Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: MxghBZRc4f9iwn14HGEhsIEqVg/9H1DcPpjwvillx8A=
Subject key identifier: 4A:B9:88:C4:B7:14:7E:ED:9E:DF:4E:C7:9F:BF:86:94:F8:4C:67:F1
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 695C4D43CAF8D82707A8143EA3209D72CFEFF581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 0127
Signing time: Fri 22 Aug 2025 22:44:16 +0000
Manifest this update: Fri 22 Aug 2025 22:39:16 +0000
Manifest next update: Sun 24 Aug 2025 00:14:16 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: InXrQNZnrRIGG1SiUB1j/4kdcm1vHSGQ/Ys9QyJl5Jw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5c:4d:43:ca:f8:d8:27:07:a8:14:3e:a3:20:9d:72:cf:ef:f5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Aug 22 22:39:16 2025 GMT
Not After : Aug 24 00:14:16 2025 GMT
Subject: CN=4AB988C4B7147EED9EDF4EC79FBF8694F84C67F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:9e:c5:9e:e5:65:e8:d5:00:c5:02:a6:5a:
f5:a2:d4:11:b3:87:94:98:f3:79:c1:84:22:65:2a:
f0:c2:ba:5e:7b:70:65:21:8b:6a:e7:a7:69:7f:ad:
a9:97:db:14:db:c6:a2:11:e2:17:29:d7:82:e8:63:
b3:1f:90:64:66:1c:fa:23:5e:73:36:01:eb:c1:7e:
37:05:a5:16:aa:d4:07:5d:44:1f:61:4b:34:ed:ae:
f2:14:1e:5a:33:68:e2:6a:0d:4f:f7:3f:8b:de:7f:
11:d4:2d:11:d8:68:6d:15:04:17:93:25:93:3d:10:
85:4f:35:55:95:5c:d8:d3:2c:2d:4a:e4:86:d6:8c:
d7:45:9e:c1:cd:5a:e3:27:49:1e:c0:84:3b:bd:f4:
0e:f6:be:8d:73:9a:2e:55:83:e7:13:c6:45:97:a0:
f3:42:a3:51:d2:74:e0:fe:ec:14:ca:3d:92:eb:a1:
b0:86:87:4e:cf:5f:0d:da:1f:45:77:a2:b8:c7:bc:
c5:9f:f2:cc:51:81:80:09:99:b5:b7:12:00:f6:50:
f6:1e:e4:dd:4f:e3:4d:0d:a3:08:c7:96:23:e3:df:
b6:f8:32:08:42:20:9a:42:08:4f:00:2c:28:2d:a7:
ba:28:e9:8b:38:eb:ad:3f:c9:98:78:3d:aa:60:06:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:88:C4:B7:14:7E:ED:9E:DF:4E:C7:9F:BF:86:94:F8:4C:67:F1
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:55:f8:f5:93:2f:3e:e5:1c:58:8d:f0:b2:6e:ac:0b:e3:64:
af:fd:10:ba:df:f4:bf:7b:a6:8c:1a:9c:a6:b9:e8:aa:26:e6:
f9:3d:7b:94:5b:12:22:74:2e:5d:ed:6c:e8:f4:6f:cd:b0:07:
81:d7:e5:b3:d6:d6:f9:d1:c2:b0:f1:7d:ba:8a:b8:63:69:7a:
19:0a:4a:02:66:ef:3f:27:9b:02:f1:fe:72:16:31:6d:2a:d8:
0b:ae:29:61:ff:72:69:89:85:c9:64:a5:49:53:ce:34:64:99:
c6:1b:b6:67:e9:a7:8f:a3:ce:46:82:65:f6:a3:83:c9:90:95:
7e:10:3a:cb:b6:c6:2f:0d:1f:3f:7a:51:b0:85:91:9f:60:a1:
0b:07:e9:cf:4b:0e:3e:ab:8a:86:8b:01:ea:b8:ff:ed:5e:5f:
f7:3a:17:96:d8:5a:67:32:c9:e0:38:db:50:ae:b4:d2:fd:6b:
b2:0b:95:11:8d:3a:f0:a3:24:7e:3b:dc:a6:93:77:b9:b8:e6:
ff:b0:83:4d:c2:6e:2b:d3:d9:8b:9c:4d:0a:a1:55:23:36:02:
9a:c5:a1:03:dc:6d:40:4f:b6:55:e9:70:21:63:6d:a6:82:d5:
95:bb:be:ca:60:87:ec:56:c2:8d:71:c1:a5:02:96:13:8a:34:
b2:11:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:15 2025 by rpki-client