Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
File: 64742A2EF43282A0509E6A31574C96C8006ECCD5.mft (raw, json)
Hash identifier: Opl/Gw1Q0YqODr29WOP5RDhkfoh4DcqoXGGhUYWzUoE=
Subject key identifier: 9B:F1:35:9A:60:43:47:EB:33:35:F4:2D:C6:19:7E:E0:89:50:57:94
Authority key identifier: 64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
Certificate issuer: /CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Certificate serial: 1EB96F6837B27F0A8C4FC52DFEC4964230FECFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
Manifest number: 4C
Signing time: Sat 23 Aug 2025 02:35:53 +0000
Manifest this update: Sat 23 Aug 2025 02:30:53 +0000
Manifest next update: Sun 24 Aug 2025 03:29:53 +0000
Files and hashes: 1: 64742A2EF43282A0509E6A31574C96C8006ECCD5.crl (hash: 7o2r65fc0o1Bhd5AbK9b1G62z6hlsKdqcpgMw/vrfE8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b9:6f:68:37:b2:7f:0a:8c:4f:c5:2d:fe:c4:96:42:30:fe:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Validity
Not Before: Aug 23 02:30:53 2025 GMT
Not After : Aug 24 03:29:53 2025 GMT
Subject: CN=9BF1359A604347EB3335F42DC6197EE089505794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:47:a4:b0:24:7e:89:d0:53:65:ba:b0:aa:
63:3e:e1:b0:9a:26:3d:64:00:8a:8a:45:71:de:ae:
cf:d8:94:b7:ce:63:6c:c3:19:1d:ba:d5:37:2a:e8:
21:90:fe:18:7e:75:a2:ba:1d:0f:76:9d:08:ed:84:
42:16:f2:89:ae:dc:a2:d7:e6:17:f7:91:21:02:18:
7e:e0:0c:f2:b5:25:7f:ca:65:14:c9:d7:f9:01:00:
48:cb:f6:63:5c:cf:11:6f:ad:10:25:60:10:4b:ce:
1c:61:73:81:7d:b2:29:1b:94:32:21:88:8d:a2:98:
31:0d:73:33:51:6a:a2:73:78:9b:35:d3:ef:46:6c:
b9:52:95:33:9c:0e:60:83:e3:67:18:c7:6d:62:d3:
5b:93:00:6b:98:39:1b:a7:e8:b6:55:af:7c:8a:fd:
e5:64:84:c9:b0:68:6f:88:98:a4:de:5d:d4:40:41:
97:4c:d3:f5:7a:2f:f9:17:95:48:93:1a:be:04:ed:
b3:2c:87:7b:8e:7b:d5:2b:8f:d6:58:75:f6:75:ac:
97:57:75:db:53:86:0b:42:a8:fe:1d:b1:ec:ca:64:
15:5f:03:ba:2b:47:df:b3:dc:6b:1c:81:d0:67:4b:
71:c5:93:a8:9c:6a:69:aa:10:4a:17:14:f1:be:d4:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:35:9A:60:43:47:EB:33:35:F4:2D:C6:19:7E:E0:89:50:57:94
X509v3 Authority Key Identifier:
keyid:64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:82:e8:c0:66:a9:e1:5a:c1:25:7d:15:75:00:44:8b:b1:85:
65:56:e6:1c:68:d4:c7:9f:ec:72:5c:9f:90:14:0b:df:6d:ff:
6a:6f:bc:60:e5:58:53:fc:bd:14:2c:ae:85:03:82:72:96:18:
f8:cb:ae:92:d5:ef:07:ca:8c:91:39:70:9f:6c:cc:b6:7c:1e:
51:ad:5a:7f:1a:9a:12:9a:06:e2:29:e4:b7:f9:fd:48:88:47:
d5:f0:43:9d:d3:42:3d:9a:00:52:7d:41:cf:6f:c5:ca:c4:a6:
cd:5b:86:1f:d1:e6:7f:d4:b6:24:94:03:d1:bb:ad:43:f6:1f:
be:85:a2:3c:7f:3d:19:eb:61:a0:aa:00:2d:60:e4:d7:60:bd:
ba:9a:1d:d1:44:87:c2:de:02:a0:b6:06:bc:99:79:ca:65:20:
58:99:22:4b:a5:59:8f:27:fd:be:a9:d7:f0:10:2a:51:c8:aa:
33:6f:06:c0:8f:7f:88:83:d5:60:6b:62:7c:94:6b:6d:2e:c5:
e5:8e:45:96:c9:29:bc:28:43:9a:1c:1b:06:37:e7:c8:72:5f:
96:99:b5:30:d9:60:8b:43:28:67:5c:ca:54:1b:4c:1d:22:8e:
83:22:d8:7f:69:67:a5:a0:32:d8:b6:a3:85:d4:fb:4f:21:5c:
65:d1:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:40:57 2025 by rpki-client