Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
File: 64742A2EF43282A0509E6A31574C96C8006ECCD5.mft (raw, json)
Hash identifier: bMhPSkJzDSxqEtcX9B1s/Kmcp5Pgfp4X4UJ8ESejlQo=
Subject key identifier: C4:09:6A:11:30:8A:20:AF:E9:F4:D2:1F:12:42:99:CE:33:76:6C:B6
Authority key identifier: 64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
Certificate issuer: /CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Certificate serial: 7C4F807F80D80C3B9EB4F670B1F60F896DF1C0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
Manifest number: 9A
Signing time: Mon 20 Oct 2025 02:15:16 +0000
Manifest this update: Mon 20 Oct 2025 02:10:16 +0000
Manifest next update: Tue 21 Oct 2025 05:15:16 +0000
Files and hashes: 1: 64742A2EF43282A0509E6A31574C96C8006ECCD5.crl (hash: Cm+fOIUBiJZJNqA7qaSuv4muOoO3F9LGsmnquUlx46g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4f:80:7f:80:d8:0c:3b:9e:b4:f6:70:b1:f6:0f:89:6d:f1:c0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Validity
Not Before: Oct 20 02:10:16 2025 GMT
Not After : Oct 21 05:15:16 2025 GMT
Subject: CN=C4096A11308A20AFE9F4D21F124299CE33766CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:34:a4:b4:fa:52:e4:3d:b4:10:19:65:33:
ba:9d:f4:d9:cb:21:3f:7c:e2:18:68:12:54:fe:70:
3b:b9:ff:31:79:1c:29:33:a3:47:f8:2e:93:a1:9a:
ec:aa:2f:ed:57:f4:ad:e9:b5:89:2b:8c:e3:3e:2c:
2e:d6:25:b7:c4:21:3b:74:a2:c5:29:d0:9b:91:c7:
13:b8:d8:dc:18:b1:bf:a5:9f:a8:c4:65:40:3a:d8:
9a:ea:0a:da:28:7f:8c:f0:bb:0c:1b:6c:5a:67:74:
1f:af:25:82:b4:2b:24:2e:b2:8d:fb:64:0b:da:b4:
a3:f7:ab:8e:7e:ab:a0:b0:50:4e:77:14:c7:34:8a:
b7:6d:3f:6d:3a:71:6a:e1:58:9c:e9:40:37:38:67:
6f:74:84:8d:08:75:ec:5c:97:68:4f:cd:80:a1:da:
94:f0:f8:13:8c:fd:79:b4:5d:6c:2c:fe:70:de:b3:
28:d3:01:f6:5b:37:18:72:f7:2c:8d:b9:a0:5d:ca:
da:e6:81:85:19:51:94:a8:9b:a4:c9:81:f3:eb:aa:
19:c5:82:44:ba:fe:c3:8b:59:17:b2:07:fe:9e:3f:
28:ef:b1:77:83:42:2d:2b:55:18:ef:d7:5a:d6:44:
e7:6b:5a:2f:75:be:e8:92:e9:df:2d:9e:e9:c5:85:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:6A:11:30:8A:20:AF:E9:F4:D2:1F:12:42:99:CE:33:76:6C:B6
X509v3 Authority Key Identifier:
keyid:64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:66:51:bd:10:c2:80:03:5e:57:c3:00:75:49:e7:e0:cb:e6:
a2:04:b6:43:e0:eb:55:ea:c5:0b:b6:c0:26:79:90:11:7b:da:
5e:ac:27:6a:25:9a:16:ee:44:53:ee:93:4b:52:67:de:bc:76:
c8:9f:c2:61:e0:d3:53:1a:b6:f2:22:03:02:31:79:7d:42:83:
3a:37:69:f7:c4:41:10:9d:77:51:17:99:d1:1e:14:b0:57:44:
f8:14:81:3c:5b:ca:62:4f:e6:e7:15:35:a5:e5:fa:db:0e:4b:
17:36:fc:25:41:4b:c7:63:af:5c:c0:9c:50:c1:71:2b:f4:78:
dc:72:65:b5:d6:92:47:21:ab:23:cd:dc:56:5f:a0:c2:0e:05:
7f:3a:3b:cd:c3:9f:ba:13:f8:1f:5d:b7:56:25:95:18:f5:d5:
58:d8:27:8a:03:16:bb:1f:ac:19:9e:2b:ad:43:cf:42:12:e7:
27:fb:69:13:70:2a:27:98:32:1c:6f:a6:10:63:2b:03:92:ea:
85:a5:a3:91:a8:95:a6:ee:96:e3:01:02:44:e2:5e:e7:56:ce:
1d:03:98:aa:27:cb:ff:45:84:8f:94:3b:48:27:1e:5d:84:ef:
3a:57:5d:39:7a:1a:9b:8e:a0:ee:db:39:da:3d:ad:3d:d6:c4:
c0:93:7b:aa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUfE+Af4DYDDuetPZwsfYPiW3xwNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ3NDJhMmVmNDMyODJhMDUwOWU2YTMxNTc0Yzk2Yzgw
MDZlY2NkNTAeFw0yNTEwMjAwMjEwMTZaFw0yNTEwMjEwNTE1MTZaMDMxMTAvBgNV
BAMTKEM0MDk2QTExMzA4QTIwQUZFOUY0RDIxRjEyNDI5OUNFMzM3NjZDQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmjSktPpS5D20EBllM7qd9NnL
IT984hhoElT+cDu5/zF5HCkzo0f4LpOhmuyqL+1X9K3ptYkrjOM+LC7WJbfEITt0
osUp0JuRxxO42NwYsb+ln6jEZUA62JrqCtoof4zwuwwbbFpndB+vJYK0KyQuso37
ZAvatKP3q45+q6CwUE53FMc0irdtP206cWrhWJzpQDc4Z290hI0Idexcl2hPzYCh
2pTw+BOM/Xm0XWws/nDesyjTAfZbNxhy9yyNuaBdytrmgYUZUZSom6TJgfPrqhnF
gkS6/sOLWReyB/6ePyjvsXeDQi0rVRjv11rWROdrWi91vuiS6d8tnunFhVXTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUxAlqETCKIK/p9NIfEkKZzjN2bLYwHwYDVR0j
BBgwFoAUZHQqLvQygqBQnmoxV0yWyABuzNUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz
N2ZjLzAvNjQ3NDJBMkVGNDMyODJBMDUwOUU2QTMxNTc0Qzk2QzgwMDZFQ0NENS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pIUXFMdlF5Z3FCUW5tb3hWMHlXeUFC
dXpOVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iN2EwYWE1Ni00
YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMC82NDc0MkEyRUY0MzI4MkEwNTA5
RTZBMzE1NzRDOTZDODAwNkVDQ0Q1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGZRvRDCgANeV8MAdUnn
4MvmogS2Q+DrVerFC7bAJnmQEXvaXqwnaiWaFu5EU+6TS1Jn3rx2yJ/CYeDTUxq2
8iIDAjF5fUKDOjdp98RBEJ13UReZ0R4UsFdE+BSBPFvKYk/m5xU1peX62w5LFzb8
JUFLx2OvXMCcUMFxK/R43HJltdaSRyGrI83cVl+gwg4Ffzo7zcOfuhP4H123ViWV
GPXVWNgnigMWux+sGZ4rrUPPQhLnJ/tpE3AqJ5gyHG+mEGMrA5LqhaWjkaiVpu6W
4wECROJe51bOHQOYqifL/0WEj5Q7SCceXYTvOlddOXoam46g7ts52j2tPdbEwJN7
qg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:58:08 2025 by rpki-client