Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
File: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft (raw, json)
Hash identifier: 5bbSgTr6illbcxEFabT8Mt1IuAGfcfyMcrqgqlOLt24=
Subject key identifier: 8F:80:19:41:7F:6D:0A:1B:27:E2:59:CD:35:C7:1E:C6:A5:A2:52:40
Authority key identifier: C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
Certificate issuer: /CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Certificate serial: 7FC67BA85FB4CE7A2C37FCE07B2B5AA3CEF93C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
Manifest number: 94
Signing time: Sun 19 Oct 2025 10:24:56 +0000
Manifest this update: Sun 19 Oct 2025 10:19:56 +0000
Manifest next update: Mon 20 Oct 2025 12:34:56 +0000
Files and hashes: 1: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl (hash: xNdxNR6621qTBjoBZ/sj6uETmA94vtE2DVOPEObyCYk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c6:7b:a8:5f:b4:ce:7a:2c:37:fc:e0:7b:2b:5a:a3:ce:f9:3c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Validity
Not Before: Oct 19 10:19:56 2025 GMT
Not After : Oct 20 12:34:56 2025 GMT
Subject: CN=8F8019417F6D0A1B27E259CD35C71EC6A5A25240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:58:cc:60:42:3c:fc:dc:6f:9b:b2:91:e3:
d0:e8:7a:a2:a4:ab:05:71:44:b5:9a:5d:f2:b9:16:
3a:17:89:e3:69:3d:14:86:64:2c:f7:2e:96:0c:26:
53:6d:70:d2:93:98:8c:a6:65:2c:64:b0:81:0d:33:
f1:8e:12:85:ee:69:32:f0:9b:20:d3:22:3d:9b:13:
ab:4d:0c:d2:18:c8:44:3a:99:19:90:fe:43:b6:ed:
75:de:af:89:99:4b:7c:82:15:c0:7a:eb:fa:80:30:
02:9b:fc:34:ea:e4:d6:71:62:f2:13:b0:84:90:b6:
3e:e3:d3:86:21:b3:54:a5:c9:03:34:ac:cc:6c:cd:
03:54:c2:93:bb:b8:b7:2c:cf:6e:0c:fd:f8:74:7b:
30:1e:e5:5e:04:f4:8c:b6:87:8e:f0:6a:4b:bf:1e:
73:2b:29:38:d6:3d:64:e2:67:1d:e2:a6:c9:dc:58:
a3:a0:65:1e:c4:54:c5:49:91:2f:5e:a4:e7:23:46:
ab:9f:d7:9b:b9:89:1a:d6:f0:c7:79:d7:6a:38:5e:
e6:43:bb:27:17:44:39:b6:c2:c8:c6:ec:39:c3:20:
e3:7b:0e:97:55:22:0b:fc:c6:e9:f5:c8:53:47:0d:
8e:db:b9:e6:78:93:45:6d:c1:b2:ea:9a:91:90:8c:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:19:41:7F:6D:0A:1B:27:E2:59:CD:35:C7:1E:C6:A5:A2:52:40
X509v3 Authority Key Identifier:
keyid:C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a2:e5:28:46:c7:e2:05:a7:68:ac:27:66:8a:ea:4f:c5:47:
b5:40:20:ac:9c:b6:f6:ab:a9:8a:93:a4:b1:b7:4f:16:2e:e5:
d7:e5:fe:90:9d:5e:17:91:8a:05:53:1b:7d:b1:67:d8:75:ae:
9d:2e:d2:68:2b:df:ee:84:ef:3f:d7:40:81:97:2e:a2:d5:a5:
48:78:9b:0a:9f:df:de:34:dc:c2:b7:af:17:6e:54:5c:90:13:
f4:b7:96:d3:61:b3:b2:ec:25:d1:f5:cd:65:94:81:d7:c3:51:
89:85:47:55:e2:38:3d:d3:39:be:d6:2a:fc:45:7e:92:24:4d:
e1:13:ca:3f:99:f6:d0:e7:e9:7f:fa:5a:f4:0d:dd:97:41:51:
f8:0e:ba:36:86:18:36:df:87:36:82:5f:1e:30:1a:0a:b7:dd:
3f:6b:1d:04:b8:ad:4e:20:a6:c6:be:88:ce:fb:64:54:f4:fa:
4f:b8:9a:e5:89:ff:56:20:fb:1d:a3:59:a0:df:a6:14:ac:ba:
5d:2f:f2:b1:1d:90:3c:cf:e8:f5:69:a0:42:b5:39:de:5f:7b:
84:e1:e6:90:46:93:4c:65:96:22:d4:b7:38:e9:52:2a:9a:90:
71:e0:a5:65:41:ba:44:b7:54:f7:d6:9c:be:73:03:e6:36:f2:
50:ce:83:c3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUf8Z7qF+0znosN/zgeytao875PEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzQ0NWY2YzFjM2E3Y2E4YjMwZjg1ZTdkYjg1NjMwOWNh
YmU2OGEwODAeFw0yNTEwMTkxMDE5NTZaFw0yNTEwMjAxMjM0NTZaMDMxMTAvBgNV
BAMTKDhGODAxOTQxN0Y2RDBBMUIyN0UyNTlDRDM1QzcxRUM2QTVBMjUyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGK1jMYEI8/Nxvm7KR49DoeqKk
qwVxRLWaXfK5FjoXieNpPRSGZCz3LpYMJlNtcNKTmIymZSxksIENM/GOEoXuaTLw
myDTIj2bE6tNDNIYyEQ6mRmQ/kO27XXer4mZS3yCFcB66/qAMAKb/DTq5NZxYvIT
sISQtj7j04Yhs1SlyQM0rMxszQNUwpO7uLcsz24M/fh0ezAe5V4E9Iy2h47waku/
HnMrKTjWPWTiZx3ipsncWKOgZR7EVMVJkS9epOcjRquf15u5iRrW8Md512o4XuZD
uycXRDm2wsjG7DnDION7DpdVIgv8xun1yFNHDY7bueZ4k0VtwbLqmpGQjLlpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUj4AZQX9tChsn4lnNNccexqWiUkAwHwYDVR0j
BBgwFoAUxEX2wcOnyosw+F59uFYwnKvmiggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw
NDhjLzIvQzQ0NUY2QzFDM0E3Q0E4QjMwRjg1RTdEQjg1NjMwOUNBQkU2OEEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hFWDJ3Y09ueW9zdy1GNTl1Rll3bkt2
bWlnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NTVjN2Q1YS0x
NWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMvMi9DNDQ1RjZDMUMzQTdDQThCMzBG
ODVFN0RCODU2MzA5Q0FCRTY4QTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKLlKEbH4gWnaKwnZorq
T8VHtUAgrJy29qupipOksbdPFi7l1+X+kJ1eF5GKBVMbfbFn2HWunS7SaCvf7oTv
P9dAgZcuotWlSHibCp/f3jTcwrevF25UXJAT9LeW02Gzsuwl0fXNZZSB18NRiYVH
VeI4PdM5vtYq/EV+kiRN4RPKP5n20Ofpf/pa9A3dl0FR+A66NoYYNt+HNoJfHjAa
CrfdP2sdBLitTiCmxr6IzvtkVPT6T7ia5Yn/ViD7HaNZoN+mFKy6XS/ysR2QPM/o
9WmgQrU53l97hOHmkEaTTGWWItS3OOlSKpqQceClZUG6RLdU99acvnMD5jbyUM6D
ww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:37 2025 by rpki-client