Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: 031OqHw7169wR6V42RVH7kMfLckcMDLV5E97Ot759UI=
Subject key identifier: 75:71:26:F8:12:9E:E4:CF:E5:82:3A:5B:E0:E2:CC:D5:9B:6D:A4:01
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 7CAAF87313637BCDB7522B4C5DF43B7FF136EFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 0267
Signing time: Sat 28 Jun 2025 09:43:05 +0000
Manifest this update: Sat 28 Jun 2025 09:38:05 +0000
Manifest next update: Sun 29 Jun 2025 12:15:05 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: GBcOGAWuLO5dReN7dIp+fUX0WrHZFSMZhpVkMu6429s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 12:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:aa:f8:73:13:63:7b:cd:b7:52:2b:4c:5d:f4:3b:7f:f1:36:ef:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Jun 28 09:38:05 2025 GMT
Not After : Jun 29 12:15:05 2025 GMT
Subject: CN=757126F8129EE4CFE5823A5BE0E2CCD59B6DA401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:d1:50:b8:61:14:db:9d:45:b3:1a:3a:93:
55:d2:39:c6:96:25:24:56:02:30:c6:6b:ec:3e:0a:
02:e8:a6:c8:f4:d3:31:a2:17:62:38:72:a2:11:32:
55:62:0e:13:29:b0:1b:46:3b:57:95:0c:00:a5:fc:
a1:1f:85:bd:8f:14:3c:30:a6:1e:85:22:b1:36:c4:
5b:b8:b3:71:ec:1f:dd:3f:9f:5e:6d:a5:7a:92:a0:
4c:d0:64:6f:86:c3:5a:9f:bd:f4:56:14:fd:ae:00:
93:e8:17:a5:4c:1e:64:d1:e0:d3:67:82:fa:7a:8a:
40:7a:dc:5e:8e:45:ae:33:f8:b8:4e:15:bb:ed:10:
8c:c5:7b:b9:9a:92:5c:21:da:b0:08:c4:d4:9d:74:
d8:57:04:01:45:73:8e:ed:d9:bb:36:c7:33:76:26:
53:ac:38:25:c9:78:8e:cc:ce:5e:9c:98:60:09:97:
f2:84:57:a0:f9:9a:39:e2:b5:a7:a2:71:38:17:c5:
47:d0:8b:99:f5:3e:70:28:95:fa:3d:36:e5:19:a7:
d0:b4:d3:82:fa:a9:7c:fa:8b:5b:4b:dd:9a:62:26:
65:e8:d2:36:45:36:58:19:f7:4d:75:d5:bf:fa:bd:
c0:c9:d0:70:be:5d:56:f4:e9:12:4d:6a:ef:a2:3c:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:26:F8:12:9E:E4:CF:E5:82:3A:5B:E0:E2:CC:D5:9B:6D:A4:01
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:16:1a:0c:dc:aa:17:a2:c1:fd:b1:1f:01:6b:74:2f:a5:fa:
96:10:af:96:f0:30:b1:75:de:32:f9:35:66:5b:4d:b3:29:4f:
4f:af:ba:32:c6:96:18:cc:e7:b1:f8:e8:f8:f3:a3:29:4a:1f:
d7:97:8c:fa:d2:9a:37:73:d5:9f:59:e5:55:a4:91:c8:74:51:
c4:66:88:e1:94:7c:20:fb:eb:72:bd:a2:89:ab:5b:84:8d:07:
f0:09:31:41:36:7d:cf:eb:13:cc:16:4f:ca:0b:f1:a6:b3:7c:
72:be:9e:8f:49:f0:ca:fb:a0:2f:40:af:77:a0:0f:7a:42:53:
83:75:f3:f8:ea:86:0b:7a:e5:38:a9:49:71:a6:74:d0:39:c2:
7e:09:4b:e9:ab:24:58:91:48:00:87:ab:34:c6:8c:cd:81:3e:
a8:ff:86:fd:73:be:d9:e5:c7:ee:13:d8:16:ff:ce:43:ba:d5:
f6:ae:72:82:51:05:98:26:af:9b:fa:2c:9c:42:bb:3e:7b:89:
7e:1c:a9:3e:f5:04:49:b9:9e:a3:34:8c:68:74:88:a7:77:42:
41:8e:9b:83:9e:ef:e9:3e:35:83:34:91:80:7a:50:ff:18:1a:
04:2b:de:19:b1:0b:d8:99:bd:c5:cc:23:d5:e5:4f:59:0e:d1:
df:5f:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:42 2025 by rpki-client