
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: U49L/fNaB9WnDXCPXT8MFgjXI/QwvYhaVQ0DsX0Yoq4=
Subject key identifier: ED:3D:22:98:A5:43:22:40:B0:D7:0E:C6:2E:AA:18:40:63:18:56:FF
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 68682C9310A52EBDAA401362E4A7A2F436E89F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 025E
Signing time: Sat 28 Jun 2025 03:23:05 +0000
Manifest this update: Sat 28 Jun 2025 03:18:05 +0000
Manifest next update: Sun 29 Jun 2025 05:23:05 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: s+JO6P/iJMDAlfxWQXIIzm1gnBjkM/yO7fXXbD8/UnI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 05:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:68:2c:93:10:a5:2e:bd:aa:40:13:62:e4:a7:a2:f4:36:e8:9f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Jun 28 03:18:05 2025 GMT
Not After : Jun 29 05:23:05 2025 GMT
Subject: CN=ED3D2298A5432240B0D70EC62EAA1840631856FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:ec:bd:1e:60:cd:50:77:28:fb:3c:d3:44:
cf:68:2a:25:e5:5e:39:ea:98:26:4b:73:e7:46:f8:
b6:a8:40:c8:fd:1e:fc:4d:d9:9f:25:bb:f3:5e:3c:
d4:ab:f2:03:e1:eb:71:3b:7a:75:37:fb:22:bd:ce:
3c:e0:ee:17:95:77:93:5a:01:19:29:c6:27:9b:e5:
84:8c:8d:1f:85:c2:79:5c:17:6d:35:0e:ca:e0:b4:
1b:7a:b0:47:30:31:d3:7a:58:a4:0c:7f:9b:83:50:
65:bb:bb:c1:bf:89:00:dd:9e:3f:eb:a4:07:c0:b1:
a0:9d:35:9c:ba:1a:ad:96:8d:8d:aa:22:a3:d2:bc:
93:12:32:80:16:2d:91:61:95:c7:9d:88:d0:7a:a4:
ef:a3:10:d6:7e:b4:19:ef:6c:04:db:37:38:d3:8e:
fe:9e:2f:ed:11:b4:b4:2b:30:ef:17:e9:bc:3d:cd:
13:01:06:b1:b5:c9:26:47:cb:66:1e:23:73:2c:3f:
c0:a2:f5:60:f1:f9:b9:c0:3c:18:c3:a7:8e:1d:56:
13:bb:13:a6:2e:30:51:e3:b1:16:05:fb:46:b1:d9:
19:bd:49:ad:46:e5:35:00:99:1f:22:cc:81:b4:b7:
97:8d:aa:a7:54:03:22:e3:77:ba:b8:37:f0:0d:b6:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3D:22:98:A5:43:22:40:B0:D7:0E:C6:2E:AA:18:40:63:18:56:FF
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:43:9f:f6:24:37:ba:45:41:6a:df:27:76:9a:54:df:2f:1f:
7e:6f:39:10:32:9d:a1:ec:30:38:e3:4a:d0:f8:8d:75:47:b7:
01:1c:4e:6e:0b:a2:8e:1e:86:83:59:39:c6:80:e8:ac:62:c1:
2f:fa:7e:8a:2a:0e:05:bd:3a:d2:d0:43:7e:f1:84:1f:7d:8a:
4d:d4:3a:8b:a9:4b:35:bd:fc:49:97:4e:df:b4:62:e0:dc:64:
69:cb:34:47:2d:03:f8:0c:6d:e5:6f:ca:10:ef:db:2e:63:02:
38:91:e9:bf:19:77:86:6a:9d:45:66:27:e8:73:7d:5b:64:05:
7c:05:0d:2d:ce:e2:72:76:b4:8d:66:8f:14:27:3f:c7:86:af:
c8:97:fd:df:e6:82:91:9a:d6:c7:38:7d:19:9e:1b:00:87:c3:
a8:84:8b:7d:e3:2e:66:72:b5:fb:8b:57:54:f0:e7:58:96:81:
38:59:53:bc:87:92:be:76:57:32:c8:95:ca:ee:89:04:8f:58:
ab:77:b3:7c:82:f7:b5:68:f0:a7:fa:6d:53:06:1b:22:e3:19:
f4:ed:55:11:a3:82:65:a1:a8:74:6e:b2:d3:de:74:20:ab:43:
2d:cb:2c:0d:3a:c3:7d:15:3b:8d:a3:df:ca:ba:0b:b3:44:1b:
31:7c:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:25:01 2025 by rpki-client