Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: r9kaahb6EQcyWIU3aV43JTXcNAKMcZBJ2aSMgwQiWv0=
Subject key identifier: FD:12:C8:05:6D:30:30:B1:D5:88:C9:86:56:F7:17:B8:B6:45:42:32
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 46E3A27B2678BCE5EAFD644FC64222DCE0B8505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 0220
Signing time: Sun 19 Oct 2025 02:38:58 +0000
Manifest this update: Sun 19 Oct 2025 02:33:58 +0000
Manifest next update: Mon 20 Oct 2025 05:13:58 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: 8vJofnLMTWXmi5w7Aeb8xD3NerRxpIAADvFmH+bseK8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e3:a2:7b:26:78:bc:e5:ea:fd:64:4f:c6:42:22:dc:e0:b8:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: Oct 19 02:33:58 2025 GMT
Not After : Oct 20 05:13:58 2025 GMT
Subject: CN=FD12C8056D3030B1D588C98656F717B8B6454232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0f:bc:46:8d:96:1b:58:da:6d:a1:45:28:7e:
e3:5a:83:a7:33:c4:2a:ca:a0:18:32:89:5a:81:87:
2e:fe:a5:dd:7c:5a:2a:62:d9:8a:d7:5f:6a:e5:ea:
a1:ea:a7:81:d4:bc:c8:87:9e:79:62:af:e0:56:fc:
79:b4:af:ef:6a:8b:65:44:23:97:3c:67:c5:da:f5:
be:d7:cb:e9:e3:da:e4:84:c6:cf:ed:8a:0f:cb:76:
ac:b8:83:8f:0f:ad:2b:8e:5a:0a:1d:f2:91:87:ed:
dc:77:51:ca:c3:a1:93:32:d9:3a:57:c3:5a:92:89:
04:06:40:3c:44:73:88:86:1f:02:9b:9d:58:ba:f3:
fe:ad:da:e5:d3:8d:69:8c:09:63:95:4a:82:de:52:
15:6d:f7:df:03:f2:ca:a1:35:35:6f:e6:b3:a4:5e:
27:f8:57:44:02:52:19:cf:25:c7:37:7a:a1:bd:fa:
59:30:12:c6:15:23:64:37:07:5d:7c:41:04:a7:66:
73:d8:02:fa:19:df:9e:9b:50:d9:d4:9e:a1:0c:12:
fa:a3:f2:bc:d5:76:46:ac:62:3f:87:62:23:87:01:
c2:6c:6a:ec:c8:1c:f6:54:23:d7:fd:55:4a:32:ec:
da:2d:f6:9c:82:fb:af:8a:ab:db:90:4f:93:80:f5:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:C8:05:6D:30:30:B1:D5:88:C9:86:56:F7:17:B8:B6:45:42:32
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3b:2b:9a:df:5a:fa:cd:46:22:91:a1:08:62:f7:8e:ab:66:
28:17:aa:da:db:c2:dd:b9:a7:27:b3:49:53:da:2e:57:d5:f2:
8a:51:3f:5b:54:25:d5:ba:fb:12:f9:75:7a:aa:47:9c:75:00:
a7:5b:24:79:2b:79:ae:73:3f:cc:63:1f:07:7a:ef:84:3d:1f:
a0:94:c0:69:b8:05:8d:97:98:85:53:23:b2:c3:27:b6:e4:97:
a8:5b:cf:d6:3d:3f:58:03:84:0a:fa:31:bf:86:62:5d:cc:9d:
0c:0a:15:39:8d:1e:e0:4d:7d:eb:fc:81:61:84:79:33:f5:4c:
20:2f:77:f5:1b:d9:73:b4:b5:11:5a:5f:fd:2b:f5:79:7a:a9:
71:ec:36:ef:01:08:47:7c:96:8b:e4:ab:20:80:df:9e:5a:e0:
52:11:69:89:4b:6d:7a:fe:c7:19:c8:59:9b:a9:9b:b5:d5:e7:
3b:57:a1:d5:06:7b:77:d7:92:6a:52:4c:5a:ee:cc:3f:03:f1:
93:4d:8a:8e:bf:6f:bc:64:03:01:37:be:a8:3c:8a:ed:9c:64:
7a:ba:d8:5f:cf:a4:42:17:6a:17:53:4b:05:7b:80:fe:57:d7:
0e:31:6a:db:c9:a9:6f:b3:28:4d:d5:97:7d:d4:2f:2d:6e:c9:
e1:36:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:24 2025 by rpki-client