Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: O/yF3yogDTqDEV6bUmjBruwpzQFL7RrjBN4xPQW/8PM=
Subject key identifier: DD:15:11:86:7E:57:AF:E5:B9:09:7C:BA:BF:B6:9C:76:AD:4E:08:C8
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 299778DF3A1962084F7C8C732FC6E4900C196359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 0291
Signing time: Sun 19 Oct 2025 16:17:48 +0000
Manifest this update: Sun 19 Oct 2025 16:12:48 +0000
Manifest next update: Mon 20 Oct 2025 19:38:48 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: 4au1HYnb3I1mnuKEEiMwk9+en0lCflVB+c+kz5/TC/o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:97:78:df:3a:19:62:08:4f:7c:8c:73:2f:c6:e4:90:0c:19:63:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Oct 19 16:12:48 2025 GMT
Not After : Oct 20 19:38:48 2025 GMT
Subject: CN=DD1511867E57AFE5B9097CBABFB69C76AD4E08C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:f1:b9:28:bc:80:59:b0:0c:7f:a7:5c:56:
04:4c:27:e9:c7:3f:a6:e5:82:bc:1b:53:d2:b8:86:
58:3a:63:aa:ce:27:05:a8:7b:ec:6f:e6:44:91:b8:
91:ed:1d:97:a2:f0:77:57:44:fb:04:0b:54:5e:cf:
82:3e:d7:82:42:72:d6:49:1c:25:0a:08:72:16:29:
13:2e:be:9f:ec:6a:ce:0a:4d:eb:5e:ac:07:10:46:
d3:4d:24:5c:d3:3e:0f:e4:e6:1d:6d:91:b7:6f:41:
f2:d7:74:7e:fe:4c:bf:d0:29:00:32:95:ba:44:ee:
8a:56:83:ff:da:65:a1:e2:00:f5:5e:c0:40:27:ec:
6b:8a:26:f0:9d:59:a1:24:f6:16:e0:6f:f2:f7:4c:
48:53:1d:db:48:ed:fa:fb:57:27:7a:af:19:28:8c:
fb:1c:34:4c:e0:9c:d0:f8:f8:6e:2f:37:36:d1:f0:
e5:c0:43:6e:45:9a:9f:e9:2c:d7:23:98:5c:3a:7f:
a6:ba:1a:cd:79:4b:8f:87:ec:71:56:4d:2d:47:18:
37:e9:5a:1a:fd:b6:50:f8:bd:59:5a:f0:39:01:f6:
bf:35:0e:ae:46:06:ec:03:70:a9:4c:7b:56:45:f7:
40:f1:c5:38:09:a0:e7:d0:41:3f:4c:56:94:16:39:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:15:11:86:7E:57:AF:E5:B9:09:7C:BA:BF:B6:9C:76:AD:4E:08:C8
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:86:74:b6:21:85:52:52:17:ed:00:b4:11:56:f7:41:82:0e:
03:c9:b0:b8:c6:3c:67:d9:d6:b0:dd:cb:61:a4:c6:14:6a:fb:
fb:a5:e2:b5:38:4a:a5:6b:84:45:6d:55:48:00:1a:06:8f:2e:
83:55:0f:35:f6:5b:cd:97:03:f5:f3:7f:6b:e7:dd:fd:2f:3c:
05:2c:8e:ba:f0:69:af:ba:4f:a7:36:9e:bb:56:f5:07:9e:52:
5a:aa:c1:48:d8:ff:5e:09:29:db:49:ef:69:49:13:ec:65:f4:
e9:ef:1b:80:92:b3:ff:e8:2e:1e:96:ad:e6:58:1b:92:53:92:
d2:6a:b6:fc:8f:37:91:55:b5:0f:a7:42:d3:27:51:c5:96:17:
f7:fe:8e:5d:41:42:e0:07:ce:93:c7:83:99:29:83:01:8a:7e:
8b:56:00:54:69:d7:1e:10:f8:f8:4b:06:ac:af:56:7e:32:b0:
d6:08:1e:6e:89:f2:5c:a2:9e:06:85:65:69:b8:49:8b:ee:19:
a9:88:47:13:2e:94:84:ed:a8:0c:12:9b:4e:50:26:b0:43:64:
55:84:e7:c5:aa:1c:73:fb:a6:c1:06:7d:d8:d4:f3:4a:e4:54:
f7:b1:ae:40:51:b5:c9:c9:66:96:b5:8a:a9:8b:e7:6a:2d:f0:
b3:4f:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:02 2025 by rpki-client