Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
File: F69066348CBBD67E19E5C1CFED53765401498B26.mft (raw, json)
Hash identifier: bAUEWDG9zY3uFfg3J42IArfjLeL0yby2tGdb1hEQRUM=
Subject key identifier: 33:0F:23:E1:95:65:91:29:29:13:90:E2:49:B6:1F:E4:81:60:15:B9
Authority key identifier: F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
Certificate issuer: /CN=f69066348cbbd67e19e5c1cfed53765401498b26
Certificate serial: 1ACBE7DB599C37C45EFDC0C2BB6D22E79926C08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
Manifest number: CE
Signing time: Sun 19 Oct 2025 20:37:06 +0000
Manifest this update: Sun 19 Oct 2025 20:32:06 +0000
Manifest next update: Mon 20 Oct 2025 21:37:06 +0000
Files and hashes: 1: F69066348CBBD67E19E5C1CFED53765401498B26.crl (hash: lYhBL7IXRojvFfN9ol5Vv/umULCOHe38UaYbx8ti8B4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.crl
rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:cb:e7:db:59:9c:37:c4:5e:fd:c0:c2:bb:6d:22:e7:99:26:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69066348cbbd67e19e5c1cfed53765401498b26
Validity
Not Before: Oct 19 20:32:06 2025 GMT
Not After : Oct 20 21:37:06 2025 GMT
Subject: CN=330F23E195659129291390E249B61FE4816015B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:88:73:d5:eb:2d:9c:51:fa:f9:a6:91:7d:
ff:5e:78:c4:ee:53:6e:43:6e:b8:5b:8b:ff:b1:a4:
30:09:79:45:22:41:90:f2:af:88:9a:79:ca:9e:36:
9a:f8:1d:e3:ac:19:c0:2d:eb:ae:ad:9e:7b:2d:16:
f5:35:95:be:e4:be:12:e0:73:b3:53:e8:64:83:a9:
47:c0:88:d0:3c:4f:5d:d1:4c:c6:21:55:79:7a:ea:
d7:9c:02:03:f7:38:7f:98:c5:3f:00:b7:72:d8:9a:
ab:98:e1:92:e8:e8:9f:6d:04:cf:7f:c4:57:ae:93:
4f:f9:05:ca:0f:38:c5:17:e8:ea:2c:74:22:15:4b:
d1:72:51:ff:bf:e9:a1:73:21:9b:3f:2f:74:33:9f:
8f:45:10:b0:ca:3e:52:3a:01:4d:e2:93:a9:df:a8:
44:3d:32:bf:48:a5:42:40:f2:34:d2:11:12:6e:36:
b7:65:41:8c:35:3a:79:21:a6:83:cd:df:d2:08:0d:
b3:73:2a:57:da:3d:9c:ad:76:3b:aa:bd:f2:2c:02:
cb:9e:a4:83:2b:96:9a:1c:da:35:f3:d0:13:4a:46:
dc:0f:9f:ff:2d:d2:38:4a:1e:cc:9a:a2:aa:cc:58:
37:11:ce:0b:eb:d1:54:b1:7e:c1:fd:85:42:bd:e9:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0F:23:E1:95:65:91:29:29:13:90:E2:49:B6:1F:E4:81:60:15:B9
X509v3 Authority Key Identifier:
keyid:F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:98:c2:b8:9d:04:c8:4f:cf:17:43:f5:d5:75:f7:e7:f1:bf:
c8:28:ca:0d:ec:32:c5:47:ad:25:cf:2d:30:0e:9d:36:b0:40:
