Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: mi96txuW/MIg8yk+H4zJ8oxoSqTX5mAYtAGpN1dEGio=
Subject key identifier: 85:3E:D4:0A:6B:BF:C5:98:45:0B:E8:E5:8C:FF:3B:F5:30:15:A8:D0
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 7F7B7F7DF82525D0E9FA3C2E3DEC2F924306AC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 029E
Signing time: Mon 20 Oct 2025 09:28:01 +0000
Manifest this update: Mon 20 Oct 2025 09:23:01 +0000
Manifest next update: Tue 21 Oct 2025 12:44:01 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: +FkhQo7BVm0f56RdAeeAFA1k5QwU85n0byqPueSS14k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7b:7f:7d:f8:25:25:d0:e9:fa:3c:2e:3d:ec:2f:92:43:06:ac:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Oct 20 09:23:01 2025 GMT
Not After : Oct 21 12:44:01 2025 GMT
Subject: CN=853ED40A6BBFC598450BE8E58CFF3BF53015A8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:f7:ae:17:b2:36:02:54:54:fb:d7:0c:42:
dc:13:95:8f:fb:ea:95:5c:29:56:f0:e4:fe:a6:26:
96:4b:c0:0f:b4:77:d8:e5:d9:ac:7e:95:d3:d3:81:
66:a4:87:20:84:ba:70:2d:7f:bb:47:e8:51:88:10:
69:7b:cc:03:3a:d4:22:a7:01:11:ab:bc:06:01:d8:
7d:3d:0e:04:45:a8:6a:02:5f:d0:08:3c:ce:5f:ee:
de:eb:e4:10:96:ae:86:e4:98:f5:7d:60:dc:28:ed:
46:dd:37:d0:2e:93:ed:02:41:fb:9a:f0:5a:5f:2c:
34:91:c5:9f:e5:d3:78:44:62:d8:80:06:62:c8:3e:
26:31:95:97:f9:c5:6a:55:18:b0:8a:24:a1:1c:f7:
37:27:e9:1d:fa:23:02:56:94:b2:07:fe:0a:63:84:
8f:6a:b4:e5:b0:2a:5d:f1:54:2f:73:fa:27:1e:8f:
fe:b9:8f:f4:6a:a3:5c:3f:fc:da:92:3a:ad:8b:fa:
c8:20:1d:5d:02:a2:05:fb:48:dd:9d:bc:15:07:f6:
dd:1a:2b:fb:7d:c8:2a:c4:eb:ed:62:0a:2f:1b:d5:
3f:c8:04:cd:76:07:6e:24:e5:a5:64:62:03:f6:2e:
4c:d5:20:31:4e:b5:fe:51:03:58:da:18:d9:72:e6:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:D4:0A:6B:BF:C5:98:45:0B:E8:E5:8C:FF:3B:F5:30:15:A8:D0
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e4:8d:df:94:2d:eb:66:8c:e7:40:c8:5b:17:81:2c:7e:ff:
f5:13:a1:63:a5:2a:01:2b:ba:22:19:ed:3c:2f:4b:a1:f8:d7:
6d:28:26:fd:8c:2e:ef:1c:1d:43:9f:b3:3f:2c:bd:3e:86:ec:
23:92:72:13:16:0f:f8:ff:e9:a7:00:b3:67:5c:ab:7b:26:08:
00:0f:7a:21:72:cb:6e:97:9f:99:54:69:b9:f2:de:d1:44:47:
34:9c:17:86:e5:7f:bb:72:9f:4a:cc:9c:26:57:7c:97:84:c5:
ee:7d:9a:76:09:ee:cf:d6:a6:01:26:24:e8:fd:f9:e3:cc:4d:
c5:00:27:09:a9:02:e7:c9:67:b4:90:5c:88:17:0f:0d:a4:1d:
88:7d:06:30:be:31:45:63:81:bc:e5:aa:37:6c:58:3b:e2:34:
04:04:6b:13:a8:83:cb:6b:63:b1:f0:82:08:5f:9c:d0:39:6a:
88:76:d4:0a:76:3b:3f:65:23:5d:22:7a:90:ee:a7:76:38:bd:
69:49:64:22:a9:bd:37:0f:3b:b4:0f:b1:25:2a:a2:2b:c3:86:
3e:73:99:37:da:9f:39:fa:fc:f2:3e:be:a5:01:8f:d2:9f:a9:
f5:8d:6d:87:d6:df:6a:d7:cc:49:f0:58:b5:cb:b1:3c:15:22:
ce:be:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:56:41 2025 by rpki-client