
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: iCkVylrgGuYc55BeBiGgPLaz3PtdUq6PEbJAK6ROadw=
Subject key identifier: EF:48:07:58:87:45:59:BE:FD:77:42:0A:E5:87:22:4D:65:03:04:3D
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 34C78F066A52B1E2B89304AE0E868C6D3DBCEBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 03FB
Signing time: Sun 19 Oct 2025 10:52:31 +0000
Manifest this update: Sun 19 Oct 2025 10:47:31 +0000
Manifest next update: Mon 20 Oct 2025 13:06:31 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: IEkcKaec+W0Kj+UtAw9qdElTT6sbqmo4r03yDJ0hXl4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c7:8f:06:6a:52:b1:e2:b8:93:04:ae:0e:86:8c:6d:3d:bc:eb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Oct 19 10:47:31 2025 GMT
Not After : Oct 20 13:06:31 2025 GMT
Subject: CN=EF480758874559BEFD77420AE587224D6503043D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:a1:ed:cf:a4:22:78:e6:c9:25:09:c6:07:
55:bd:ff:f2:a3:9d:5d:3e:ce:d9:a5:62:89:25:50:
76:f1:89:44:b2:ed:35:89:90:d9:9b:2e:0a:19:ba:
cc:30:1b:22:5a:45:15:44:29:cd:4c:bb:35:99:3f:
f3:9d:b4:a7:05:82:38:49:be:f1:43:12:f0:21:55:
aa:35:86:29:16:f5:7e:cb:da:83:84:77:70:c7:16:
c4:87:81:5f:ff:40:71:66:13:ff:7c:0e:d5:97:af:
ac:5d:91:74:2e:ec:57:79:f7:3d:c0:40:81:6a:40:
39:b6:21:b3:7e:58:70:62:05:68:78:ab:36:d4:e6:
67:a1:0f:71:48:e0:dc:5c:92:42:5b:f1:c9:7e:90:
99:73:53:2d:07:fa:25:f5:49:28:f7:22:49:cc:1a:
33:ce:91:11:58:4f:26:ac:16:0c:41:0b:f3:32:f5:
0f:65:50:ea:20:b2:60:6c:96:34:5b:f2:f7:b5:96:
49:de:2e:65:e8:89:9e:23:cf:3f:93:2b:88:0e:ff:
c5:0a:39:a6:dd:6e:74:99:65:d7:ab:b1:76:df:e9:
59:c9:aa:d5:1d:02:20:1b:73:9d:9b:72:5b:d0:c0:
f7:62:af:2b:5d:c5:60:b8:96:fc:72:7b:ea:1e:84:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:48:07:58:87:45:59:BE:FD:77:42:0A:E5:87:22:4D:65:03:04:3D
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:87:f1:32:25:cb:bc:85:4b:03:2e:33:28:ed:26:1d:62:b0:
67:48:0d:8d:81:9b:09:ae:23:68:0a:35:25:52:95:05:da:49:
0b:27:b9:7f:d5:a1:54:6f:1a:b4:0c:a5:be:21:87:69:75:e4:
0d:fb:ad:99:a0:35:54:40:1e:16:86:ce:70:23:68:eb:f5:0d:
08:e0:c5:91:d5:47:d5:93:63:ab:01:83:1a:06:64:2a:56:13:
e9:1c:5a:ef:fc:5b:44:89:7e:b4:ed:bf:f4:17:a9:c6:b6:38:
0f:24:c5:b7:29:98:97:6d:d6:3c:52:c5:4a:0c:18:0c:e4:c0:
1a:63:e5:81:e0:84:1c:6a:e9:d6:9b:1b:29:cd:1f:72:1d:9a:
c2:06:85:0b:ec:ee:03:6d:45:85:51:61:28:fe:21:f2:c2:4d:
1c:6a:63:15:e1:9b:ff:78:fe:86:70:b6:4e:0b:04:67:35:78:
ad:f6:e0:f6:68:fd:86:36:58:ed:3e:0a:f4:5f:72:9d:7c:55:
02:8e:4a:34:34:a7:d6:36:d4:c1:3c:1c:b3:7e:77:5f:21:46:
67:ba:58:22:c3:1c:6c:4e:b2:e6:94:c7:4d:02:6a:34:e0:a8:
6f:d5:b7:af:05:a1:c3:8d:cf:36:25:c2:dd:99:f7:b2:54:8e:
43:e0:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:56 2025 by rpki-client