c9:fe:4c:62:3e:9d:de:fa:94:06:a5:b1:9b:b8:9a:da:78:bd:
29:18:71:23:d8:b6:d5:e3:aa:13:0c:1a:57:ab:f3:e6:70:e0:
c0:70:45:14:92:66:fb:1f:61:e4:e9:76:47:3f:e6:9f:de:d7:
88:a7:54:7b:a2:f1:3a:4f:2b:79:87:7e:f0:65:df:49:97:cf:
36:4d:64:8f:ec:5a:36:79:de:c0:0f:72:85:72:5c:a0:06:65:
b1:27:b8:29:11:4c:3b:8d:02:f3:8f:51:6b:b4:cb:ea:6a:0f:
0d:98:b0:27:be:cb:0c:96:70:1c:5b:c0:6c:1c:53:71:a1:25:
03:fd:00:ff:65:a5:42:70:f1:60:14:ca:c9:06:32:84:ac:ba:
c8:0d:23:ca:dc:17:84:e3:38:ab:8d:ab:85:d9:42:c5:91:78:
99:32:9f:74:31:bb:36:6e:e4:4d:50:8e:c5:fa:97:d9:eb:f9:
3c:b4:13:82:79:0e:68:7c:da:5c:81:19:26:18:96:ed:cb:c6:
3f:7f:6f:b1:83:71:8c:ac:a4:fd:2e:8d:73:47:b5:8b:eb:cb:
08:8c:68:4e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGsvn21mcN8Re/cDCu20i55kmwIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjY5MDY2MzQ4Y2JiZDY3ZTE5ZTVjMWNmZWQ1Mzc2NTQw
MTQ5OGIyNjAeFw0yNTEwMTkyMDMyMDZaFw0yNTEwMjAyMTM3MDZaMDMxMTAvBgNV
BAMTKDMzMEYyM0UxOTU2NTkxMjkyOTEzOTBFMjQ5QjYxRkU0ODE2MDE1QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZQIhz1estnFH6+aaRff9eeMTu
U25Dbrhbi/+xpDAJeUUiQZDyr4iaecqeNpr4HeOsGcAt666tnnstFvU1lb7kvhLg
c7NT6GSDqUfAiNA8T13RTMYhVXl66tecAgP3OH+YxT8At3LYmquY4ZLo6J9tBM9/
xFeuk0/5BcoPOMUX6OosdCIVS9FyUf+/6aFzIZs/L3Qzn49FELDKPlI6AU3ik6nf
qEQ9Mr9IpUJA8jTSERJuNrdlQYw1OnkhpoPN39IIDbNzKlfaPZytdjuqvfIsAsue
pIMrlpoc2jXz0BNKRtwPn/8t0jhKHsyaoqrMWDcRzgvr0VSxfsH9hUK96QEdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMw8j4ZVlkSkpE5DiSbYf5IFgFbkwHwYDVR0j
BBgwFoAU9pBmNIy71n4Z5cHP7VN2VAFJiyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1
N2EyLzAvRjY5MDY2MzQ4Q0JCRDY3RTE5RTVDMUNGRUQ1Mzc2NTQwMTQ5OEIyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlwQm1OSXk3MW40WjVjSFA3Vk4yVkFG
Sml5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZjgxZTIzNS04
MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIvMC9GNjkwNjYzNDhDQkJENjdFMTlF
NUMxQ0ZFRDUzNzY1NDAxNDk4QjI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepjCuJ0EyE/PF0P11XX3
5/G/yCjKDewyxUetJc8tMA6dNrBAyf5MYj6d3vqUBqWxm7ia2ni9KRhxI9i21eOq
EwwaV6vz5nDgwHBFFJJm+x9h5Ol2Rz/mn97XiKdUe6LxOk8reYd+8GXfSZfPNk1k
j+xaNnnewA9yhXJcoAZlsSe4KRFMO40C849Ra7TL6moPDZiwJ77LDJZwHFvAbBxT
caElA/0A/2WlQnDxYBTKyQYyhKy6yA0jytwXhOM4q42rhdlCxZF4mTKfdDG7Nm7k
TVCOxfqX2ev5PLQTgnkOaHzaXIEZJhiW7cvGP39vsYNxjKyk/S6Nc0e1i+vLCIxo
Tg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:52 2025 by rpki-client