Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier: k3nJpo9h3MDhuwleWrKbfVyWi1ny9Rp9pCAT0GN7ry8=
Subject key identifier: 05:16:1B:E3:1C:CB:7B:11:5A:AE:00:88:6A:78:27:91:1C:97:32:38
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 2661308766B7D8A93473CFC4726CD04249E89942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number: 036D
Signing time: Sun 29 Jun 2025 10:39:15 +0000
Manifest this update: Sun 29 Jun 2025 10:34:15 +0000
Manifest next update: Mon 30 Jun 2025 13:42:15 +0000
Files and hashes: 1: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: huwsUB31uBfbleT8W3liIVEEjjwoWiPQyT4oqqDXvCQ=)
2: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: h+P/uyMvCfMnW6qxK5Ntz5a0woWaluQOp8+oFfSI/4M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:61:30:87:66:b7:d8:a9:34:73:cf:c4:72:6c:d0:42:49:e8:99:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Jun 29 10:34:15 2025 GMT
Not After : Jun 30 13:42:15 2025 GMT
Subject: CN=05161BE31CCB7B115AAE00886A7827911C973238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:83:ed:71:7d:72:f0:59:26:9f:10:e1:79:
37:2a:b0:8e:b1:59:de:15:31:f9:2d:b2:91:8e:e1:
05:cf:31:76:c7:c9:24:87:55:7c:fc:84:9f:97:23:
d4:00:8a:15:5f:23:ab:58:90:e9:2d:89:c7:5e:b3:
77:b5:d0:db:1e:b3:86:ac:fb:b6:50:04:77:93:48:
31:60:bc:da:ef:f1:da:c3:c5:5b:4c:73:32:0f:31:
8b:e4:a6:7c:f4:e9:ce:04:0f:82:73:8b:3e:c0:b2:
eb:03:81:20:c6:ae:ee:dc:e8:1d:ee:cc:57:f3:26:
c5:ae:6b:97:05:50:2d:32:e9:f0:20:4d:ea:6e:ee:
40:0c:1b:ea:63:61:b5:44:4c:d2:81:b5:52:5e:8d:
1a:8e:0c:71:d3:19:1a:bb:96:df:63:01:77:db:e2:
1d:e7:75:a8:e3:7c:12:0d:9e:dc:be:3d:5e:63:cf:
12:c0:4c:d0:88:70:19:ad:14:44:66:8c:2f:d0:12:
19:da:81:2f:8c:e6:2a:1f:ca:b6:68:53:6f:e3:f5:
14:88:a7:c7:92:38:31:3d:c0:7c:cf:b6:45:48:42:
54:78:09:17:e4:35:74:f9:59:04:35:45:a8:7b:33:
7d:4e:4f:0b:3a:8b:f2:41:25:a1:47:49:a4:6f:89:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:1B:E3:1C:CB:7B:11:5A:AE:00:88:6A:78:27:91:1C:97:32:38
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8d:25:2c:32:2f:91:20:4c:40:c0:a1:1f:10:47:15:1e:ca:
d1:99:e8:5a:f8:d1:f0:a6:84:d8:d6:0b:ae:3e:31:db:58:77:
c3:da:b7:ea:a1:cb:ba:c7:bb:ee:8b:e0:71:25:a6:9f:08:d2:
00:c8:fe:76:ed:81:f3:4d:3a:c4:9d:ea:43:ad:83:6b:e1:67:
56:5e:94:e3:77:d9:b7:2f:bf:b1:99:89:45:95:c2:c2:c5:c4:
30:b6:b5:cf:45:d5:04:fc:b9:bf:36:31:a0:90:73:55:7a:d2:
55:82:ca:3b:b2:de:92:a0:06:9f:0e:b6:2f:0f:40:b2:bd:c0:
19:e8:9c:cf:1c:ad:a8:42:8d:64:e8:19:9d:a5:dc:da:0a:45:
06:39:fa:6f:de:b1:b7:2e:61:53:95:4b:33:27:2f:92:6c:67:
4d:58:fe:11:79:fa:94:b6:12:74:b0:ce:ec:18:9f:c0:35:c8:
ad:65:bb:3c:43:6b:80:a8:0d:86:cd:8d:b2:14:8a:68:dd:b2:
fe:44:6a:ca:62:8a:6c:d4:8b:08:c2:06:3b:3e:82:26:ab:78:
9b:e9:8c:60:a9:62:af:b6:fb:ef:f5:47:8f:67:97:8e:dc:ff:
f7:95:e4:87:14:8d:ad:71:1e:e6:42:1f:2b:1f:66:32:61:3a:
4c:22:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:40:33 2025 by rpki-client