Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: EOmMM/mTqNY70XS65Frpbrwbj3N1UlbyVnmME1yabmY=
Subject key identifier: 9A:2C:9E:10:C2:D7:6C:71:03:41:31:C1:66:F8:73:09:0F:8D:BD:2D
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 1672F012ABA166D4715847EEC755F0955100ED17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 0201
Signing time: Wed 05 Nov 2025 18:05:58 +0000
Manifest this update: Wed 05 Nov 2025 18:00:58 +0000
Manifest next update: Thu 06 Nov 2025 19:12:58 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: lSFGL0Pw5xS/Rh3D9uduLMq5ny5EPXQIUqyXwj8dG08=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:72:f0:12:ab:a1:66:d4:71:58:47:ee:c7:55:f0:95:51:00:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Nov 5 18:00:58 2025 GMT
Not After : Nov 6 19:12:58 2025 GMT
Subject: CN=9A2C9E10C2D76C71034131C166F873090F8DBD2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:9b:27:54:92:15:c3:ed:c8:f6:10:3a:46:
25:c1:c4:9b:e3:9b:6d:14:04:d8:a0:20:70:f9:32:
b1:80:61:cc:93:ae:f4:48:ad:7c:f1:d1:9c:79:03:
2b:78:29:a2:34:65:c9:a3:16:d9:0f:9e:a7:92:45:
b1:58:b0:9e:4d:44:9b:66:e8:b8:c2:7d:54:f3:fc:
64:5e:a6:92:56:ec:b0:50:ab:ae:94:d0:97:d4:fe:
2e:54:0e:74:4a:a4:3a:37:8a:6b:98:10:65:6a:d1:
25:63:50:be:dd:ac:bb:06:4b:11:7d:8f:60:31:b9:
f0:59:fc:47:0d:4b:23:1d:3d:7a:0a:25:71:4f:0a:
82:2b:99:9d:bd:e4:c7:05:94:f3:b2:fc:d9:e2:bd:
cb:e7:84:8a:bf:01:a8:73:9e:ad:a5:0a:67:a8:92:
d5:ed:64:d4:be:19:0d:44:07:5f:27:72:c4:2c:f4:
d3:26:ac:7c:e0:fb:62:04:2a:08:d4:ef:b6:16:dc:
70:aa:db:82:55:91:c8:c4:55:b3:30:85:4b:ff:f5:
26:41:26:49:fe:82:ca:c2:31:6d:24:c0:6d:6b:c0:
a1:aa:78:5e:cd:e8:f9:3f:e8:e7:57:69:ec:ee:c0:
b5:a6:78:51:45:21:22:cb:b0:a2:a1:60:c4:aa:a9:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2C:9E:10:C2:D7:6C:71:03:41:31:C1:66:F8:73:09:0F:8D:BD:2D
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:95:dc:de:37:57:33:a6:53:60:5e:d4:f6:da:bf:ed:6a:c7:
d0:78:0f:76:73:ad:b3:12:4f:db:fe:46:42:7b:68:76:db:f3:
3d:f1:d9:f5:c7:8f:7e:35:2c:ec:28:cf:06:02:25:8d:0c:3a:
e3:59:4d:cd:1a:7e:9c:3c:98:0c:c2:58:43:30:a3:f5:60:1d:
c9:76:69:46:ec:c1:0f:12:38:13:f8:6a:a6:77:7a:51:29:32:
9d:16:f0:4c:3b:89:d2:67:28:89:7b:a9:42:2e:8e:fe:94:d4:
68:bc:01:14:6f:b8:41:4f:88:0d:58:08:0b:f7:77:25:14:4b:
0d:0d:0f:9d:75:19:66:f7:67:ef:68:11:14:16:eb:22:bc:26:
64:ec:54:fb:9a:5a:31:98:ce:90:5a:75:1f:ab:0c:d7:f5:4f:
c7:9d:40:bd:df:a0:58:5f:4f:6c:4f:df:57:61:d6:58:21:39:
4f:4d:0f:83:d4:1b:9c:f0:b8:1e:b2:2f:04:16:56:40:1f:d5:
98:80:a4:1e:cb:cc:c5:e3:c0:cb:f0:4a:1c:39:fb:d4:4d:f1:
d1:05:c1:e4:4e:45:38:3d:81:a6:dd:05:80:8e:dd:21:80:ee:
49:fc:33:25:6c:4f:5f:72:06:86:02:d1:bb:b4:b3:33:0d:af:
e9:44:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:02:50 2025 by rpki-client