Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
File: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft (raw, json)
Hash identifier: JAODN7ZW2Egy5dNBMPnKgoIJ4dA8phQjJhR7AygZHgY=
Subject key identifier: 57:53:45:B3:86:2F:41:54:19:A1:E4:64:35:40:35:93:BD:72:85:F4
Authority key identifier: AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
Certificate issuer: /CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Certificate serial: 631057147FC6214EF7FD7C26D99EEE23E98C41B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
Manifest number: 0172
Signing time: Fri 13 Jun 2025 00:24:10 +0000
Manifest this update: Fri 13 Jun 2025 00:19:10 +0000
Manifest next update: Sat 14 Jun 2025 02:11:10 +0000
Files and hashes: 1: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl (hash: fnOlmPSrGutS9EJsndPbGubUFyHRoVeFbHLq++6+6D0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 02:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:10:57:14:7f:c6:21:4e:f7:fd:7c:26:d9:9e:ee:23:e9:8c:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Validity
Not Before: Jun 13 00:19:10 2025 GMT
Not After : Jun 14 02:11:10 2025 GMT
Subject: CN=575345B3862F415419A1E46435403593BD7285F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:ce:ed:18:73:e4:12:3c:d8:e4:1f:aa:77:
37:4b:34:21:80:6c:43:0a:04:f1:b5:f1:84:bf:3b:
17:17:d3:b3:83:8c:14:18:eb:5f:fd:ce:b4:ae:65:
87:ae:e4:69:a7:d9:4e:e3:ec:35:6e:52:f4:af:76:
f2:f3:62:58:92:2d:af:e7:18:cd:28:62:02:dd:9f:
47:5d:64:50:3c:b1:4f:c3:dd:df:8a:46:c0:d8:8f:
43:3a:c1:64:d4:a1:5f:7f:2f:dc:05:3f:e0:aa:2d:
ce:9d:95:00:6b:5e:ec:5e:d0:84:4f:b0:86:ef:76:
73:c8:cf:d5:28:f1:49:bd:68:d2:c3:d0:37:2c:3a:
cb:37:e9:3a:88:42:57:90:87:ad:65:c9:86:24:44:
a4:dc:7a:7f:ff:26:45:46:d8:b6:58:d9:fa:b8:99:
5a:3d:f9:41:18:b1:ab:2d:1b:b0:7b:be:57:a4:05:
31:5a:92:75:15:51:0b:e5:af:60:1f:f8:66:39:fa:
97:e3:72:6d:de:4b:8d:09:16:f4:fc:b5:ca:59:7a:
63:c1:d0:3b:eb:a0:c5:58:61:c0:7e:db:83:3d:7e:
f2:92:c8:c5:c0:08:0b:2e:2d:bf:26:fb:f6:7e:9d:
34:70:fd:71:af:e5:aa:ee:3b:f3:9d:a7:47:9b:08:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:45:B3:86:2F:41:54:19:A1:E4:64:35:40:35:93:BD:72:85:F4
X509v3 Authority Key Identifier:
keyid:AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:59:a6:41:49:e3:76:08:97:d2:9d:d8:3e:a8:b5:65:18:
29:04:89:03:cc:30:75:45:d7:65:f9:4c:c6:4f:11:21:72:9a:
59:4c:03:0e:d3:7c:48:da:2e:47:b3:4c:22:1f:23:83:13:ab:
75:95:20:89:c4:c4:f0:25:9b:81:0f:5d:df:c0:02:a5:6e:68:
0b:5a:5d:9a:72:0a:e2:5e:7e:49:0a:1c:a9:24:cd:fd:ff:88:
db:93:34:a7:dd:57:b7:d3:e8:2b:28:e0:01:35:47:09:a9:f2:
c2:22:15:66:70:9d:7d:c8:1b:f6:0a:80:75:6a:5b:f8:b6:44:
a6:da:1f:3f:bb:09:7b:82:50:5f:24:f5:7c:c5:c9:ef:17:32:
ba:c0:59:d4:00:6b:63:46:18:55:9f:6f:cc:92:70:53:cc:1f:
f5:f3:5b:60:84:f9:b2:b7:63:a4:58:f6:78:37:60:5f:98:0d:
8e:be:64:34:f2:8e:fd:3f:54:46:52:9f:d8:d9:0b:5c:d8:c6:
38:56:bf:82:4b:18:a9:69:f6:3d:1b:aa:45:9f:63:18:70:1f:
13:ea:7a:e1:d3:ac:f0:4d:9f:5e:84:c7:ed:68:1b:9e:3f:b3:
3e:ba:61:a9:7d:79:5a:0f:e1:b6:67:1c:79:2b:56:77:73:29:
da:87:57:09
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYxBXFH/GIU73/Xwm2Z7uI+mMQbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWQ3YmRhMWQwNTkwN2E1ZmI5ZmE0ZTdlM2NmYjRiOWFl
MjEyODdjMjAeFw0yNTA2MTMwMDE5MTBaFw0yNTA2MTQwMjExMTBaMDMxMTAvBgNV
BAMTKDU3NTM0NUIzODYyRjQxNTQxOUExRTQ2NDM1NDAzNTkzQkQ3Mjg1RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/c7tGHPkEjzY5B+qdzdLNCGA
bEMKBPG18YS/OxcX07ODjBQY61/9zrSuZYeu5Gmn2U7j7DVuUvSvdvLzYliSLa/n
GM0oYgLdn0ddZFA8sU/D3d+KRsDYj0M6wWTUoV9/L9wFP+CqLc6dlQBrXuxe0IRP
sIbvdnPIz9Uo8Um9aNLD0DcsOss36TqIQleQh61lyYYkRKTcen//JkVG2LZY2fq4
mVo9+UEYsastG7B7vlekBTFaknUVUQvlr2Af+GY5+pfjcm3eS40JFvT8tcpZemPB
0DvroMVYYcB+24M9fvKSyMXACAsuLb8m+/Z+nTRw/XGv5aruO/Odp0ebCHUnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUV1NFs4YvQVQZoeRkNUA1k71yhfQwHwYDVR0j
BBgwFoAUrXvaHQWQel+5+k5+PPtLmuISh8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdm
ZTc5LzAvQUQ3QkRBMUQwNTkwN0E1RkI5RkE0RTdFM0NGQjRCOUFFMjEyODdDMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JYdmFIUVdRZWwtNS1rNS1QUHRMbXVJ
U2g4SS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yM2NkZjljYS1k
ZDY0LTRmMzEtYWJmMy0wZjMyYjhlN2ZlNzkvMC9BRDdCREExRDA1OTA3QTVGQjlG
QTRFN0UzQ0ZCNEI5QUUyMTI4N0MyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVlZpkFJ43YIl9Kd2D6o
tWUYKQSJA8wwdUXXZflMxk8RIXKaWUwDDtN8SNouR7NMIh8jgxOrdZUgicTE8CWb
gQ9d38ACpW5oC1pdmnIK4l5+SQocqSTN/f+I25M0p91Xt9PoKyjgATVHCanywiIV
ZnCdfcgb9gqAdWpb+LZEptofP7sJe4JQXyT1fMXJ7xcyusBZ1ABrY0YYVZ9vzJJw
U8wf9fNbYIT5srdjpFj2eDdgX5gNjr5kNPKO/T9URlKf2NkLXNjGOFa/gksYqWn2
PRuqRZ9jGHAfE+p64dOs8E2fXoTH7Wgbnj+zPrphqX15Wg/htmcceStWd3Mp2odX
CQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:27 2025 by rpki-client