Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: kdRET7+NBRr+NN7XLYQ23utpUk4HTgBzmg0gzk0/Qeo=
Subject key identifier: B4:2C:5E:0D:65:AA:5E:29:EF:C9:1C:02:80:F2:52:DC:A5:CA:00:0B
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 550FC8B305201C89E8187EA21DF766784A8671A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 0173
Signing time: Sun 19 Oct 2025 02:04:27 +0000
Manifest this update: Sun 19 Oct 2025 01:59:27 +0000
Manifest next update: Mon 20 Oct 2025 04:17:27 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: B9M2mpVyHTq5Fa65N7+ybF87+PACYuapWK5PIalAyoE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:0f:c8:b3:05:20:1c:89:e8:18:7e:a2:1d:f7:66:78:4a:86:71:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Oct 19 01:59:27 2025 GMT
Not After : Oct 20 04:17:27 2025 GMT
Subject: CN=B42C5E0D65AA5E29EFC91C0280F252DCA5CA000B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d7:c4:6f:31:30:15:a7:3b:1b:1b:d1:fa:36:
86:89:63:e5:4e:31:0d:a6:cd:68:5c:da:76:ff:92:
a1:65:a8:9c:16:08:aa:12:95:46:a5:01:0b:7f:4b:
9b:d1:5d:02:a1:11:9c:fe:dc:7d:82:c8:b5:c8:8f:
3d:31:42:9c:f0:c4:22:8e:31:f7:3a:95:17:2d:78:
56:ec:4e:33:66:d6:e7:b8:ef:ee:61:d4:23:84:5b:
9d:87:2c:a0:4c:5c:86:48:b9:26:84:5e:50:31:3f:
8c:1b:e4:90:d4:ef:f0:c5:25:a9:90:f1:cd:7e:f8:
80:52:54:c5:dd:b7:52:55:17:1e:d9:3e:c9:e8:71:
fc:cd:ad:0d:13:0b:0b:67:b1:c2:55:81:9c:0d:a3:
0a:5b:82:87:4f:74:8c:04:1f:45:96:43:6c:99:87:
da:d7:79:f4:05:8b:66:c2:43:29:1d:ba:5d:ac:cf:
4d:8e:26:89:ca:32:91:42:a1:53:3c:86:5b:f1:c7:
d9:a4:2c:c4:f3:d3:2f:3a:05:a8:dc:6d:89:c5:ee:
d1:25:4c:9e:60:f6:cc:19:15:fc:fc:33:78:38:8b:
3a:ec:65:c6:9d:35:ad:ad:c1:6e:b5:80:6b:c1:d4:
4d:bf:8d:80:69:57:c4:9f:72:32:22:21:21:49:2f:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:5E:0D:65:AA:5E:29:EF:C9:1C:02:80:F2:52:DC:A5:CA:00:0B
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b6:51:fc:9b:49:ad:77:da:74:a8:98:79:d2:0f:52:fe:fe:
05:bf:35:c3:55:ee:62:2e:b1:91:a5:6e:34:d0:78:ab:67:ab:
a2:29:aa:4c:ea:32:2d:cf:43:0a:00:7c:e8:b3:75:97:c6:53:
0f:4e:63:b0:a0:c5:32:29:9e:2a:b0:c2:20:44:cb:40:f9:af:
69:05:34:8f:c1:e7:4f:7d:4d:e4:7e:0c:e7:d2:11:ad:1b:54:
51:78:d1:15:2e:a8:bb:bd:fb:d1:bd:9e:b3:0f:8b:35:cc:ee:
f2:15:a1:4d:de:82:e2:73:b7:f1:53:09:b3:00:6f:6f:5c:84:
bd:4e:45:49:6c:a9:ce:a6:2c:82:12:dc:61:41:56:c9:25:8a:
db:ae:6b:aa:12:41:a3:a8:19:62:81:e9:47:2f:1b:5d:c7:4f:
bf:6d:45:4f:db:ef:d8:57:29:3a:c6:5a:03:46:d0:86:d5:7f:
0d:6e:d8:ab:13:5f:44:1a:0a:0e:3a:0e:f2:01:8d:de:25:d4:
24:86:d2:e2:7c:7f:bb:3f:31:e1:64:59:ec:5a:b5:66:83:c5:
d4:c3:0d:a9:4c:c2:80:9d:f6:3b:4e:f6:8f:0c:b4:a6:68:ff:
ba:a3:83:46:a3:7d:43:d3:4b:8e:d9:ba:b1:41:0b:a0:19:98:
e4:fe:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:20 2025 by rpki-client