
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
File: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json)
Hash identifier: /ear+7oj7GrOtgZChEmVvH+3HUieVASznDF/We9O/Yk=
Subject key identifier: 7D:E4:7F:50:C1:AB:1B:07:F5:7D:CB:C7:FD:2A:C4:81:FF:E0:39:C8
Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
Certificate issuer: /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Certificate serial: 653CB0DE4483E754E287E0F0CB318EAF1191DEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
Manifest number: 022C
Signing time: Sun 19 Oct 2025 14:52:11 +0000
Manifest this update: Sun 19 Oct 2025 14:47:11 +0000
Manifest next update: Mon 20 Oct 2025 17:16:11 +0000
Files and hashes: 1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: 7wjYApo1AusgbWuhm3ZdFeWkuMWLQYFg3Ou3YBUQBYE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3c:b0:de:44:83:e7:54:e2:87:e0:f0:cb:31:8e:af:11:91:de:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Validity
Not Before: Oct 19 14:47:11 2025 GMT
Not After : Oct 20 17:16:11 2025 GMT
Subject: CN=7DE47F50C1AB1B07F57DCBC7FD2AC481FFE039C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:e0:f6:e2:57:26:1d:b4:ef:8c:e2:66:c0:
27:d8:e1:bf:fd:94:c2:91:68:84:eb:cf:67:cf:d6:
65:cd:fb:c1:b4:57:92:88:b2:ad:36:eb:7e:98:da:
0f:f3:3c:86:c4:31:9f:85:67:42:56:01:6e:a8:e9:
16:3f:76:93:4d:60:69:58:15:a0:87:92:7a:a2:3b:
9e:82:fc:56:80:ab:65:d1:75:81:88:49:fc:a5:ff:
3d:ea:20:80:22:65:6f:78:42:88:a7:84:f8:d4:ba:
2d:44:b0:a6:6b:05:89:dc:89:71:75:16:1b:bc:fb:
17:1c:af:40:af:34:e4:c7:c2:43:81:d4:3b:a3:db:
28:a0:0c:35:ea:5b:10:b1:64:ee:f8:81:9c:ff:e0:
78:3e:9b:75:c9:3d:4f:62:93:b7:eb:a5:f8:a2:de:
dd:21:e5:83:bd:45:8b:f6:f5:75:43:a7:c4:14:91:
8a:3a:0d:8c:15:b8:b3:7a:89:08:06:5c:36:b3:dc:
b4:8b:21:1d:e0:d9:97:43:1f:31:90:58:53:dc:42:
60:e2:58:fc:c9:05:a1:e4:e8:a1:a8:5c:b9:64:3e:
81:5a:dc:99:ad:42:8a:2e:8c:e2:98:c9:e3:2e:da:
36:70:db:d6:6c:c2:93:0a:7f:0f:d1:bb:e2:76:cd:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:7F:50:C1:AB:1B:07:F5:7D:CB:C7:FD:2A:C4:81:FF:E0:39:C8
X509v3 Authority Key Identifier:
keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5b:6c:50:2a:88:bc:61:57:31:22:e8:c0:aa:96:a0:d3:10:
64:96:0f:7a:4e:e7:98:c8:1b:08:5e:15:51:05:8f:62:ff:39:
78:06:31:61:d7:44:0f:2b:1b:3c:42:e9:ee:49:5c:54:f7:69:
fa:79:7d:10:b4:3e:0c:3c:f2:3e:f6:bd:9c:e1:5d:30:46:f3:
a5:c6:b8:23:3a:52:e7:ed:b9:c2:97:ff:95:82:66:2f:ca:e6:
18:36:41:6c:2f:59:ec:8a:a9:7b:bb:70:a8:f6:2b:b7:28:65:
40:e4:18:26:cf:8c:58:f2:7a:f9:d4:e3:b6:28:f0:29:aa:c2:
07:14:f9:1b:9e:3c:d9:4f:d0:80:5f:65:23:f5:ec:f1:e7:52:
87:bf:7e:c7:28:a1:64:d0:c1:10:10:74:ac:dc:2f:e8:d2:59:
bc:f3:32:1e:a8:06:2a:74:04:a8:ea:fa:8c:a3:f0:cf:e1:25:
68:ae:4b:c1:85:6e:3c:7e:d6:29:26:41:70:ab:2f:34:5d:ca:
27:46:4c:e6:33:3d:6a:96:91:36:3b:2e:d4:af:0d:c2:e2:43:
5c:49:97:56:04:17:51:a8:91:3a:38:d8:c4:3d:06:3d:06:3a:
83:b7:e8:ba:58:d6:55:81:a6:c0:d2:d4:bf:c7:62:8b:86:ec:
89:c4:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:15 2025 by rpki-client