Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier: tYXjFVaqKN1EqB9/JpjJLd7psFNBmVn6LFRcgjvv/yY=
Subject key identifier: FA:05:2E:E1:89:45:3D:13:AD:9F:B7:6F:AE:B6:52:03:6B:2B:79:82
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer: /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial: 4597681AA86CA1870D88DEF52CF1961134F25E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number: 01D0
Signing time: Sun 19 Oct 2025 14:42:46 +0000
Manifest this update: Sun 19 Oct 2025 14:37:46 +0000
Manifest next update: Mon 20 Oct 2025 15:29:46 +0000
Files and hashes: 1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: Z6eUb0A4t9D5UB8uZ3LIJd0qfAe2z3qhAWZ2MgMVbC8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:97:68:1a:a8:6c:a1:87:0d:88:de:f5:2c:f1:96:11:34:f2:5e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Validity
Not Before: Oct 19 14:37:46 2025 GMT
Not After : Oct 20 15:29:46 2025 GMT
Subject: CN=FA052EE189453D13AD9FB76FAEB652036B2B7982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:33:c4:e1:c2:9f:5e:22:88:b2:8a:b2:06:
d2:d4:d5:14:70:4e:71:fa:95:31:78:6c:c8:c1:10:
4a:3b:a9:ec:6b:8a:f3:a1:52:93:c8:5c:af:7b:ac:
b4:c8:a6:72:fa:b4:21:2a:36:03:cd:19:ba:bf:43:
2f:a9:77:1b:07:31:27:4b:1c:2c:81:94:a7:13:f0:
d5:5c:a7:40:d8:e6:85:d3:84:b8:4d:c6:dd:36:70:
ef:d5:81:ae:94:a8:04:73:0b:ec:6d:bc:9f:d6:ab:
25:6c:ca:b7:cb:92:fb:32:71:11:b5:54:70:6c:7e:
45:e7:37:77:25:57:48:c5:f9:e7:9d:90:f6:98:fd:
b7:4e:4a:dc:2b:7e:92:cf:95:9d:d1:16:47:8e:2a:
9b:c2:86:78:be:92:44:87:a0:4f:e9:fa:ed:2f:fc:
f0:0f:8a:34:2a:74:a9:5a:45:ac:f1:06:87:a2:59:
02:8d:e3:f0:65:0f:dc:6a:fa:09:b4:a7:4a:c7:c2:
17:3d:f8:b4:15:66:32:59:6c:71:ec:98:fe:74:bc:
e9:b2:27:9e:8c:a4:59:d1:aa:86:bb:35:77:1c:53:
e7:ce:c9:bb:f5:9f:3d:e2:dd:94:b7:0c:c2:d8:d3:
4f:03:87:87:d3:ec:25:3e:6f:60:90:6f:da:7f:4c:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:2E:E1:89:45:3D:13:AD:9F:B7:6F:AE:B6:52:03:6B:2B:79:82
X509v3 Authority Key Identifier:
keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:98:b4:f8:e6:0c:85:0e:f0:92:1d:be:47:dc:2d:92:ce:
aa:91:62:69:dd:8c:25:9f:33:f0:9d:31:88:c2:6d:16:fb:97:
e9:c6:f2:98:29:01:68:57:89:65:d4:99:5d:9d:14:c4:70:7b:
a8:c1:61:4e:3f:1b:4d:cc:a5:18:d2:4b:4e:d0:24:e4:b1:37:
c1:ff:0a:dc:7d:a1:e3:34:54:77:89:53:ba:09:2b:00:c1:db:
0a:75:75:d1:c4:03:dd:77:19:64:f2:8f:a6:ac:1f:b0:95:51:
6f:d1:54:30:d1:d8:71:60:03:aa:43:4a:a3:72:9c:5f:21:a7:
32:7f:e2:6b:51:a4:38:4a:9a:b7:92:ba:5e:22:53:71:7f:c1:
57:dd:83:3d:16:b4:fd:83:5c:00:88:36:b2:8d:4c:58:5c:fa:
dc:f4:33:e6:9b:97:a1:00:83:cf:cb:a2:54:78:4c:56:76:c9:
53:66:01:d7:97:80:9e:49:f9:1d:3b:1b:83:95:69:72:54:ca:
9d:e8:9d:92:15:fd:a5:32:9e:6c:3e:0a:25:fe:2e:11:eb:89:
cc:9f:9b:86:e4:6c:50:7f:21:f5:ee:0d:0a:8e:0c:aa:12:0d:
da:9e:09:bb:08:ed:72:d5:ab:93:52:25:84:77:da:04:bd:1b:
7b:3f:b9:c4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURZdoGqhsoYcNiN71LPGWETTyXgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVkYmQ2ZTc5YzY4OWM1NmE4NGZhNDZjZDdjOWZhMzE1
MWRmZTBiYjAeFw0yNTEwMTkxNDM3NDZaFw0yNTEwMjAxNTI5NDZaMDMxMTAvBgNV
BAMTKEZBMDUyRUUxODk0NTNEMTNBRDlGQjc2RkFFQjY1MjAzNkIyQjc5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrDPE4cKfXiKIsoqyBtLU1RRw
TnH6lTF4bMjBEEo7qexrivOhUpPIXK97rLTIpnL6tCEqNgPNGbq/Qy+pdxsHMSdL
HCyBlKcT8NVcp0DY5oXThLhNxt02cO/Vga6UqARzC+xtvJ/WqyVsyrfLkvsycRG1
VHBsfkXnN3clV0jF+eedkPaY/bdOStwrfpLPlZ3RFkeOKpvChni+kkSHoE/p+u0v
/PAPijQqdKlaRazxBoeiWQKN4/BlD9xq+gm0p0rHwhc9+LQVZjJZbHHsmP50vOmy
J56MpFnRqoa7NXccU+fOybv1nz3i3ZS3DMLY008Dh4fT7CU+b2CQb9p/TKeBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+gUu4YlFPROtn7dvrrZSA2sreYIwHwYDVR0j
BBgwFoAUXtvW55xonFaoT6Rs18n6MVHf4LswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl
ODM3LzAvNUVEQkQ2RTc5QzY4OUM1NkE4NEZBNDZDRDdDOUZBMzE1MURGRTBCQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1h0dlc1NXhvbkZhb1Q2UnMxOG42TVZI
ZjRMcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z
M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMC81RURCRDZFNzlDNjg5QzU2QTg0
RkE0NkNEN0M5RkEzMTUxREZFMEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATN+YtPjmDIUO8JIdvkfc
LZLOqpFiad2MJZ8z8J0xiMJtFvuX6cbymCkBaFeJZdSZXZ0UxHB7qMFhTj8bTcyl
GNJLTtAk5LE3wf8K3H2h4zRUd4lTugkrAMHbCnV10cQD3XcZZPKPpqwfsJVRb9FU
MNHYcWADqkNKo3KcXyGnMn/ia1GkOEqat5K6XiJTcX/BV92DPRa0/YNcAIg2so1M
WFz63PQz5puXoQCDz8uiVHhMVnbJU2YB15eAnkn5HTsbg5VpclTKneidkhX9pTKe
bD4KJf4uEeuJzJ+bhuRsUH8h9e4NCo4MqhIN2p4JuwjtctWrk1IlhHfaBL0bez+5
xA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:46 2025 by rpki-client