Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: KwTWBe10pvf4DDdt/ARA68KF9ypkfxfQk2/LG7D9TNU=
Subject key identifier: 4D:00:2F:87:D4:3B:6F:90:EA:40:12:2F:A9:02:28:9A:B7:FD:5D:D9
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 4221E7566F78EDB9564527517630AC89308FFF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 0244
Signing time: Fri 22 Aug 2025 15:15:56 +0000
Manifest this update: Fri 22 Aug 2025 15:10:56 +0000
Manifest next update: Sat 23 Aug 2025 16:35:56 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: Hi/xbePCMytsOyyyWanOaz5RcvwmAzZ1nzh4c+xV8d0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 16:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:21:e7:56:6f:78:ed:b9:56:45:27:51:76:30:ac:89:30:8f:ff:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Aug 22 15:10:56 2025 GMT
Not After : Aug 23 16:35:56 2025 GMT
Subject: CN=4D002F87D43B6F90EA40122FA902289AB7FD5DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0a:e2:cd:73:84:1c:0a:1c:11:f3:94:7e:84:
ab:ca:a8:e4:27:dc:c3:5d:5a:94:b3:f4:e3:ee:ff:
ad:89:7c:16:38:6e:e6:56:bc:83:bb:77:c9:b7:4e:
36:b1:31:25:90:a7:87:36:72:07:db:46:c7:66:f7:
5b:7a:48:9d:c0:f4:a8:6f:b3:b4:4a:c2:c7:e3:f1:
7c:21:46:21:2c:fe:1f:bd:b8:ba:38:44:db:c3:9e:
71:e2:0a:1d:48:c3:a8:3c:4f:a6:be:77:57:74:9c:
31:f5:33:80:60:d6:3e:6b:d0:49:03:f5:77:95:f7:
5f:50:e3:87:b2:5d:60:75:d4:64:93:15:80:be:15:
38:a2:a3:b6:46:6c:05:2a:3e:46:29:f9:4b:ac:6a:
ff:74:52:29:02:d1:51:c3:70:90:96:1d:41:91:f6:
15:c3:fd:2e:bb:61:13:bc:a6:51:04:1a:aa:94:e3:
49:33:1c:95:55:7d:0c:b3:d1:e7:2c:d4:2e:2f:ad:
e9:df:23:a7:f7:e9:0a:d0:3d:59:b1:9c:5e:ff:2c:
5d:00:29:02:81:2e:a0:34:85:46:14:ba:34:38:bc:
6e:2d:28:10:0d:43:36:ce:cc:97:2d:08:15:34:2a:
e6:9c:4e:95:78:73:b3:23:7b:79:b5:7e:c7:e6:c1:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:2F:87:D4:3B:6F:90:EA:40:12:2F:A9:02:28:9A:B7:FD:5D:D9
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:83:e9:b6:ad:19:a0:ac:84:c8:da:80:35:44:0c:91:ef:32:
81:21:6e:90:1e:f4:a8:b9:f0:91:21:50:e5:48:b9:5c:bd:b5:
bf:4e:8a:d4:8a:62:77:e4:41:14:cd:9b:53:a7:59:ff:ad:83:
e4:89:50:e0:ae:3e:c6:31:08:bc:88:2c:9e:f8:a5:6d:13:f2:
84:10:dc:ad:b6:16:e0:59:5c:7e:29:b3:58:28:a1:7c:19:ef:
89:12:11:99:96:eb:87:db:d3:3c:95:96:24:2a:04:4b:ad:c6:
15:41:3b:ee:a9:5a:d2:7f:0f:37:61:79:e5:1f:75:39:8d:53:
00:c4:9e:34:5c:b9:f8:f2:dc:40:54:43:fc:67:29:ad:d3:b2:
1a:ee:8a:08:fd:83:e3:3a:b7:de:ae:97:57:69:3c:27:6e:75:
79:59:ec:2d:9a:8b:d6:da:9e:3d:f7:5a:36:df:fd:ea:0e:d2:
83:d4:1f:2a:43:9f:be:cc:52:f0:d1:bc:ce:36:79:96:90:3e:
b0:78:8e:4b:1a:2e:e4:f0:f0:1b:a3:26:a2:84:e4:a6:0c:93:
76:46:79:e0:fd:43:bb:88:8d:ae:51:0d:7f:ce:bd:95:a2:ae:
87:f1:cd:5a:f2:ac:3a:88:88:66:ef:d0:97:77:9a:61:f8:a0:
2c:91:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:34 2025 by rpki-client