
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier: Pu6ok66PSd+It3zQq+EaLWUgTM1eFUnSIYtqmxUsKLM=
Subject key identifier: 59:93:78:1E:FF:4F:6E:C7:19:54:8E:E6:54:63:70:8E:5E:CA:C0:E2
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 60BDBAE3738B1B12985F04B6B32AECE6511376CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number: 0300
Signing time: Sat 23 Aug 2025 05:17:33 +0000
Manifest this update: Sat 23 Aug 2025 05:12:33 +0000
Manifest next update: Sun 24 Aug 2025 09:10:33 +0000
Files and hashes: 1: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: FFGQNxo4+XmUySqG546vHweNfCN/eoR3KuZl5Mw6mmc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bd:ba:e3:73:8b:1b:12:98:5f:04:b6:b3:2a:ec:e6:51:13:76:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Aug 23 05:12:33 2025 GMT
Not After : Aug 24 09:10:33 2025 GMT
Subject: CN=5993781EFF4F6EC719548EE65463708E5ECAC0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:ed:fa:02:8b:7a:12:f9:c9:86:84:92:37:
86:cf:75:38:2f:d0:d7:c7:d1:41:88:1d:25:b8:d0:
b9:a0:19:0c:62:7c:07:64:60:ef:8f:69:a6:23:74:
4a:43:1c:93:ee:94:38:38:a7:47:00:ec:e3:f9:1a:
85:31:be:6c:02:96:f2:ec:47:0a:58:ba:0e:d1:72:
6a:99:99:21:f3:4d:74:cf:6d:14:f2:58:5a:71:bc:
5a:6d:21:8e:9b:c4:49:82:e7:4a:e7:ab:d6:e6:93:
9b:96:fb:4a:ef:02:f8:16:30:74:4d:05:c3:08:d9:
65:f0:83:56:35:81:c1:79:4f:ed:ec:8f:3e:88:76:
46:9d:b8:e1:b7:0e:e5:05:2f:a7:6d:12:3f:87:e5:
2c:d8:17:77:b8:94:38:1d:5e:56:f8:5f:2a:c0:53:
a6:f8:78:d9:7d:55:b8:58:f1:b4:14:0c:30:04:ca:
be:a4:dc:94:db:0e:e6:41:e1:2a:c8:65:3f:8d:14:
56:86:14:49:81:26:df:8b:76:0d:ab:63:ca:1c:7f:
0e:05:d0:0e:22:25:6a:8a:31:a2:7c:e1:01:ff:62:
d4:a0:b4:7b:1b:19:f9:90:e4:62:6e:73:d9:1c:44:
62:ef:8a:26:75:ad:65:d9:eb:ef:6f:b6:e4:8a:41:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:93:78:1E:FF:4F:6E:C7:19:54:8E:E6:54:63:70:8E:5E:CA:C0:E2
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5f:ab:4a:5a:99:2c:13:44:e3:6c:98:82:18:4c:84:d5:eb:
9a:3a:a9:ba:d5:5a:ff:26:18:9d:ce:9a:93:c9:91:ac:75:a4:
66:ea:ed:bf:bd:80:dd:0a:8d:12:94:65:74:4d:30:51:5a:c8:
01:c4:47:b6:4c:fe:08:64:43:11:36:80:68:b6:0b:62:21:93:
42:f5:b6:1d:a2:fc:32:fe:84:b8:02:e9:b6:a0:7f:d2:f7:c6:
94:46:dc:24:e1:95:c0:63:3e:02:a1:62:c9:db:81:15:bb:cf:
23:f4:8c:30:a2:f8:8c:63:a7:14:b0:1c:d7:a0:db:9d:ae:41:
45:27:8c:5c:1f:63:ee:2d:dd:fc:df:d2:e9:ed:5d:b0:1b:b9:
cd:ce:01:e5:0f:ac:1f:ee:d3:a3:cf:0a:b2:65:a6:33:c1:23:
49:fc:60:3b:1a:e5:44:3a:0d:84:72:e2:55:03:39:15:70:81:
4a:9e:d3:6c:99:1d:ec:81:96:62:7d:fd:2f:05:2c:b4:e5:c0:
66:02:a2:c4:f0:fc:8a:47:a1:67:49:d6:32:2f:68:1f:9a:a4:
5c:04:37:d8:fe:c2:97:7b:18:85:5c:7a:77:44:5a:1b:dd:e4:
05:49:50:dd:46:d8:14:54:54:bf:6c:c7:4a:58:16:76:60:bd:
34:3e:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:42 2025 by rpki-client