Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: ZTPDrpokSc18zFdxK956CY4Vwt7Tq6NQ+ujJqKd1xE8=
Subject key identifier: 55:FE:74:02:28:46:88:70:BA:7A:44:53:AF:50:A9:31:48:FA:31:40
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 02BE66FEFEC36D3B8FC431C5190FC51D51D670E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 031E
Signing time: Fri 22 Aug 2025 19:29:34 +0000
Manifest this update: Fri 22 Aug 2025 19:24:34 +0000
Manifest next update: Sat 23 Aug 2025 21:24:34 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: DbVVZ3WUeQWs2mZsPFeC2IlmIiY8soQT/Urm+FrRDJo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 21:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:be:66:fe:fe:c3:6d:3b:8f:c4:31:c5:19:0f:c5:1d:51:d6:70:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Aug 22 19:24:34 2025 GMT
Not After : Aug 23 21:24:34 2025 GMT
Subject: CN=55FE740228468870BA7A4453AF50A93148FA3140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:03:5d:3d:58:69:fe:3e:0a:55:e2:cf:16:
72:ef:79:0a:40:38:09:e7:ff:a6:75:1d:0c:b2:27:
3d:1c:59:b6:99:c8:89:46:33:df:e5:28:ea:e7:66:
f0:5f:25:18:ff:43:dd:6d:27:9e:7d:81:80:2a:d2:
92:43:47:d4:3f:9f:44:ef:7a:a2:1d:3e:c2:f4:b6:
56:8f:16:a7:7d:45:74:b1:80:7e:47:5a:8e:2d:f6:
cd:e6:e9:a5:d5:3d:c5:74:ee:c1:ff:8c:d5:74:81:
1d:5c:52:7d:34:79:97:3d:8f:cf:a7:ec:99:b0:5b:
31:7b:25:fc:23:f5:7d:95:07:35:05:19:e4:9d:f8:
2e:17:3c:6f:08:d6:56:5d:92:b3:a6:e9:92:55:59:
1a:80:4f:c5:e4:5c:2a:9f:84:69:aa:3b:22:22:df:
23:f9:d0:49:71:7a:de:97:79:be:c2:da:66:77:d7:
9f:1a:e1:f7:e0:67:2e:7c:a0:30:56:99:e0:ab:87:
7c:4f:42:8c:72:f4:31:c6:6b:6f:85:ec:ae:e6:b7:
f6:7b:85:db:7a:a9:87:d2:be:95:66:06:1c:4c:a0:
b7:1f:42:e0:c7:4b:94:6c:b8:6c:10:b6:a1:da:d6:
f6:f0:e8:b8:96:73:2e:a8:0f:9e:40:9b:21:c8:a1:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:74:02:28:46:88:70:BA:7A:44:53:AF:50:A9:31:48:FA:31:40
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:51:65:b1:46:5a:8e:06:06:9b:f5:a6:57:9e:13:20:66:ca:
38:cf:06:eb:70:0f:c3:7c:a4:11:13:c4:00:a5:26:9e:78:b8:
4a:7b:ff:5c:1b:29:80:36:58:8f:32:b1:04:88:ef:19:5d:d3:
17:1e:78:23:1f:c5:b7:8d:5e:bd:b9:cf:47:eb:2c:ac:73:77:
ef:b5:e5:ec:74:7e:45:8e:7a:2f:a6:a9:8f:7d:e7:c3:35:fa:
ab:ea:d0:75:90:89:a4:3f:35:08:ad:79:6d:36:7e:43:be:46:
6a:35:40:8f:dc:4e:c9:8f:d4:6b:6a:0c:3a:ac:8a:2d:40:a7:
6a:da:7f:1d:f5:e1:50:fd:a1:3a:ca:45:33:02:f8:b1:fd:63:
21:7b:5f:17:8d:12:b0:7e:13:ed:15:e9:5a:1e:ec:bc:47:ed:
dd:50:d1:a8:a8:7a:83:7a:b5:d8:9c:27:0d:7e:21:a2:77:82:
78:19:f3:90:77:0b:01:00:db:9e:fe:a9:84:0f:99:eb:cf:5d:
53:82:7d:b4:96:e6:7a:47:54:17:79:08:3a:d3:b1:45:25:ee:
3d:eb:7b:92:15:f6:17:fd:2c:a7:b2:d1:7c:ff:12:6e:f0:fc:
e4:8d:2f:eb:06:9e:1f:43:72:3d:9b:83:96:ec:12:25:21:34:
7b:24:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:45 2025 by rpki-client