Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier: AA8xrBQuoiV7WQB98wHNyT4956K8M49cFhZ7lLDLjbU=
Subject key identifier: 78:CF:89:C3:D8:BE:F1:62:BA:1D:14:09:CA:46:27:FE:1B:9E:43:E0
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 2ED98B5054A8AB6E10F24502DC78335770D10A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number: 0405
Signing time: Sun 19 Oct 2025 20:31:39 +0000
Manifest this update: Sun 19 Oct 2025 20:26:39 +0000
Manifest next update: Mon 20 Oct 2025 22:50:39 +0000
Files and hashes: 1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: dYoEKIrcnOQ//08uWvDSX8XtlhSnm7np0oCHMNZv/Nw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d9:8b:50:54:a8:ab:6e:10:f2:45:02:dc:78:33:57:70:d1:0a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Oct 19 20:26:39 2025 GMT
Not After : Oct 20 22:50:39 2025 GMT
Subject: CN=78CF89C3D8BEF162BA1D1409CA4627FE1B9E43E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:4d:02:9c:32:3a:bb:a8:2f:7f:ef:38:fa:
d7:af:bb:88:e1:91:87:a0:53:7c:48:db:e5:70:ff:
b8:c3:17:f3:7b:e5:86:5a:74:49:f1:16:40:ee:01:
11:93:46:70:3a:97:08:6a:37:d5:ed:a0:b7:c6:20:
a3:7f:fc:90:ad:e4:b7:e4:6f:42:f5:b5:d6:2d:e3:
a7:a8:47:f3:63:3f:d3:02:dc:ae:cb:2b:12:6b:32:
ac:f6:25:b9:bd:f0:e2:25:70:87:08:bb:1c:c7:b9:
ef:3f:a3:b1:c7:a7:0d:26:37:2a:d3:de:0b:7c:ec:
2c:89:43:06:04:0c:df:6d:f2:27:03:68:fc:9d:c8:
0f:97:08:73:23:b0:6a:18:7b:63:92:b3:43:84:de:
ba:28:ba:31:01:28:02:36:72:66:00:03:81:8d:8a:
ad:3e:48:a5:2a:1b:03:bf:73:c7:8c:3e:f8:4b:da:
40:91:37:e6:8a:f7:0d:23:69:71:93:59:ea:f1:08:
52:e0:20:4c:10:78:b2:ce:c9:6e:40:83:d8:41:0f:
ca:0f:3f:3e:5f:f7:6e:8c:e6:3b:21:9e:0d:f1:13:
8d:17:f9:6d:fd:f1:18:75:d6:b0:c5:f9:9b:08:5b:
d2:71:5e:b2:a2:e0:ae:0e:0c:d3:c1:ba:43:2b:61:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:89:C3:D8:BE:F1:62:BA:1D:14:09:CA:46:27:FE:1B:9E:43:E0
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c2:a6:cd:a8:bf:74:50:fd:78:1f:a4:4a:3d:b6:c2:b6:61:
08:e9:ea:2a:d7:19:ba:53:c5:05:17:7e:8b:2f:b3:34:81:92:
a8:48:98:56:e0:ec:ea:d1:2d:52:78:09:2b:d2:f2:c1:4f:d7:
62:75:62:13:77:6c:9e:ea:c9:72:26:b0:6b:e9:15:3d:0a:38:
9c:df:3b:44:e1:31:dc:78:25:5a:83:d1:ac:06:54:34:2c:a3:
3a:17:02:2c:05:e0:57:e2:94:2f:8d:60:0f:b0:96:16:f9:20:
c7:27:88:67:ae:6b:7c:ee:0c:7d:31:23:b6:25:83:3f:b4:db:
2f:80:93:1b:9f:6a:68:55:59:aa:18:22:87:ac:8d:5b:e4:8c:
71:ce:93:60:13:17:aa:7f:f3:cc:46:e7:db:64:00:dd:9a:2e:
97:d1:c2:35:30:41:67:0c:d9:da:ad:d8:c5:0f:4c:e9:ae:e5:
8c:c9:f8:75:25:70:70:33:ea:39:8f:fc:98:ba:df:46:ea:a1:
0f:02:db:ad:33:22:07:f4:ac:b6:e1:23:af:77:bc:9f:3a:84:
e7:22:33:dc:9e:6e:c2:28:e3:f8:b7:42:2e:70:a1:34:24:9d:
dd:1d:ec:d7:eb:d8:dd:73:f3:22:3b:5a:57:b0:0b:94:d3:8c:
dc:b6:90:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:13 2025 by rpki-client