Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier: Td/LwjLDH5ujsEpb70dXGWhnaSaLvW/511zjmgm1Pe4=
Subject key identifier: 52:C0:C5:9D:4B:12:5F:21:E8:C1:82:85:72:7D:FE:73:B9:CC:5B:9C
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 4451E02D829CF01C55DBF13EC915A781828A49CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number: 034C
Signing time: Sun 19 Oct 2025 09:26:37 +0000
Manifest this update: Sun 19 Oct 2025 09:21:37 +0000
Manifest next update: Mon 20 Oct 2025 12:49:37 +0000
Files and hashes: 1: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: AzcKfVJa/HrG0zj2QF76RSyXoRiWHvXusDLFdMprbjU=)
2: 3138352e33312e3230322e302f32342d3234203d3e20323038373635.roa (hash: AYXBM6Gs7ye6sJ6OSz0wwrESd1N1gaJYldRKbiReV2s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:51:e0:2d:82:9c:f0:1c:55:db:f1:3e:c9:15:a7:81:82:8a:49:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Oct 19 09:21:37 2025 GMT
Not After : Oct 20 12:49:37 2025 GMT
Subject: CN=52C0C59D4B125F21E8C18285727DFE73B9CC5B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:8d:6a:e4:14:98:20:16:ee:7b:81:2d:f5:
6a:7a:69:93:81:36:83:11:52:23:03:4a:46:85:30:
6d:f7:9a:96:61:4c:02:e3:52:70:5e:b5:37:b0:c4:
97:05:f5:74:9c:49:c7:5f:7a:8d:26:5f:20:33:3b:
2b:10:78:a6:29:8f:c5:ca:80:c7:30:eb:3e:f6:68:
a8:0a:af:81:a5:ec:3b:fd:65:20:ae:44:d5:d8:32:
27:08:6d:3b:56:11:03:de:be:aa:62:47:ef:3a:c1:
43:3f:68:e9:0a:27:2c:d4:d6:f7:88:93:83:12:7c:
b7:52:6f:01:36:53:22:9c:20:50:8e:91:6d:e4:57:
f4:ba:ef:83:36:d9:d1:07:0a:5a:7c:26:80:50:5f:
df:84:ca:aa:cf:b2:c9:da:28:b2:d1:38:bc:71:1b:
3d:09:59:c4:b2:25:f8:b5:7e:77:c3:54:8b:50:1d:
1e:5a:76:2b:72:5a:78:07:21:ae:b8:79:dd:66:6d:
fc:84:76:5f:4d:81:27:5b:4e:11:b4:cc:50:fb:a6:
c0:b8:df:65:e0:f7:0c:9f:fd:7d:f0:13:a6:60:59:
84:ec:2e:66:e9:c4:45:46:f8:76:d0:99:48:90:2a:
d1:48:79:d1:83:5b:14:e5:eb:ba:14:d9:7d:5c:64:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C0:C5:9D:4B:12:5F:21:E8:C1:82:85:72:7D:FE:73:B9:CC:5B:9C
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7d:76:db:5b:ae:b1:ca:8a:93:d4:49:f4:c6:3c:96:88:82:
b5:47:67:3b:0d:c5:8b:fe:39:db:a1:83:39:e8:64:6b:1a:b3:
20:62:39:8f:5a:49:aa:34:f2:35:4c:b0:f0:47:3d:e6:ca:f1:
fc:48:35:9e:be:63:ff:f5:29:2b:26:ea:0d:c9:88:2a:36:5f:
d7:c8:07:ea:c9:54:ad:3b:19:64:c6:ec:6d:fb:5f:80:bd:4e:
66:3f:26:a5:25:97:18:3a:00:4a:c9:c1:73:34:49:87:32:fe:
e1:f6:a0:db:68:95:c9:a9:62:1f:2c:31:c5:d1:60:47:b1:b8:
ff:d6:d9:50:56:6b:e7:be:70:4b:6d:16:94:32:6a:55:01:38:
7e:ee:d2:33:55:cc:0b:13:68:e7:52:54:96:e4:bd:e7:1f:c3:
87:c1:1c:93:42:02:19:d3:c6:03:c4:99:e1:4c:37:78:ca:7c:
04:42:18:35:ec:ec:86:76:7b:02:81:36:0d:fa:a6:c5:8d:57:
5d:7b:5f:11:27:8d:7f:e2:1c:82:ae:af:9c:7a:bd:53:e6:47:
a8:ff:02:78:d9:8c:e5:24:41:fc:fd:a6:a2:92:d9:bf:98:33:
1a:f1:30:e4:17:d3:33:bd:df:f8:36:b0:1f:78:44:c3:56:07:
d8:92:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:24 2025 by rpki-client