Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: vy/umNLRcC4hj+jd1JYkEd9CZd7mQRkMVBlPVcPkJas=
Subject key identifier: F0:39:9D:E4:72:11:D4:81:5D:5C:B0:91:5D:79:93:CB:EB:AB:BA:60
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 1441377387749BEC4B192D7234A0A305EE219605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 0205
Signing time: Sat 23 Aug 2025 05:00:03 +0000
Manifest this update: Sat 23 Aug 2025 04:55:03 +0000
Manifest next update: Sun 24 Aug 2025 06:20:03 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: SKLEE8sad2blxiVSvYkHaFdmZN+B5EzGsoWzWf9CZeY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:41:37:73:87:74:9b:ec:4b:19:2d:72:34:a0:a3:05:ee:21:96:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: Aug 23 04:55:03 2025 GMT
Not After : Aug 24 06:20:03 2025 GMT
Subject: CN=F0399DE47211D4815D5CB0915D7993CBEBABBA60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:66:95:92:1c:ae:5f:14:7f:8c:c6:ab:cb:
5e:a6:da:27:02:fa:c6:4f:35:4d:92:c6:da:d0:7d:
65:38:c9:bc:1a:b2:cd:2e:47:6c:78:d4:46:84:19:
3a:23:69:c2:ab:07:34:ad:a5:42:b4:24:1c:71:a7:
ac:79:8d:c8:7a:05:b1:84:da:f5:51:25:b0:25:bc:
b2:e2:e6:a1:5f:4e:73:bc:71:3b:f6:1f:27:dc:58:
4f:6f:f3:06:cb:7e:a9:c8:1d:86:a7:be:cc:fb:f7:
60:f7:0a:0f:ef:2f:e8:3c:eb:d0:0d:4e:1d:5d:4b:
59:e9:f9:eb:78:d9:77:6b:7a:50:9f:13:12:ba:be:
8b:b1:bc:1a:d7:d6:92:a5:c7:0c:14:96:a5:79:35:
ac:5e:1e:50:49:75:7a:37:22:ee:54:60:7c:69:00:
8b:c0:a4:02:ab:cf:7a:e7:f1:c6:99:5f:6b:90:ce:
d1:49:29:77:33:fd:11:12:64:ae:87:b1:53:d5:96:
32:c2:89:83:ee:9b:ed:e4:37:bc:33:0d:16:13:da:
4a:91:83:b3:d2:2b:c0:49:e2:46:65:74:c8:dd:d8:
f7:9b:23:ed:44:48:6b:c2:e0:39:8d:0f:3f:d3:4c:
7c:e0:e1:3c:5c:7d:cd:c6:7e:05:96:00:4d:39:3a:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:9D:E4:72:11:D4:81:5D:5C:B0:91:5D:79:93:CB:EB:AB:BA:60
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e2:ed:96:a7:b4:a5:75:62:42:68:69:0c:6d:3a:1a:96:1a:
74:c7:b1:be:c0:cc:a0:77:54:a0:31:b9:2b:0e:5f:10:1d:2a:
41:69:19:ba:52:b9:93:da:19:c4:5f:66:2f:f3:2b:57:11:de:
51:2d:27:d0:ad:a7:ac:0f:2b:23:13:05:09:c2:8b:e8:1a:51:
94:2e:9f:60:f5:6b:98:a3:22:dd:79:e5:76:6e:7a:b9:b1:22:
7b:8f:e5:a6:e9:e3:2a:56:02:bb:93:e8:28:59:6e:89:da:f9:
ba:21:0c:55:f5:1d:b7:bf:e8:3d:6d:60:38:b2:02:2d:23:ea:
ae:5a:25:4a:70:50:1b:5b:d5:50:b6:2e:76:88:3a:1d:ea:99:
d3:97:33:43:9b:ab:a1:8c:5e:5b:a1:6f:b3:b3:10:72:49:f5:
c4:63:3c:86:ab:09:a7:50:09:e8:e4:1d:33:3d:ee:28:af:3e:
7e:97:8a:66:37:f7:7b:a3:97:b1:e1:0b:cb:6d:e0:25:2d:6d:
6e:d6:c9:82:99:36:eb:81:4c:a2:a0:47:f6:c7:63:7a:20:6d:
9e:1f:2e:c1:30:34:6c:d2:ce:f7:1c:94:72:ee:d8:5a:d1:5b:
9c:c2:fe:eb:31:55:30:5e:60:ea:94:2b:93:75:a4:b0:4d:b8:
da:9e:8c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:54 2025 by rpki-client