Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier: eIQWvtI2bX9tY30JfeZhonVtsCF+LvWZ0VwSLouPvLU=
Subject key identifier: 64:36:E8:B4:4B:7B:21:EF:D8:47:30:2C:BB:04:08:E5:89:65:F9:67
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 1FCDCA187B4889AF7A206B6F8393C8B6A2D7C717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number: 02B5
Signing time: Sun 29 Jun 2025 06:44:13 +0000
Manifest this update: Sun 29 Jun 2025 06:39:13 +0000
Manifest next update: Mon 30 Jun 2025 10:41:13 +0000
Files and hashes: 1: 3138352e33312e3230322e302f32342d3234203d3e2037303138.roa (hash: iL7YLdjFSsy+StKeV2OynMplvfVvVqa5nzn9JGMln1g=)
2: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: 9/V4n0q1ivf8SU89O3OHuDCLEJOGKNoSvhvbGgyaeTA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cd:ca:18:7b:48:89:af:7a:20:6b:6f:83:93:c8:b6:a2:d7:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Jun 29 06:39:13 2025 GMT
Not After : Jun 30 10:41:13 2025 GMT
Subject: CN=6436E8B44B7B21EFD847302CBB0408E58965F967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:69:65:ff:43:0b:80:a2:f7:fb:d7:e0:79:
c7:82:2b:4d:1b:d9:ab:4b:b9:19:0b:60:33:1a:cd:
1e:cc:b9:bd:75:bb:64:d8:4d:7d:8b:a5:06:ba:b3:
fb:9f:9d:35:f0:0f:f7:36:2a:72:86:7e:f1:04:dd:
fb:9c:38:77:86:ad:01:93:a8:e8:60:e2:10:6a:c4:
16:9f:1e:f0:38:e1:1d:db:03:aa:9c:24:85:a5:b5:
2b:ae:2a:c3:ea:33:7c:b2:b7:d9:63:74:fc:20:ce:
ed:32:f5:09:ff:f8:b1:32:0f:23:1b:79:78:16:aa:
44:e8:07:41:b1:bf:33:ea:cc:29:a9:56:72:da:b8:
3a:72:30:0c:93:cd:03:84:54:53:3b:41:5b:00:48:
5b:eb:9c:42:cf:a4:70:47:4a:23:d8:d4:b5:6a:fc:
d6:d5:f0:03:e2:06:d5:43:bb:c2:b2:80:7c:71:17:
f3:5e:79:bd:14:80:80:36:9b:96:47:7d:95:80:be:
22:ff:39:84:c9:e6:eb:9b:2b:b7:63:dd:8d:70:e5:
43:be:9a:c2:b8:8f:6b:d1:50:7b:2a:f5:0c:83:9c:
8f:d7:8e:9d:95:76:9a:6e:1f:6f:d3:2f:ca:90:b5:
86:12:2b:39:56:c8:76:b5:f7:19:84:ff:e5:b0:5c:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:36:E8:B4:4B:7B:21:EF:D8:47:30:2C:BB:04:08:E5:89:65:F9:67
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d0:0e:91:7b:74:d0:e6:d5:ce:87:f2:eb:bc:a1:46:41:74:
d8:2a:fd:30:22:03:c6:17:f8:f7:d8:3e:be:2e:1c:a6:d7:18:
1c:f2:b0:9c:44:11:28:3b:fa:a4:fd:ea:0b:56:0d:28:5d:b1:
78:b4:1e:87:e4:96:6a:31:74:3d:29:76:d9:a7:35:3e:f8:98:
ae:51:bc:2f:fc:78:1b:2f:78:83:97:6f:b1:3e:01:32:8b:cf:
76:0d:c3:2c:a0:47:a3:79:36:d1:84:04:8f:aa:3e:1c:f4:54:
de:65:72:52:20:25:86:64:7a:d4:7e:39:d4:3e:df:77:aa:fe:
ed:93:1e:06:06:63:3f:fe:35:a5:59:dd:27:b0:49:42:56:9c:
e2:bf:e9:44:0c:8a:d9:e6:58:1b:4d:13:c7:cd:1c:fb:35:f0:
89:79:a1:c0:39:38:a2:e0:6b:7a:33:22:59:58:a0:75:74:d2:
77:d9:3c:bd:bf:d2:14:56:3e:fe:a7:1c:a7:9f:07:d0:ae:b9:
58:ef:92:72:35:62:0c:5a:91:11:9f:9b:51:9e:10:69:24:9c:
a4:ed:47:9b:1d:25:0e:4d:b8:70:c9:5c:54:6f:7f:39:84:f3:
7e:3c:3c:03:a2:b6:40:33:6e:b6:bb:13:5c:66:ca:0f:3d:70:
22:8f:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:58:36 2025 by rpki-client