Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: 0nnA2/7We1tB/lx2PdRNb1iEzr9iM0E25YX9kZBm9y0=
Subject key identifier: 46:3F:AF:4D:B9:E2:15:F5:69:8C:E3:C2:A5:F9:61:07:D7:8B:FB:B5
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 57FDA96347BFFD6073DBC4A798D7E8FEA1C21DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 02CD
Signing time: Sun 19 Oct 2025 10:29:29 +0000
Manifest this update: Sun 19 Oct 2025 10:24:29 +0000
Manifest next update: Mon 20 Oct 2025 12:27:29 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: QdJDzilXyAnRtJ8jHjoOCA7AeiPAyUjbSHutRFIsbIM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fd:a9:63:47:bf:fd:60:73:db:c4:a7:98:d7:e8:fe:a1:c2:1d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Oct 19 10:24:29 2025 GMT
Not After : Oct 20 12:27:29 2025 GMT
Subject: CN=463FAF4DB9E215F5698CE3C2A5F96107D78BFBB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:b5:1a:eb:dd:22:e8:5a:d2:f2:e8:bb:d6:
bd:a0:bd:8c:44:0b:b8:6f:47:44:4f:67:a8:a2:ef:
4c:eb:ea:8e:a6:aa:78:8a:f3:4e:80:fb:d9:58:7d:
1d:26:41:22:24:34:c6:a5:b8:bb:b5:9a:3e:7b:22:
c2:97:81:e9:e1:6a:83:70:e1:26:92:2a:e3:3f:4b:
62:a8:e1:46:39:cd:aa:24:9a:ae:bc:06:91:e7:96:
78:23:65:7f:6f:2a:67:13:44:2e:71:d4:88:f4:c6:
f4:07:a8:81:06:d5:0a:8b:83:93:a5:f9:2c:58:92:
56:46:69:cb:fb:c6:2b:a8:63:af:3d:29:fb:79:3a:
da:f1:ce:67:ed:4f:cb:67:ef:01:f6:a4:4c:df:f5:
e4:cc:f8:5f:2c:6f:69:a7:5c:01:1e:bf:31:a4:fc:
ff:36:b6:17:9e:05:af:3f:9f:16:76:f3:a9:3f:97:
21:c5:9a:5b:a6:18:95:6c:70:ae:ed:79:91:c7:dd:
e1:d8:80:ce:64:b4:04:dc:75:87:2e:f3:39:ad:c2:
14:02:06:5c:63:e6:8b:b0:89:b7:82:24:46:b6:41:
cc:16:1c:68:2c:87:c9:35:fe:cc:26:db:81:16:ad:
b5:96:dc:8f:32:50:24:22:57:02:ac:1b:33:c2:a7:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:AF:4D:B9:E2:15:F5:69:8C:E3:C2:A5:F9:61:07:D7:8B:FB:B5
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:3e:88:97:f4:29:1f:6e:4b:f8:8e:aa:f9:63:81:c2:9f:
25:68:96:69:a8:86:c6:78:22:24:0c:e5:0b:c4:e9:86:f9:0e:
66:03:37:f0:14:db:b8:17:72:36:9b:4d:4e:86:f5:5b:62:d6:
1a:1f:c6:5e:9b:ea:92:74:f5:78:0b:8c:20:ba:f3:6e:1e:2b:
72:45:34:c6:1c:15:fb:4a:27:e2:65:5b:6c:54:e6:5f:02:f3:
75:5d:b9:06:99:ed:77:13:09:bb:7b:eb:0c:ba:54:47:bb:23:
dd:e0:ee:92:38:89:ca:16:51:62:02:d4:a1:10:cc:fc:3b:5a:
04:45:2a:5f:72:d6:30:ba:ba:d4:6a:ce:9c:6d:bc:0b:e5:8a:
64:98:f1:1f:bb:4f:63:7c:2a:eb:7f:08:0f:e3:55:d0:73:0d:
86:06:35:32:f5:c1:22:12:3c:75:e1:20:c1:bd:de:b0:4c:48:
a8:33:0e:24:ab:81:73:7a:8c:9a:9f:d6:14:ce:29:45:26:c1:
1b:71:14:0e:1a:12:25:e9:a9:e8:ce:aa:df:03:8a:e4:7f:ea:
e2:20:c8:c8:64:5f:05:a3:64:a0:72:72:c7:c7:17:38:a2:25:
e4:d9:7c:fa:01:18:96:f9:a9:4f:dd:3d:ec:67:29:be:ca:a0:
2d:fd:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:06 2025 by rpki-client