Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: dIyXKI1vZ2UhhCM1gDDtKRGnFNGsYra7e6YGvI5NPhY=
Subject key identifier: 68:53:60:64:74:C3:ED:38:0D:A4:35:24:88:E8:AE:8F:56:85:CF:6D
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 14CB4AA36ADC015B747DD573B035F1897C575C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 01BA
Signing time: Sat 28 Jun 2025 04:37:59 +0000
Manifest this update: Sat 28 Jun 2025 04:32:59 +0000
Manifest next update: Sun 29 Jun 2025 06:18:59 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: KtTyGe7ohWEt9hmRO7lG83lg+p/8c4xTwNKw7O9vJdA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:cb:4a:a3:6a:dc:01:5b:74:7d:d5:73:b0:35:f1:89:7c:57:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: Jun 28 04:32:59 2025 GMT
Not After : Jun 29 06:18:59 2025 GMT
Subject: CN=6853606474C3ED380DA4352488E8AE8F5685CF6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:6c:f9:4d:74:c9:31:cf:13:b6:1e:7c:3f:
4f:b7:44:94:d2:8d:7b:59:4d:ad:3d:50:a3:25:a1:
50:93:48:09:5f:7a:3d:29:72:a8:92:85:d3:b4:21:
af:54:a5:81:52:c0:ab:7f:c8:dd:a4:79:13:54:80:
36:bf:c8:af:87:01:f8:6b:9a:87:30:4c:18:6a:53:
8a:f7:f4:7f:a1:17:01:e5:c0:fe:f6:a4:02:cf:d6:
7e:22:74:2c:c2:76:be:e6:5f:08:67:89:1a:55:4f:
aa:d7:4b:f5:9a:89:be:20:45:d1:f0:37:9b:6e:65:
bc:9f:17:9f:31:e2:5c:24:3f:7f:5c:5b:0a:16:a6:
b5:68:81:14:7d:a6:ac:67:2e:77:12:66:01:3f:28:
cb:13:0e:63:8b:09:2b:92:b9:a3:d0:35:f2:f4:bd:
d7:4e:12:d0:dd:29:a0:2a:61:2b:73:08:f4:8d:04:
01:c2:d9:d5:8f:63:b5:69:ac:cc:a8:99:06:db:df:
21:0b:0a:3e:03:96:7c:dc:36:46:2a:99:a4:d5:6b:
a0:1b:40:1b:38:31:4d:b6:35:99:b8:5e:1c:ec:78:
12:0f:fc:f0:bd:b4:30:47:48:25:1f:0d:54:34:3b:
75:89:1f:d6:9e:00:71:7f:f3:f0:ab:e8:d7:86:90:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:53:60:64:74:C3:ED:38:0D:A4:35:24:88:E8:AE:8F:56:85:CF:6D
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0e:9b:4b:6d:4f:fc:ed:e8:56:bb:e7:99:27:d1:7a:42:5a:
6f:4a:5d:b9:86:0c:27:e2:30:5a:8e:f4:47:08:20:13:b5:a9:
05:ff:70:66:1c:d1:e4:35:6c:b6:4b:0d:7e:d7:02:f8:e0:80:
dc:ce:6f:3f:33:34:be:12:00:31:00:c5:a9:52:69:8d:56:e6:
b5:22:bc:c0:e9:1c:0a:b4:b5:5a:29:e8:05:fc:3e:59:e0:29:
2d:63:4d:d0:54:38:37:fc:30:1b:db:7e:b9:0f:d8:87:7f:fe:
60:7b:c8:24:d4:a9:c0:d0:e2:28:2f:1b:9d:0d:f1:46:f9:05:
3e:29:be:a4:0c:04:53:1f:49:d1:92:dd:97:7a:0e:5c:e3:82:
ba:2f:f1:be:1c:9d:44:5e:8b:15:0d:e4:1f:ed:a7:dc:00:de:
9d:5b:4a:a1:a5:14:6a:fd:e4:ee:55:77:82:e7:b7:00:bd:66:
3c:05:c1:05:79:7d:39:a6:b3:45:49:70:72:ab:07:d9:e0:85:
64:6d:ab:e5:f4:4c:c1:7a:69:c0:dd:61:e9:a3:4c:ce:e5:c5:
f0:df:e8:77:f0:f0:72:75:fa:7a:36:17:e1:26:9c:0a:11:32:
96:35:00:ba:87:6a:55:79:84:8e:64:1e:cc:c5:90:f0:a1:5d:
de:fe:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:34 2025 by rpki-client