aa:19:8f:e0:1a:9d:d6:f6:b3:
af:18:61:2a:10:e0:21:80:7d:6d:90:f5:84:79:3d:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:69:92:05:CD:F6:6A:46:94:BB:AC:9B:48:9F:E8:00:85:41:81:67
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:57:1b:ce:d6:45:88:ed:f5:72:6b:b9:ff:f3:2d:02:03:5c:
eb:b3:dd:70:82:5d:22:a4:f2:d6:dd:cf:c4:39:8f:9b:ab:7e:
57:bf:72:db:92:6c:62:b6:6d:e4:3d:20:90:40:92:03:3b:1a:
94:a3:c8:85:bc:05:7e:a9:d3:62:a9:72:29:a6:6e:22:20:bc:
9e:8d:90:35:b6:b1:3d:e9:52:ba:b8:f5:bd:2f:42:61:ad:83:
b9:53:23:cc:df:69:f5:2c:80:ba:e2:26:bc:27:f2:20:39:64:
58:81:69:b4:1e:45:9c:0c:98:82:ee:a0:ad:e1:7e:c2:e9:59:
d8:f4:89:02:6a:33:17:60:06:9c:ea:29:ae:63:43:b2:a3:88:
2e:c2:da:07:8a:6c:41:6c:24:d1:b0:63:5c:27:71:79:5d:da:
99:bf:6a:13:95:59:ee:1d:3c:d7:dd:00:d4:95:6c:35:19:4c:
39:97:5c:17:a4:dc:1a:99:65:67:55:c2:10:4c:34:0e:d6:0a:
5b:9f:2e:c1:11:5d:33:ba:d7:3d:32:2f:cf:16:d5:6d:c9:d2:
9a:f9:db:86:60:70:81:9f:41:19:d3:d4:73:94:d5:67:f1:9e:
b1:58:48:3e:b9:1c:50:52:7e:76:cd:3d:85:cc:66:38:cf:22:
65:4e:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:45 2025 by rpki-client