Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: QbP5bk5kQyaXGonM8NMTxOr8Lmgp05+HYL3gat/wKbo=
Subject key identifier: 4A:9B:8A:10:86:E2:85:9E:14:76:45:CF:B2:C9:BD:EC:EF:71:4D:41
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 11450B0910D4C482743941E94A27A08835F1EF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 0280
Signing time: Sat 23 Aug 2025 01:15:22 +0000
Manifest this update: Sat 23 Aug 2025 01:10:22 +0000
Manifest next update: Sun 24 Aug 2025 03:47:22 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: avVSJmoMn7ZcFyHW+x6xhQCotbR2kyRgwm5giFGE0L8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:45:0b:09:10:d4:c4:82:74:39:41:e9:4a:27:a0:88:35:f1:ef:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Aug 23 01:10:22 2025 GMT
Not After : Aug 24 03:47:22 2025 GMT
Subject: CN=4A9B8A1086E2859E147645CFB2C9BDECEF714D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:9d:b7:9f:33:7c:7f:ad:7f:82:41:35:e9:
01:ec:1b:3f:01:06:ee:8b:0a:f1:29:0c:a5:72:21:
96:0d:5d:5f:1f:5e:b0:a4:55:13:81:7e:aa:5b:88:
2e:a5:79:b3:99:f4:bd:f2:02:24:8a:31:53:26:e7:
4e:39:79:84:90:ac:47:16:1a:7d:e6:58:83:2c:04:
f6:9f:06:b0:f5:55:da:40:c8:16:84:f0:a6:86:2c:
08:d2:f8:c9:f4:b6:26:3c:b0:ab:b4:0e:bf:4f:f6:
67:99:94:d0:f1:9e:4c:39:5b:e7:ba:ed:44:b3:10:
dc:c0:9b:05:3a:23:d2:41:48:d4:0a:5b:8d:d6:6a:
c3:0e:a7:85:b3:d9:ba:c0:d8:34:9c:fa:dc:53:db:
90:3e:86:b1:15:03:d9:af:b4:f5:ec:4d:f8:c9:85:
d8:10:48:47:94:07:18:1e:4d:33:69:1b:01:8c:82:
9a:06:36:e0:2d:9c:42:bc:61:5e:83:1b:3d:f1:82:
1c:63:09:f9:c6:88:86:e3:3f:d2:24:d4:11:c9:d3:
de:6a:1c:21:22:98:ef:33:5c:93:a0:ae:f0:de:67:
76:6c:19:97:6a:0b:e2:fe:5b:25:4a:c8:13:68:7f:
26:d8:ca:97:3e:12:ea:09:20:21:04:a8:9e:48:37:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:8A:10:86:E2:85:9E:14:76:45:CF:B2:C9:BD:EC:EF:71:4D:41
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e9:97:50:03:46:ea:5c:67:9a:96:51:b0:d8:1b:7d:30:f0:
11:90:56:d7:e6:f4:ae:0a:0b:32:03:53:4e:f0:a1:b4:a5:ff:
b7:6b:14:3d:62:4d:97:33:66:64:c3:dd:5a:27:02:95:1c:b6:
34:16:7a:08:2e:ef:a8:03:c6:9c:b7:20:de:83:27:e9:f9:c9:
c5:38:28:3e:31:6e:4c:eb:20:2b:10:4c:d2:67:d7:6f:61:85:
ea:ff:df:ea:00:05:d8:bc:59:ab:ab:2b:50:1b:89:c1:a1:b3:
8b:6b:a7:e0:7e:08:da:87:57:c6:11:b9:ee:f4:2b:e2:77:37:
7f:6e:fe:be:34:9c:a2:70:66:17:62:66:9a:6f:de:48:4c:5a:
07:23:e0:9d:73:15:20:03:34:0f:f6:d6:9c:cd:a8:14:ce:6e:
c0:9a:6b:f9:47:be:be:a3:46:f0:4e:e4:b0:50:db:25:63:f5:
d8:94:c4:50:76:9b:20:9b:57:f2:68:be:e7:92:a7:cf:81:f2:
b3:ea:a5:a7:f6:84:fb:f4:ab:c9:31:df:44:3c:ae:8c:d5:5b:
f6:30:4d:5e:2b:0f:c3:a3:a7:c1:51:e9:d8:a1:53:88:52:d9:
8e:aa:3d:ef:b3:91:2b:27:22:dc:9c:ac:ba:c6:df:6d:ab:83:
23:5a:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:31 2025 by rpki-client