Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: 2F+b8fx/TniYuPEcY9ncktTXI7O86M+F+my5ikvJ5dQ=
Subject key identifier: 2B:85:F8:DA:59:08:AD:20:05:CA:77:C7:D9:E3:98:6C:DC:C9:BE:DF
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 1008A2CAE789FFDA654BE576ACE7C160405DEBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 03F9
Signing time: Sat 23 Aug 2025 02:20:02 +0000
Manifest this update: Sat 23 Aug 2025 02:15:02 +0000
Manifest next update: Sun 24 Aug 2025 05:44:02 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: cOVseVxCg57YdeGuG+wxY2yXOXLgpOGE/42w+QNNFlo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:08:a2:ca:e7:89:ff:da:65:4b:e5:76:ac:e7:c1:60:40:5d:eb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Aug 23 02:15:02 2025 GMT
Not After : Aug 24 05:44:02 2025 GMT
Subject: CN=2B85F8DA5908AD2005CA77C7D9E3986CDCC9BEDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:d2:14:5b:65:78:8c:87:05:1f:12:ed:6c:
a8:82:d0:c5:4b:66:5b:cb:46:e9:73:68:fa:83:5c:
d4:5e:9a:9f:76:bb:f5:b7:68:51:29:8a:3f:fb:eb:
6d:79:01:5b:65:61:57:e4:c4:ce:db:64:7c:e2:0c:
3f:11:82:a6:2b:dd:35:20:08:f4:bf:0c:22:40:93:
38:26:e7:98:09:60:6b:e1:66:2c:dd:a9:fe:2f:24:
f6:2f:a5:31:fc:6b:a1:42:f2:be:c9:ac:3e:24:73:
0f:33:c8:b9:74:00:a9:f3:e3:be:37:49:71:09:af:
6d:a2:91:45:3d:e7:23:f2:07:33:1a:ad:34:1d:5e:
e1:52:c0:de:f9:13:2d:51:7d:85:74:9d:8b:50:7e:
50:4e:b8:7f:1e:21:82:de:f1:21:2d:e9:c2:12:6f:
e0:99:ed:58:41:7e:0d:92:10:b0:1a:51:2d:57:be:
07:fb:4d:1a:a5:c3:3d:01:79:7d:0e:72:3c:1d:1d:
10:3f:69:0f:2f:7f:83:7d:6d:5b:70:55:be:2d:ff:
2e:b3:20:0b:07:63:1f:bc:53:70:de:4f:6b:2a:60:
a5:7e:d4:85:4e:04:0c:a6:41:70:c5:71:3d:23:6c:
fc:ac:89:fd:6e:63:69:19:e3:91:d1:a7:b9:6b:54:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:F8:DA:59:08:AD:20:05:CA:77:C7:D9:E3:98:6C:DC:C9:BE:DF
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fc:94:91:eb:50:a3:9e:f0:4e:1d:7a:f3:9e:3d:6f:4f:6b:
f7:3c:d2:8a:56:9c:fb:95:9b:c0:61:e2:4d:fd:3d:b3:e4:48:
b0:37:85:6a:3f:f3:ca:58:81:ec:a6:e7:95:4b:26:8b:a9:8a:
34:e7:2a:ff:a8:9f:23:b2:fe:bb:7d:ff:a8:69:d9:d3:5d:4a:
02:07:c3:cc:de:0a:7f:d8:eb:a2:a4:14:00:9d:17:94:72:4b:
8c:93:7e:d3:60:c5:db:de:4d:41:fd:d8:a6:5d:f4:d6:66:55:
f8:8c:f9:26:26:db:d1:41:eb:be:8c:cb:10:3e:32:72:cd:00:
62:9f:1e:89:50:ef:e9:6e:b0:61:59:f5:04:92:a3:95:68:6d:
23:9f:76:09:3a:8e:f8:fa:fd:16:d0:47:66:26:db:83:af:6f:
87:cd:11:c9:19:fa:db:b8:64:72:a1:fb:99:40:55:bf:51:4e:
05:52:db:98:ec:45:e4:5d:29:81:d9:92:ca:01:19:03:55:a0:
88:ab:e4:d8:87:6c:80:5d:2f:b8:e7:c6:41:13:92:29:b2:a7:
57:1c:b4:64:c8:c1:5a:9f:09:37:8e:40:49:f3:7c:d9:4f:0b:
e6:cc:95:75:e3:2a:a2:01:fa:ff:61:e6:1f:ea:19:f6:ff:0b:
44:a6:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:09 2025 by rpki-client