Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
File: C3A70AD7F32685733597C663E02CE28A3306F923.mft (raw, json)
Hash identifier: 2PfoOKUdbTIIt1+NGaUP+IGJAr/DQTU21TIbGp+U/kQ=
Subject key identifier: 78:83:60:AF:5A:F9:1A:2D:7E:94:A3:97:8F:9C:49:6E:5A:3B:4B:1C
Authority key identifier: C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
Certificate issuer: /CN=c3a70ad7f32685733597c663e02ce28a3306f923
Certificate serial: 7FABADD4C5C2BB361E3F1E0F62D2EDB7FD09A26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
Manifest number: AB
Signing time: Mon 30 Jun 2025 10:57:05 +0000
Manifest this update: Mon 30 Jun 2025 10:52:05 +0000
Manifest next update: Tue 01 Jul 2025 13:59:05 +0000
Files and hashes: 1: C3A70AD7F32685733597C663E02CE28A3306F923.crl (hash: RvpjRsFR1x3kQrZChC+deGapd8t2QLn6e/CP+ys9vBw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.crl
rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ab:ad:d4:c5:c2:bb:36:1e:3f:1e:0f:62:d2:ed:b7:fd:09:a2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a70ad7f32685733597c663e02ce28a3306f923
Validity
Not Before: Jun 30 10:52:05 2025 GMT
Not After : Jul 1 13:59:05 2025 GMT
Subject: CN=788360AF5AF91A2D7E94A3978F9C496E5A3B4B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:57:64:bb:74:c1:ad:14:9a:a7:cd:15:eb:
7a:2d:87:20:02:07:46:93:01:4e:21:33:16:4a:34:
57:f0:e0:6d:84:3b:1e:ad:73:28:eb:32:49:d1:2d:
4f:ee:e4:6a:cd:fb:31:db:8a:e6:1c:95:36:25:ef:
89:c0:de:99:f6:53:4b:f4:3b:d8:58:42:6d:5f:15:
4d:65:51:c4:33:16:c9:27:54:5b:7c:aa:79:b5:2f:
34:a8:e2:25:b5:98:5f:60:1f:37:e4:77:19:5a:c3:
28:ab:ea:06:85:36:1a:7e:e5:4a:79:12:0a:02:65:
6c:22:d2:5b:f8:06:96:bf:a9:92:c0:4a:36:30:f5:
23:5e:2c:9b:2e:27:f4:77:da:8e:c5:9e:ce:70:8b:
4c:c1:c3:44:d9:90:f8:41:26:e4:de:db:bd:32:45:
c0:dc:68:42:11:be:bb:13:37:15:ad:f5:5c:d1:bd:
2d:ae:9a:37:0b:e1:e5:17:12:85:7c:56:4f:bb:ef:
77:19:1f:e7:c1:a0:fd:0e:2d:2a:63:2e:1e:cb:4c:
b9:e3:e0:7c:19:97:e7:f0:57:e0:e1:c8:ab:0f:5a:
b7:de:ed:7d:fe:c1:e2:b3:3f:19:1d:6c:b0:7d:3b:
b8:e2:58:8f:59:d6:0e:93:9c:b3:e6:bd:d3:19:c0:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:60:AF:5A:F9:1A:2D:7E:94:A3:97:8F:9C:49:6E:5A:3B:4B:1C
X509v3 Authority Key Identifier:
keyid:C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dc:d8:1a:ec:8f:f4:be:14:72:79:ec:43:da:e3:89:87:11:
5e:84:95:29:41:f1:86:da:8e:47:a8:17:70:8c:f0:0f:20:b3:
cd:66:d5:90:ee:89:21:c7:7f:f6:1a:af:46:4c:a9:ad:8b:91:
cb:d4:89:26:42:5c:ba:33:aa:8b:fe:fa:3f:f9:92:cd:de:19:
ee:52:c4:fe:0a:b0:12:34:7e:93:be:d0:b2:ad:4f:86:43:4d:
bc:5d:a0:e7:77:64:27:e0:dc:d6:71:8d:52:39:e3:2f:7f:0c:
46:0c:b4:b8:ce:01:da:d8:e8:99:7b:c3:7c:f5:01:8a:5f:8d:
17:30:ee:01:09:29:2f:12:e2:cb:7a:fa:f6:b8:f6:29:d4:05:
f6:3a:da:cc:c1:1f:e1:44:39:ab:c5:b4:5c:5d:2a:97:a3:6b:
2f:e8:98:f4:7d:1d:9c:1c:04:78:20:eb:4f:94:cb:9e:85:5a:
c1:32:a8:f9:2e:38:d3:ec:13:cc:bc:44:8f:47:24:4b:61:52:
bc:b9:38:9b:08:e6:bc:3c:fa:e8:60:2a:e8:b4:26:b2:66:3d:
22:cd:f5:d7:09:bd:b5:85:0f:af:de:24:e7:05:8a:e1:e9:0c:
c1:1f:d2:62:21:de:4e:c9:22:90:0e:98:44:6f:36:20:83:e9:
aa:68:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:00:02 2025 by rpki-client