Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
File: 9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft (raw, json)
Hash identifier: AVxaU0b4cJhu7QNCY1z5ThMWutR8oKQnBPM/+x/ktts=
Subject key identifier: 9C:82:72:51:1E:80:4D:61:5C:08:DE:B6:93:C6:14:8F:C0:78:D9:D2
Authority key identifier: 9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64
Certificate issuer: /CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64
Certificate serial: 4E0F18F3EF80273FAFFE8C3CE30C0263D3126127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
Manifest number: 0A
Signing time: Mon 20 Oct 2025 04:08:38 +0000
Manifest this update: Mon 20 Oct 2025 04:03:38 +0000
Manifest next update: Tue 21 Oct 2025 06:58:38 +0000
Files and hashes: 1: 9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl (hash: xm7jD4H/XTswYt8CIpv9+jIkSxdAi7xRBrkLJtUUlDs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0f:18:f3:ef:80:27:3f:af:fe:8c:3c:e3:0c:02:63:d3:12:61:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64
Validity
Not Before: Oct 20 04:03:38 2025 GMT
Not After : Oct 21 06:58:38 2025 GMT
Subject: CN=9C8272511E804D615C08DEB693C6148FC078D9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:df:62:95:ab:9c:30:25:5f:87:36:90:bf:
e2:f0:9b:e1:fb:ff:86:0b:f8:6b:2c:57:48:5f:46:
79:b4:59:c3:75:03:59:e0:c9:82:ac:15:33:2c:9a:
d5:5a:6b:70:e3:d8:68:13:02:ed:e5:48:63:a6:42:
1f:63:cb:36:56:89:8d:99:7d:47:36:20:3c:1f:0a:
8b:09:9c:de:71:33:e6:2d:03:8a:b0:4d:f4:c3:25:
18:e9:13:fe:07:24:e1:b5:2d:80:d6:c5:34:a5:42:
d2:38:ca:b7:1e:52:6d:dc:22:0a:b6:09:69:87:d2:
a5:37:16:6b:7a:82:13:05:91:40:31:e5:33:d5:c0:
23:3e:69:bd:1e:72:89:e5:fc:ff:19:72:c3:cd:8b:
ac:e7:59:30:a9:c2:52:2e:6d:35:db:6b:52:e8:a5:
c9:67:cd:81:36:d9:a7:6d:75:64:ea:b1:fd:ee:0e:
6a:e3:82:ed:3c:a6:1d:cc:83:a9:1a:34:0a:f2:fc:
74:81:1d:61:73:b9:d5:da:4a:eb:44:a9:d6:f2:31:
65:84:5a:0e:e7:c7:59:2d:62:a3:44:f6:32:8b:93:
78:63:e2:64:7f:61:df:81:57:3f:e6:e1:e3:57:eb:
21:bb:36:72:bd:db:4e:85:b9:5d:83:ee:20:3d:f7:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:72:51:1E:80:4D:61:5C:08:DE:B6:93:C6:14:8F:C0:78:D9:D2
X509v3 Authority Key Identifier:
keyid:9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6d:9b:c3:32:5a:45:76:c4:13:73:91:69:e4:a1:56:bd:52:
2a:80:ac:ff:67:ce:4f:2c:1b:3d:3d:cb:05:5d:34:a7:b8:b6:
ee:db:cf:7c:61:7c:39:ec:71:c3:68:91:ed:0c:99:10:f4:5b:
81:7c:a5:3a:ef:8b:cb:b9:1e:0a:05:6e:59:93:00:ee:1b:b2:
0f:71:c0:c5:b7:c8:f8:4b:99:80:bb:98:5e:cf:59:c5:9c:c1:
60:1c:c3:78:ea:4f:64:29:bb:3f:c1:cc:92:93:9a:af:94:81:
48:04:5e:5b:6b:e1:3b:47:dc:7e:66:15:4a:be:86:49:1c:2f:
8f:a8:88:ff:f5:cd:33:30:11:5a:3f:f4:7e:d9:d3:6e:ba:5f:
e9:47:51:0d:87:dd:b2:c2:26:c3:d6:5b:8f:01:57:b7:98:a0:
a6:2b:44:f0:f6:84:09:0a:30:bc:01:17:33:69:c6:83:1f:42:
c1:97:95:a3:0a:b0:af:e2:92:50:94:12:79:f8:c5:96:20:c5:
18:73:8d:ff:64:24:cd:d4:d7:2a:0c:54:16:34:a6:d5:a9:a0:
6e:4b:97:61:9b:e4:ff:43:9b:88:0a:b8:a6:6e:f7:1a:c8:8d:
6f:8e:0a:29:59:9d:2a:a5:5a:b6:86:2b:3d:f4:9f:09:42:f5:
b8:de:b3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:24 2025 by rpki-client