Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: XrBahS8sTO6PZb/mKlgSvEikb1oTutMwZb8IauMIYkQ=
Subject key identifier: 4D:23:5F:A2:CC:51:50:B3:26:B0:6D:81:6D:55:84:88:ED:99:DC:AA
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 0464967A52DC5403C4AC62C03A55F246B133C091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 03AB
Signing time: Fri 22 Aug 2025 22:20:26 +0000
Manifest this update: Fri 22 Aug 2025 22:15:26 +0000
Manifest next update: Sun 24 Aug 2025 00:11:26 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: jf8HlUiLqSpJvGbg8bO31rWhfDdNEXpJb62EPanhHPo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:64:96:7a:52:dc:54:03:c4:ac:62:c0:3a:55:f2:46:b1:33:c0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Aug 22 22:15:26 2025 GMT
Not After : Aug 24 00:11:26 2025 GMT
Subject: CN=4D235FA2CC5150B326B06D816D558488ED99DCAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:4b:40:c0:59:98:9e:af:e7:c7:e3:de:0e:
ac:2b:5c:0e:3c:a9:da:ee:c8:98:e9:d4:3d:af:09:
a4:c8:16:fd:5b:d2:8c:4f:94:64:b1:56:24:23:1c:
1f:d7:01:53:38:3e:86:7f:47:c3:24:3f:99:68:87:
e7:34:d1:31:e1:54:fd:09:43:8c:7b:0a:e8:5c:1c:
f8:c9:ef:0b:ae:16:06:d7:93:96:2e:87:2c:89:66:
48:ad:d7:78:77:98:2f:5d:f0:a3:00:21:75:09:3e:
84:b3:cb:04:31:f3:1d:7c:dc:d1:69:f7:3f:86:2c:
3c:d9:a6:51:1f:e4:89:8f:2c:a1:34:f4:f9:d1:3d:
5e:f1:9b:e3:1b:08:de:c3:9d:3b:da:35:f0:a3:5a:
c9:c8:f3:78:51:3b:a2:6b:97:6c:17:77:6d:4c:37:
02:d1:c1:65:c7:eb:89:d8:81:fe:48:4b:73:36:e8:
33:4b:d5:2f:ba:3e:19:4e:d2:88:82:51:72:02:16:
7d:e4:bb:c4:6f:02:e4:ec:24:38:53:e2:f5:bc:fd:
88:16:73:67:bd:f3:17:04:9f:8f:7f:49:61:c6:ff:
04:7b:53:07:25:ae:d6:f4:d7:df:25:da:54:d8:67:
ad:ed:1b:69:4b:58:79:38:33:69:69:95:0b:60:05:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:5F:A2:CC:51:50:B3:26:B0:6D:81:6D:55:84:88:ED:99:DC:AA
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ab:ce:1c:e8:08:fc:da:63:56:23:cc:84:e6:62:96:9e:25:
a5:72:0b:99:3f:52:f0:f4:bf:90:09:44:89:70:63:b8:c6:a9:
36:18:f5:61:0c:7a:66:9e:17:c1:48:96:1c:3a:cd:74:20:1c:
b0:9d:be:00:be:6c:8f:7c:53:bc:66:1f:32:91:06:75:c6:f3:
91:50:b3:db:1f:21:6d:33:e4:5a:27:b3:46:57:2b:1f:25:3e:
0c:52:d7:f2:78:16:fe:3c:d9:1a:ab:c9:2e:95:a2:3e:42:5c:
cf:9c:22:93:6e:bf:98:74:71:db:fa:77:04:0d:eb:57:42:db:
08:f2:10:96:9e:c7:97:de:c4:9f:c8:17:c8:d9:d6:6c:ad:6e:
f1:a6:9f:a5:14:60:ff:36:a4:a7:a5:43:d2:43:46:b2:6c:3e:
21:82:cd:7e:2e:23:f6:bf:b0:a2:c1:41:2c:82:f3:08:64:6d:
ad:2b:dd:96:2a:4e:cf:04:97:55:65:49:72:cd:b8:7b:2a:93:
9c:ce:f9:9e:72:94:23:71:48:1f:ac:c0:60:5d:b0:80:21:48:
80:6d:5c:79:f7:84:8b:5a:9d:6e:93:2e:17:d1:34:9a:bc:9e:
93:de:a5:cb:2f:c3:5d:f4:ba:b2:0d:2b:2f:a8:ac:a0:de:f0:
20:b2:6d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:13 2025 by rpki-client