Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
File: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft (raw, json)
Hash identifier: AMd7u5N0fjQRdYwbMFrE4jARcYndVHM/urDJLKum7fw=
Subject key identifier: B6:1E:90:E6:E1:15:32:74:DA:AF:2C:28:35:E5:67:B1:EE:3B:04:EA
Authority key identifier: C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
Certificate issuer: /CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Certificate serial: 79DF28F51F60D1C5B0F3ED95A57C591D891B8AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
Manifest number: 15
Signing time: Sat 28 Jun 2025 08:41:37 +0000
Manifest this update: Sat 28 Jun 2025 08:36:37 +0000
Manifest next update: Sun 29 Jun 2025 11:12:37 +0000
Files and hashes: 1: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl (hash: U3xZlOIfIyj3j5PmuuAhL4sb5fUmix3/7pLrhKiBplA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:df:28:f5:1f:60:d1:c5:b0:f3:ed:95:a5:7c:59:1d:89:1b:8a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Validity
Not Before: Jun 28 08:36:37 2025 GMT
Not After : Jun 29 11:12:37 2025 GMT
Subject: CN=B61E90E6E1153274DAAF2C2835E567B1EE3B04EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:de:7d:42:af:48:ac:bf:a4:b6:ba:14:6f:
c9:08:c5:9e:77:1e:eb:b9:5f:74:d7:c5:f3:34:c5:
bc:32:d7:08:04:6c:f6:d2:f3:c9:0a:f1:2d:4a:0c:
45:85:9b:c2:bf:60:06:ff:6f:32:20:66:23:0f:f7:
04:79:18:de:78:80:a6:ae:aa:32:a9:f5:ca:4b:7e:
85:e1:1a:20:48:96:0c:a1:c7:ae:18:98:1f:63:79:
1d:dc:e1:7f:b5:f1:e0:b2:35:00:45:08:4c:d5:55:
63:f3:ce:a7:62:91:36:22:1c:71:c0:d1:e5:6b:41:
72:e5:79:8f:1b:42:a9:9e:92:61:6c:9d:75:5f:bf:
c8:29:bb:98:36:05:58:ad:67:af:39:c2:b0:62:e4:
a7:0e:7d:01:7b:0c:fe:f8:b3:13:41:fd:fd:07:18:
6e:de:31:bd:5f:69:fc:b8:74:47:fe:5b:6c:e5:a0:
a9:c1:e8:6d:c3:e0:5f:d5:05:2d:4d:4f:80:16:5b:
26:d3:cb:2f:74:88:b2:7c:d8:2f:76:bc:b2:f0:29:
91:89:31:2d:4e:e5:87:91:b0:01:22:7d:be:10:b1:
e9:60:6d:ce:6d:88:9b:b3:be:95:14:bd:d0:6c:d4:
c8:8b:00:52:b8:e1:0e:50:74:5c:de:5a:75:4a:24:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:90:E6:E1:15:32:74:DA:AF:2C:28:35:E5:67:B1:EE:3B:04:EA
X509v3 Authority Key Identifier:
keyid:C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:7b:0d:6c:0a:c4:79:2c:af:65:7a:69:c7:ae:51:57:f9:
35:70:73:e3:26:e7:6f:83:5c:25:c5:cb:41:1e:c3:39:09:89:
1c:10:5d:33:09:44:d6:a3:19:a3:2f:ee:13:c9:e5:89:84:ff:
d7:6e:88:e8:bc:7f:67:91:3b:15:8e:2a:80:b9:84:ab:e4:51:
a0:88:51:5e:15:59:5a:11:07:d8:55:af:1a:ec:43:28:4e:d0:
bd:12:ae:c6:4f:bf:e7:d2:db:f0:23:b6:85:0c:51:d8:79:8e:
98:92:0e:cf:d7:65:44:c1:dd:11:20:52:f4:21:27:14:15:26:
6d:1e:dc:79:fd:d1:50:8c:3d:5d:f5:1a:52:8b:b4:a5:5a:40:
e4:f5:f7:d2:80:20:d2:1f:54:24:f8:a9:b8:89:c1:98:fa:29:
0e:3d:4c:62:31:c4:e3:43:0e:79:cf:b9:8e:8c:6f:53:fc:58:
98:c5:53:f0:73:30:9d:81:43:43:1a:57:e8:60:b0:fb:38:eb:
4f:22:2a:d0:11:d0:1e:6d:79:8e:74:e3:28:e7:6b:e1:b1:b0:
fb:c0:16:dc:c9:7b:70:66:96:49:ea:a1:6b:4e:78:b5:b2:7a:
f7:d2:ce:2a:c2:f2:7c:da:01:fa:c8:40:29:eb:b0:98:0d:56:
36:b2:d6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:45 2025 by rpki-client