Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier: nfq00d6WrA9jSq3LYtpEZBvEY0afb2BuGDAVGfb+Fww=
Subject key identifier: CD:48:34:FF:22:83:DD:15:BE:BC:8D:48:34:CD:19:97:AC:3B:81:56
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial: 7D5644A45CEA08F2E04B8FAD5B26E3A5D8290243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number: 02DE
Signing time: Sat 23 Aug 2025 03:37:33 +0000
Manifest this update: Sat 23 Aug 2025 03:32:33 +0000
Manifest next update: Sun 24 Aug 2025 04:14:33 +0000
Files and hashes: 1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: m7re1ONXG6aJw5DGv3iM5CpiqNQkmt06A18Up/bi1dI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:56:44:a4:5c:ea:08:f2:e0:4b:8f:ad:5b:26:e3:a5:d8:29:02:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Validity
Not Before: Aug 23 03:32:33 2025 GMT
Not After : Aug 24 04:14:33 2025 GMT
Subject: CN=CD4834FF2283DD15BEBC8D4834CD1997AC3B8156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:b1:d9:fd:1e:fb:d3:80:f4:d1:55:2f:9f:
89:90:da:85:ad:fc:b9:21:dd:09:e0:87:5c:6f:16:
21:73:c2:f5:1f:a3:08:41:d0:8f:81:07:87:ad:99:
58:70:b6:fa:0f:04:89:75:83:b2:b3:4f:b4:ae:47:
16:17:d1:81:d2:a6:2d:75:f2:de:4c:8a:b2:f0:6e:
6d:5d:82:2d:99:50:c0:a6:21:27:fc:5c:47:de:45:
9d:07:0c:1d:69:49:a6:db:21:ca:ee:15:86:ea:f4:
4f:bd:ba:03:69:02:a6:8e:b9:ad:6d:ee:d4:31:c8:
14:c8:ac:21:cd:79:d1:7b:ed:05:44:19:26:05:bb:
13:65:5c:0a:e0:69:06:f8:76:aa:8d:df:ff:1e:89:
d4:54:f2:2f:f6:23:25:d3:ef:13:bb:39:2d:9e:0c:
bc:b4:87:30:e7:25:16:d0:03:74:15:0c:d4:52:70:
c4:26:cb:e4:35:76:69:65:d8:ee:c1:9a:2c:b3:a8:
ff:79:e9:d7:10:e8:5f:10:54:df:89:5d:53:e7:da:
74:f1:52:a5:15:d2:22:8e:19:f9:8f:ee:7e:09:08:
82:d3:f4:98:7a:80:46:02:ba:3b:db:8c:f3:1b:f7:
e0:56:46:7b:ce:6a:fd:c3:61:b4:65:02:3f:5e:e4:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:48:34:FF:22:83:DD:15:BE:BC:8D:48:34:CD:19:97:AC:3B:81:56
X509v3 Authority Key Identifier:
keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9d:f4:8e:a5:14:1b:72:d0:8c:c5:f3:48:16:66:9b:99:b2:
12:02:43:b2:b9:f5:8a:98:b8:f3:f8:82:ec:df:c1:c2:80:cf:
84:93:5b:60:1a:a0:91:45:05:c3:d7:9e:bf:95:72:59:47:c3:
ca:96:ed:dd:59:f3:3d:72:f0:3d:25:d4:b7:9f:fc:45:30:61:
d3:96:1a:a4:d4:6e:b2:cf:8f:4c:54:9b:fe:72:1e:cb:69:34:
f3:a7:0d:50:8e:6f:21:59:0d:f5:cb:00:f6:70:55:08:7a:94:
2b:c9:ae:3e:33:bb:70:47:34:ad:49:61:3b:ab:a5:4e:32:c5:
bf:cb:64:e9:20:bd:a2:eb:35:6b:92:81:c5:ae:2e:4a:37:fe:
e7:0f:e6:84:e0:7a:43:eb:28:e5:d0:48:07:1e:e6:c1:0e:d6:
21:12:8f:0f:aa:ae:07:a2:bc:35:87:21:ac:f9:d0:27:2b:ce:
e5:d9:69:e0:78:e1:52:a5:f2:ac:8f:39:28:8a:91:2a:ae:d3:
36:82:91:4b:84:78:5d:c8:68:e1:49:ad:9a:52:e4:11:cd:cd:
a3:b5:57:31:d2:4a:ba:d3:88:ae:33:22:ad:cc:61:16:bc:bf:
44:a9:48:e3:3f:08:b4:43:7f:79:78:47:03:ff:58:20:b5:17:
20:3a:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:16 2025 by rpki-client