
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier: /ufmWCP3/KywirZ62/namZQDNqXv88LquhlU0pb8Zv4=
Subject key identifier: D9:F6:25:AD:E1:F6:31:55:77:E6:95:27:BC:54:72:02:F8:5F:CD:DA
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 1D5CCD3A39C720BAC28D6B7464DCA2CA47B25B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number: 03B8
Signing time: Sat 23 Aug 2025 12:12:33 +0000
Manifest this update: Sat 23 Aug 2025 12:07:33 +0000
Manifest next update: Sun 24 Aug 2025 15:33:33 +0000
Files and hashes: 1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: dB7KZJP64cGecqnA2KpgC4dXZ05JekThHSeiE50AU9U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5c:cd:3a:39:c7:20:ba:c2:8d:6b:74:64:dc:a2:ca:47:b2:5b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Aug 23 12:07:33 2025 GMT
Not After : Aug 24 15:33:33 2025 GMT
Subject: CN=D9F625ADE1F6315577E69527BC547202F85FCDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:88:21:91:7c:20:43:c4:59:8d:19:9a:19:
9a:b1:de:c9:80:4f:50:fa:23:cf:38:59:bf:e3:e0:
1c:67:76:fd:e0:e9:e5:fc:a0:f3:a7:56:7f:57:d2:
2b:a1:46:14:d3:7f:52:03:9f:ec:47:84:19:b2:a5:
c0:73:c4:04:a4:e6:39:19:b5:c6:96:b0:0a:f3:46:
81:e8:dc:64:e1:9e:1d:9d:cc:fe:2f:64:7b:af:39:
ea:10:4e:24:a6:57:87:66:8f:d7:c8:e6:81:da:37:
19:a2:1d:df:f0:43:7a:2c:bd:12:15:82:98:35:e5:
0f:4f:b6:9b:92:99:48:35:34:87:0b:1a:db:bf:28:
40:f6:b3:b1:d6:4d:c0:0c:43:50:f2:66:85:a6:25:
aa:70:23:77:a1:07:e9:a9:90:f1:ad:bc:66:a8:42:
3c:ca:13:61:ea:f3:22:ce:b7:f1:45:41:6a:c3:32:
af:d0:b5:f4:e2:81:93:20:1d:51:6d:9b:44:f3:1d:
4c:f7:99:ce:06:75:e8:fb:9d:20:a2:c8:72:dd:ff:
d1:97:f6:e2:95:af:f4:52:98:c6:ef:86:61:25:2f:
67:08:b5:dc:bf:55:0d:25:a6:ce:70:a0:6b:19:c8:
5c:0e:8d:5c:12:02:c6:a4:80:28:e2:9e:35:11:62:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:25:AD:E1:F6:31:55:77:E6:95:27:BC:54:72:02:F8:5F:CD:DA
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:de:10:d8:81:1f:46:09:22:de:41:60:f3:29:40:b3:79:a2:
58:e2:29:82:9b:30:f3:cd:87:77:2e:28:7e:73:dc:95:6f:4b:
b3:85:b6:03:fb:34:17:b6:65:0d:90:05:12:38:1d:87:6e:8d:
36:7a:bc:81:00:39:90:5e:e0:fb:b2:5f:46:ae:4e:75:f2:bd:
65:35:a7:8e:46:62:ce:f9:63:73:da:01:fe:17:5a:1d:f2:b7:
a3:a1:af:89:90:64:39:d4:99:f5:d3:8e:73:32:68:bd:37:74:
e5:12:b9:c8:a1:d1:47:98:c9:77:bf:ab:87:e8:fd:e6:6b:04:
0e:b1:c5:40:78:03:43:f6:fe:e5:ec:8e:85:8f:f2:b8:f8:92:
16:bb:ba:b6:88:0c:ea:19:f8:34:a8:5d:cc:a3:33:a2:d4:e2:
cf:a0:eb:f1:bc:2b:7e:56:85:ac:c1:0e:42:09:06:49:88:70:
57:c8:f7:c7:f7:78:6a:03:51:d6:92:4c:06:4a:9e:e8:65:01:
55:16:e3:94:69:cb:27:ca:cf:6b:1b:a1:51:e6:95:05:18:d1:
d5:18:c5:02:41:af:9f:f3:f3:01:70:15:ca:99:01:50:54:37:
35:5a:e2:24:a1:22:0b:3a:1e:9d:e5:bc:49:e1:53:a4:e0:e4:
86:8b:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:56 2025 by rpki-client