Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: WQRdNqVfraEYzHhNDAGK9xCkMMFEtNzK+W6IVFzyTn4=
Subject key identifier: 2C:FE:7E:90:96:54:E8:1A:C0:D6:1E:12:89:2A:A8:17:05:2A:CF:84
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 4F6F2D197F19F21EFD6375D93BF0E65B20B00A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 028A
Signing time: Sat 23 Aug 2025 02:15:22 +0000
Manifest this update: Sat 23 Aug 2025 02:10:22 +0000
Manifest next update: Sun 24 Aug 2025 05:53:22 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: ENOJgzcoyXDhCseINxXgsK24gLYBql/mMEI/nXpvcAE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6f:2d:19:7f:19:f2:1e:fd:63:75:d9:3b:f0:e6:5b:20:b0:0a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Aug 23 02:10:22 2025 GMT
Not After : Aug 24 05:53:22 2025 GMT
Subject: CN=2CFE7E909654E81AC0D61E12892AA817052ACF84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:41:34:8d:2c:36:f8:fd:10:78:eb:c5:8c:
c5:11:c7:60:95:74:6d:04:f9:0f:cd:37:50:2f:44:
5a:85:49:b7:6a:cb:02:fb:e6:93:e0:81:74:c4:27:
93:ee:d1:25:23:57:a1:10:96:ab:ad:78:cd:b5:4a:
b8:1c:06:8b:77:15:95:65:1c:ee:1c:b9:82:4a:16:
4b:5e:0d:ad:b5:d6:d6:42:f7:33:2f:d4:81:fd:35:
b9:c5:2d:18:cf:c0:1f:57:6e:d4:1b:fa:52:14:70:
b7:94:fe:85:1e:91:24:ee:0d:98:9a:fa:51:ec:01:
06:76:4e:fa:65:6c:37:7e:10:b2:60:91:9c:b0:01:
71:62:c7:40:63:c8:e9:49:d9:ff:46:72:04:47:7a:
f2:22:12:ff:cc:15:17:ba:01:7c:b3:8f:2d:1c:fc:
d2:2c:e7:f6:aa:fb:44:4f:8e:07:17:41:5d:46:20:
89:42:9f:cd:61:33:0c:df:54:80:b3:d7:99:26:d5:
71:09:29:1c:1c:d1:4e:6c:94:39:db:85:a1:06:ed:
92:55:07:df:c0:35:02:94:02:47:70:0d:cd:32:1c:
c3:19:8d:4a:4e:44:dd:e6:41:5f:7a:54:2e:8b:4b:
47:7c:94:20:08:92:c6:39:80:dc:d2:63:10:90:3a:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:7E:90:96:54:E8:1A:C0:D6:1E:12:89:2A:A8:17:05:2A:CF:84
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:40:29:67:94:14:0a:31:57:31:59:c0:04:e4:ca:1c:6c:7d:
e1:01:02:ec:cb:71:e6:0f:e9:61:ce:2b:56:59:8d:c0:50:f7:
5e:c3:72:77:ca:6d:cd:e9:62:86:b0:2b:32:1b:c9:cb:cc:7f:
ec:bf:1c:1b:c0:42:70:1d:b9:77:f8:64:02:53:e0:2e:6e:96:
75:cd:0e:ec:7f:e5:c5:ea:16:ec:8f:4a:97:a8:fc:a6:b6:7b:
3b:13:95:5e:38:3c:0f:25:1b:ab:40:c7:e8:a6:ad:04:c9:51:
d6:d9:cc:3f:de:7c:4c:96:bc:16:7b:a9:48:e9:49:47:3c:10:
65:1a:e4:12:00:40:97:c9:35:2c:66:70:3e:0b:1e:bf:e9:b8:
1b:a5:3b:18:cd:9f:2f:a4:54:62:a9:91:88:40:07:07:87:a2:
90:ed:b9:45:62:a3:b4:fb:b5:6e:e9:40:50:88:97:bf:4d:b3:
3c:9d:db:8f:07:08:34:f7:b8:53:3e:72:90:5c:89:ec:25:75:
88:a2:79:dc:57:ed:bc:a8:82:8a:fc:79:ce:6c:09:b2:70:e0:
b9:c8:38:1a:39:43:13:2d:a8:65:30:63:0d:09:b8:b7:45:6c:
89:1e:57:9c:a8:58:27:78:ff:30:49:91:8c:e8:cf:50:ed:2f:
f5:d5:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:19 2025 by rpki-client