Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: FFE80f3VduFDWhRslR+G0jVukQgfP66QzTJ03CArrDc=
Subject key identifier: 64:F5:7E:9C:5A:96:E3:D0:F4:87:89:B3:B4:87:C1:D6:C0:BF:E5:8A
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 29541FB829E3E36337FD8C4275FF8013FE03B4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 01F9
Signing time: Sat 23 Aug 2025 09:59:26 +0000
Manifest this update: Sat 23 Aug 2025 09:54:26 +0000
Manifest next update: Sun 24 Aug 2025 12:18:26 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: GstiJvyIKSMT7Y60WuE6oX/uiKBEREK3uNVufO3oqsI=)
2: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:54:1f:b8:29:e3:e3:63:37:fd:8c:42:75:ff:80:13:fe:03:b4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Aug 23 09:54:26 2025 GMT
Not After : Aug 24 12:18:26 2025 GMT
Subject: CN=64F57E9C5A96E3D0F48789B3B487C1D6C0BFE58A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:61:b8:40:37:0a:7c:8d:dc:50:7a:71:2b:
8e:76:20:9b:e5:8d:e6:e4:49:05:fd:48:41:34:92:
aa:e1:34:13:0c:2a:a5:f1:28:98:ec:78:cf:0b:35:
ab:4d:e0:ca:03:02:86:19:4b:6b:23:5f:e1:ce:4f:
2f:4e:70:4e:6d:d4:87:c9:41:1f:3a:e8:56:63:f1:
64:f4:03:8c:8e:dc:e2:03:07:db:bb:33:ef:c3:2c:
5f:d9:79:3a:c6:7f:ff:d1:cc:2b:10:0e:c4:71:42:
f7:d2:48:58:b7:cf:f4:79:b0:b0:36:cf:9d:b3:0a:
7b:58:e1:00:94:fc:1a:6e:a7:66:0d:81:b8:35:86:
d3:9a:2e:4b:db:e2:74:d2:06:9c:35:49:2a:8b:54:
c8:fa:b2:dc:19:a7:52:05:45:77:fa:c0:70:23:5a:
7c:a8:eb:95:5d:11:f7:2b:cb:f0:1e:0d:7f:80:bd:
f0:d8:ec:2c:fb:cb:8e:bc:cd:7d:5a:80:2d:d3:11:
a7:66:b4:dc:68:21:ca:1e:fa:87:0e:81:88:20:2d:
1c:d7:35:f1:7f:7a:73:01:e8:d9:60:ec:8d:69:c6:
c9:27:a1:6b:4a:5f:5f:e6:23:b3:e9:f4:2a:af:f3:
d9:6f:2c:59:b0:33:65:1b:26:e1:bb:97:09:f2:04:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:7E:9C:5A:96:E3:D0:F4:87:89:B3:B4:87:C1:D6:C0:BF:E5:8A
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ab:54:de:9a:c2:94:52:10:28:c0:41:6c:5c:69:6b:38:5f:
d3:f8:e5:53:43:b5:55:4e:26:8a:f4:f7:02:50:86:eb:c4:5c:
bf:d4:fa:25:31:d1:3d:0a:19:ec:97:0f:e6:de:2f:ce:ee:9c:
b7:ee:72:b1:74:2f:a8:dd:d9:c2:3b:26:f8:ca:7a:35:cc:e1:
f2:04:57:25:a9:a1:7d:4b:40:fd:ad:8c:38:dc:4b:b0:9c:9f:
c1:60:fe:43:c5:3c:35:85:7b:26:e6:b7:0a:db:d1:2b:e2:b4:
9a:4c:01:f1:e9:05:6d:e4:49:c4:4b:1d:a3:44:42:5e:8d:f0:
eb:15:80:87:0c:64:d7:55:d8:15:89:90:04:81:62:19:81:f6:
91:02:99:7f:4a:0c:64:4b:6a:1a:c7:6d:25:f8:f1:a6:8b:83:
0c:10:67:24:96:0e:d2:d8:e3:0c:62:0c:2e:f8:56:e9:44:9d:
50:0f:a7:9f:ff:18:dd:18:1f:8c:30:60:fa:e9:69:a3:1a:00:
9a:e4:bd:af:da:1e:d7:f1:c2:d8:78:da:44:fa:48:ac:e9:21:
54:3f:4a:b8:11:2b:e5:a2:3b:7d:cc:c6:1c:65:1f:46:55:94:
b5:31:8a:8f:9c:1e:d2:c7:40:3d:e5:7f:60:93:3b:c2:cc:b5:
59:34:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:00 2025 by rpki-client