Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: AappUBbXjt6To4q0R4sE4kJjMyBOXBQuT4BFOITSNw0=
Subject key identifier: F1:CB:1F:D2:3D:71:4D:85:91:57:53:2F:4C:1D:64:C7:10:F3:BF:D8
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 4793BA868006ECC1E877C67440D5726675E4AA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 0486
Signing time: Mon 20 Oct 2025 05:30:42 +0000
Manifest this update: Mon 20 Oct 2025 05:25:42 +0000
Manifest next update: Tue 21 Oct 2025 06:14:42 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: oC6iC/eblnOt7ARj/miN0wUFikGe2uY7wMVeKAVo33E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:93:ba:86:80:06:ec:c1:e8:77:c6:74:40:d5:72:66:75:e4:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Oct 20 05:25:42 2025 GMT
Not After : Oct 21 06:14:42 2025 GMT
Subject: CN=F1CB1FD23D714D859157532F4C1D64C710F3BFD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:60:23:42:ed:97:47:06:28:3b:41:5a:f6:
25:af:11:52:c5:1a:94:2c:85:2c:33:15:67:b4:90:
b1:24:7f:dd:cb:d3:32:01:9c:08:16:82:a6:23:13:
fa:c8:f1:86:41:cf:fe:2d:fe:97:ea:45:e6:96:31:
f1:65:04:c3:3f:87:d5:01:e0:49:9b:0a:91:53:65:
fe:75:ac:c9:ed:e7:f8:61:d0:bd:24:1d:ce:b6:ec:
31:6f:0a:1d:be:57:14:31:6e:d7:94:ff:93:16:ac:
e4:95:56:ef:09:49:31:d6:54:49:44:7d:f8:ca:84:
42:d9:19:b2:23:34:28:85:94:6e:1f:08:fb:44:af:
70:62:ba:5e:31:18:bb:c8:44:30:ba:5c:b1:68:b3:
2e:b7:55:3d:86:66:18:17:ed:35:54:bc:02:c5:ce:
de:79:2a:df:69:34:a0:77:c2:84:4d:69:f6:17:33:
5d:01:1c:9f:67:62:58:cc:52:65:b3:16:fb:1f:0d:
93:44:d0:96:eb:04:4b:bb:3d:59:80:0d:4a:11:9f:
b3:48:af:51:50:23:e0:97:d9:b6:8c:12:74:c8:52:
7e:3b:83:5f:f7:2d:a4:77:76:4f:c5:00:05:42:b3:
7e:ac:3b:f9:92:fe:b2:ac:48:62:3d:0b:25:c5:be:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:1F:D2:3D:71:4D:85:91:57:53:2F:4C:1D:64:C7:10:F3:BF:D8
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fe:b7:0e:85:ec:71:5d:3e:13:8e:8f:13:39:09:93:aa:e1:
b9:f5:64:77:ff:c2:fd:2f:5c:b0:9b:49:e6:19:3c:61:a0:f9:
13:75:7b:c7:58:ba:73:ae:cf:48:89:17:5b:33:59:64:e3:1b:
1e:33:87:94:9f:cb:4f:bf:3f:14:19:83:b6:7d:29:ce:95:6a:
69:e1:d3:9b:5f:b0:d5:87:83:e0:c6:27:4d:12:b9:b0:d1:62:
f0:3a:da:30:45:73:e8:eb:df:e6:14:47:06:c9:06:b6:b1:fa:
7a:b5:a3:1c:47:f9:84:a6:08:10:0d:10:54:98:27:55:b8:cd:
2a:94:e1:9f:e1:11:b0:98:a3:e1:01:ac:eb:04:77:c9:b2:58:
28:96:c2:c6:f9:83:ab:24:e7:61:a7:7b:cc:29:9a:5e:31:d3:
f6:95:86:37:08:fa:5d:ca:aa:da:26:98:ad:41:f1:12:01:b2:
5d:75:8b:fa:cb:cd:66:b2:79:ec:f9:67:9c:f6:f5:0d:04:00:
1c:35:2c:83:4f:9c:9f:5c:e3:b9:e6:6c:eb:92:2a:db:e7:2d:
3f:78:d6:5c:31:56:56:13:2d:d4:b7:e3:1e:21:ae:9c:c6:1e:
83:c7:30:f3:b6:f5:71:ce:df:ec:34:89:84:85:4a:db:0b:01:
19:23:6c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:47 2025 by rpki-client