
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: tcAz2yhHcw2MvkzkdYuEvB5gvychrD+gKj0jIkDb0IQ=
Subject key identifier: E4:73:A4:6C:2E:41:C5:A3:01:56:3C:68:83:8F:3A:71:39:73:23:86
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 5C18B9B0B9D34C6593A2FAAA549701F133A9B485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 04B7
Signing time: Sun 19 Oct 2025 13:04:45 +0000
Manifest this update: Sun 19 Oct 2025 12:59:45 +0000
Manifest next update: Mon 20 Oct 2025 15:25:45 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: Jq/reSwZ4yjiUAQol0uVr+9wijPQQyf3yZVos3MXI64=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:18:b9:b0:b9:d3:4c:65:93:a2:fa:aa:54:97:01:f1:33:a9:b4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Oct 19 12:59:45 2025 GMT
Not After : Oct 20 15:25:45 2025 GMT
Subject: CN=E473A46C2E41C5A301563C68838F3A7139732386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:ea:ff:12:82:a9:5f:2c:b8:77:16:0e:d9:
f5:e7:69:10:48:f1:84:12:ec:a9:4c:ae:90:25:1d:
86:80:a2:21:9b:c2:6b:69:bc:79:92:40:5e:9a:d6:
08:4f:07:a7:80:a7:69:e8:04:55:69:53:18:44:5a:
8f:f3:c7:22:43:09:47:7e:b4:f3:85:d9:ad:d1:53:
f0:54:98:ad:fa:84:5b:30:2c:b5:ea:96:45:9b:df:
65:3f:b9:7c:59:e9:99:f5:35:58:1f:b1:91:f2:d2:
5a:29:41:42:4a:d1:17:27:71:19:1a:37:3d:95:8e:
a6:1c:74:b6:5d:59:d2:ae:ae:89:05:bd:66:02:8d:
9b:58:68:32:de:82:a3:b2:71:5e:cf:85:42:01:eb:
b5:d0:5f:3a:0c:c2:d9:de:4c:75:44:d8:c1:e2:5d:
0c:cd:24:32:e3:ae:6c:59:63:aa:27:bb:94:9f:09:
51:fe:ab:46:5b:35:f5:81:30:2a:a2:9b:22:ab:e5:
09:04:02:eb:7c:fa:ab:90:d9:fc:83:a5:c7:6c:0e:
0d:c4:81:92:e4:56:ab:78:36:c3:73:79:66:42:ab:
0a:dc:7e:74:3a:fb:73:ca:77:69:a4:63:bc:33:3f:
2c:35:81:9f:37:ce:e6:d1:38:18:5a:c3:0f:74:d0:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:A4:6C:2E:41:C5:A3:01:56:3C:68:83:8F:3A:71:39:73:23:86
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:57:8d:f9:fa:54:ef:26:c7:db:43:33:3a:5a:6c:3c:0f:46:
43:76:ed:bc:8a:cb:08:59:35:96:52:dd:04:61:dd:02:0c:94:
17:b3:69:a5:fc:b1:22:34:16:31:32:b1:e9:16:ca:54:6a:41:
d1:3c:11:37:d5:60:c7:4b:82:96:54:34:08:f0:ee:cd:df:51:
5b:af:2f:1e:1e:54:17:9c:6f:d2:9f:41:13:da:cc:70:d0:ad:
cf:7d:86:8c:ee:e4:12:a0:f5:65:a4:66:f3:75:39:7a:6e:67:
88:c7:d7:52:9b:0a:cf:f9:c7:63:78:a7:e3:ec:9f:a1:95:b1:
9e:a2:4f:d7:a7:c0:76:79:50:67:30:b9:57:31:12:7c:59:44:
fb:cf:68:9c:4e:13:f8:4e:3d:5a:a3:c9:38:88:1a:89:85:f8:
12:5b:a9:4d:af:19:9a:cd:45:aa:08:d6:71:6b:87:3a:83:a2:
f8:fe:f4:9c:69:af:40:b4:88:4d:80:a5:ea:7c:d1:61:c9:ca:
86:48:f7:be:ee:f4:b8:af:2d:97:9c:fe:e7:06:12:45:d3:5f:
7d:6d:00:1c:02:bc:bc:2d:63:fa:3f:09:54:55:3b:7c:3f:be:
6f:f2:61:52:5b:75:65:ee:ad:94:6d:1e:55:d0:99:d5:9b:c4:
84:29:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:57 2025 by rpki-client