Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: Y0gQDIW3M30OVJVBWIFR3jizuH9yMzPSJ+aur0XG0Hk=
Subject key identifier: 53:C5:E1:CD:66:2E:56:7E:59:31:3F:27:25:4E:4E:DE:3B:85:81:84
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 60205CD4FD429C4CABE0E035D18D3EDDAF88E791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 02D3
Signing time: Sat 28 Jun 2025 08:57:32 +0000
Manifest this update: Sat 28 Jun 2025 08:52:32 +0000
Manifest next update: Sun 29 Jun 2025 09:50:32 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: YNN3b/kNj3pTpk15U9QnKLu5mNrvLm8c1/4xqTqoPpg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:20:5c:d4:fd:42:9c:4c:ab:e0:e0:35:d1:8d:3e:dd:af:88:e7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Jun 28 08:52:32 2025 GMT
Not After : Jun 29 09:50:32 2025 GMT
Subject: CN=53C5E1CD662E567E59313F27254E4EDE3B858184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:d7:5e:23:a8:84:8a:6c:7c:47:b9:5a:1b:
2b:ab:12:60:ec:f3:d7:68:6c:bd:35:27:b4:52:2e:
bb:d0:49:04:e6:30:81:97:ac:b2:63:d4:c6:91:3b:
da:6b:e1:aa:8c:f6:00:3f:10:52:a4:12:7c:39:9e:
34:13:db:3a:3d:4a:c5:62:ad:c8:46:7c:06:39:dc:
62:c4:b9:2d:61:86:7f:48:6b:45:31:83:1f:1e:c7:
d7:a6:3b:a7:cf:3a:4e:15:30:b1:40:a3:e6:29:2d:
08:36:5e:2b:1c:53:10:f8:c2:25:e5:4c:76:9f:46:
69:e2:13:cd:c0:9e:db:f7:b2:18:aa:13:27:f7:36:
38:88:dd:79:65:e3:28:4c:c6:ca:8d:69:44:46:d5:
a0:f8:e1:9a:24:70:b6:26:41:b7:3f:3e:c8:8d:70:
10:8f:36:04:f4:47:52:59:75:5a:d3:3d:d1:6b:b6:
ea:de:39:18:b8:02:8a:d9:1e:38:9d:49:c3:31:38:
91:f5:7f:54:60:5a:fb:e4:d6:e4:b6:4f:e5:57:fa:
bb:14:fc:69:9a:17:c7:69:fe:f9:e8:cc:6b:73:18:
d5:ce:f2:89:0c:17:c4:fd:99:07:aa:4e:46:65:ae:
32:e2:9d:2d:9d:3b:5f:ad:68:eb:46:10:37:dd:d4:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C5:E1:CD:66:2E:56:7E:59:31:3F:27:25:4E:4E:DE:3B:85:81:84
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:df:d2:f7:84:35:70:0b:06:3f:a5:c3:0b:19:20:d9:06:d0:
8c:b9:bc:fb:5a:b5:21:96:e2:ed:13:3e:66:cb:a3:eb:31:21:
3f:d7:35:6a:69:49:2e:30:28:56:e4:10:80:c5:b2:00:b3:d6:
fd:b3:f9:20:bd:f8:fe:49:cd:73:0c:f1:b4:fd:a9:04:0e:07:
b2:2e:36:67:e4:4a:10:ab:0d:dd:1a:f6:c9:fc:04:65:a6:4d:
dd:b2:b9:dc:85:28:ec:12:2a:00:0f:72:ad:16:b2:30:30:27:
02:2e:89:0a:c2:78:db:cd:4b:3e:03:c1:0b:83:0f:4b:71:8d:
af:4d:d8:c1:d3:f2:50:b1:84:6b:00:21:e3:5d:bb:1b:54:ee:
88:8f:14:26:a2:ce:c2:9c:bd:5c:08:9e:9d:87:4e:05:8b:02:
99:9e:6d:a1:24:b5:94:48:18:2b:93:72:3c:8d:a7:58:fa:93:
77:ce:80:c7:ef:bd:ba:eb:a4:89:34:65:e4:ac:89:8a:a8:b2:
45:32:e4:09:3d:15:73:87:ce:ac:47:9e:f5:3d:32:b0:20:f4:
eb:e5:f2:87:1a:6a:3c:2f:dd:d7:04:49:25:5a:3c:4b:64:53:
c4:d4:92:7e:83:f6:c2:f2:9c:e6:2d:8e:3f:32:15:d2:07:aa:
73:7e:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:37 2025 by rpki-client