
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: awDc+4t+Jv1OnuQyE+XDt5q8gJvIq1Tw2AAQS+/MeQg=
Subject key identifier: 5A:29:ED:00:80:12:0A:E8:FE:6E:D5:50:FE:A1:3E:F8:6F:BD:36:10
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 04B215213A699B240C5A47860854FACB652371E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 03AF
Signing time: Sat 28 Jun 2025 02:51:19 +0000
Manifest this update: Sat 28 Jun 2025 02:46:19 +0000
Manifest next update: Sun 29 Jun 2025 06:19:19 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: RTCu/jw5l6b1hVVhQG1dmTWjfapm81ZIZYp+ajNuF9I=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b2:15:21:3a:69:9b:24:0c:5a:47:86:08:54:fa:cb:65:23:71:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Jun 28 02:46:19 2025 GMT
Not After : Jun 29 06:19:19 2025 GMT
Subject: CN=5A29ED0080120AE8FE6ED550FEA13EF86FBD3610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:8a:3d:e8:c6:08:68:05:b2:38:b0:9a:d1:
d1:97:57:22:e1:24:a8:98:82:03:99:88:33:68:6a:
ac:17:8a:8f:f2:07:42:0d:d4:6a:ec:a6:67:a0:e0:
4b:e0:68:ad:ea:e3:76:67:e1:05:18:80:fa:a7:c3:
0a:68:29:70:b6:e8:92:82:a2:57:57:df:91:72:f9:
10:74:80:44:8b:8f:22:e3:b4:20:bf:22:14:dd:44:
5e:a1:6b:e9:49:66:49:1f:24:75:98:ce:6c:96:0d:
84:be:4f:4c:29:b6:5c:a2:3b:74:6c:f5:5a:44:a0:
53:95:a7:0e:b7:3a:6d:97:a1:6c:85:ce:be:a1:3b:
c6:46:18:ae:72:f4:b5:d3:b1:19:35:42:5c:c2:72:
9d:b5:86:bb:da:d2:7f:04:52:8c:d1:b0:8e:26:98:
8d:14:44:61:a6:04:93:03:9c:e7:c5:88:88:a5:ed:
66:64:ef:cf:15:98:60:97:7b:b9:c1:89:50:54:17:
99:9e:a3:ce:bf:fc:7b:bb:78:78:d8:82:83:43:12:
36:67:3c:7f:48:ef:e2:6c:15:b7:77:9f:22:01:d7:
e7:3f:b5:2c:4d:da:3b:dd:ca:7b:d8:0c:b2:09:06:
a5:2b:0a:02:66:8c:3a:95:ab:8c:61:f8:ce:a5:2c:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:ED:00:80:12:0A:E8:FE:6E:D5:50:FE:A1:3E:F8:6F:BD:36:10
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6d:18:ef:65:06:69:e3:5b:24:b4:87:10:89:19:82:fe:2c:
87:52:0d:b7:c8:84:6a:f7:28:bb:8b:af:9b:8f:10:43:7a:e5:
e9:cf:a0:b4:b1:92:53:f4:cf:70:94:4b:b2:a7:da:45:12:5e:
74:28:e4:e1:5c:5e:f7:3f:b8:8d:c9:8e:e5:89:45:9d:4d:9c:
ff:70:8d:8d:cd:61:68:f9:b9:72:5f:d8:72:a8:6c:1c:16:12:
c7:74:72:57:29:43:90:17:1a:5d:dd:a9:2e:a5:94:da:f7:aa:
30:17:64:32:7d:0b:40:43:e2:8f:df:dc:33:f3:cd:a3:2c:ae:
da:0e:eb:8b:35:c7:0a:ff:3d:be:bd:46:94:9d:c6:5b:4e:0c:
da:c7:53:b3:db:12:3a:32:1c:2f:2a:89:89:f9:86:91:0b:0a:
eb:3f:54:d9:e5:15:f5:3c:e4:a9:53:33:7d:85:3d:f0:48:c2:
20:26:f7:15:c2:22:fa:bd:4b:66:dc:d6:ab:4a:f5:8e:18:b2:
d0:db:3d:34:9e:60:0c:f5:77:89:d9:ad:7f:12:05:74:d1:cc:
4f:50:28:c2:5e:33:e2:4b:9c:33:ec:9c:81:c2:ff:b1:ac:c2:
ec:e0:06:46:62:08:1f:30:12:b0:44:c1:25:67:b8:2f:e0:44:
eb:77:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:02:40 2025 by rpki-client