
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier: mwNUUdPxT2RJEDZ/LgCPTRe3zFjywaQunOIaqnD1CRM=
Subject key identifier: E0:7F:FF:B8:E2:58:B2:F9:13:6E:15:86:84:FB:63:BC:8A:F4:C6:AF
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer: /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial: 3D4FC037B4DCB4745E4C890E346382A07B413D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number: 0236
Signing time: Tue 04 Nov 2025 16:36:45 +0000
Manifest this update: Tue 04 Nov 2025 16:31:45 +0000
Manifest next update: Wed 05 Nov 2025 20:16:45 +0000
Files and hashes: 1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: NnLV2/Gc97GrLta85IlTkPCVfB29hkZESO5Rd61q5N0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4f:c0:37:b4:dc:b4:74:5e:4c:89:0e:34:63:82:a0:7b:41:3d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Validity
Not Before: Nov 4 16:31:45 2025 GMT
Not After : Nov 5 20:16:45 2025 GMT
Subject: CN=E07FFFB8E258B2F9136E158684FB63BC8AF4C6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:9e:15:32:0d:a5:cf:9c:d2:c2:f2:bc:59:
30:65:4a:f0:7f:50:7f:27:34:1d:11:e6:4d:3a:1d:
72:d5:e5:43:28:b4:4e:58:17:af:e2:7a:73:cb:81:
eb:cd:71:85:03:42:68:33:54:03:13:66:19:78:10:
24:d6:91:55:62:14:3b:2d:25:66:da:7d:cc:19:c4:
62:c4:9e:0f:91:0c:21:49:1b:df:09:a5:2a:77:5d:
b0:67:6e:38:e7:e3:85:cd:c5:00:18:72:e6:ac:ed:
37:7a:11:02:40:4a:43:3b:dc:68:0a:53:12:d5:91:
78:9d:08:4b:1f:a8:86:b3:57:da:2b:74:6c:e7:78:
d0:7a:dc:d8:8a:5d:64:34:3e:48:88:32:80:9e:5b:
0d:0b:9b:60:63:75:44:59:40:ce:70:a0:a3:6d:79:
fd:75:8a:0d:f9:d0:5b:76:33:54:18:22:c0:d1:3f:
e3:76:f1:ed:63:5d:ed:77:70:99:a6:39:ba:8d:aa:
1a:3e:ae:60:34:78:29:d0:05:21:a8:5d:c5:ff:05:
9e:e6:2d:3d:35:42:f7:0b:6f:29:3f:17:9a:2f:86:
64:ea:ce:39:de:85:3c:54:4c:12:31:70:3e:43:fa:
66:ba:57:c4:c0:83:08:63:a5:5d:34:52:d2:ba:58:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7F:FF:B8:E2:58:B2:F9:13:6E:15:86:84:FB:63:BC:8A:F4:C6:AF
X509v3 Authority Key Identifier:
keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:14:63:8e:d1:bc:3c:5d:9d:ff:fe:17:d0:0a:6e:59:d7:21:
8b:8a:22:80:12:01:51:3e:d2:f3:7c:8c:70:a5:08:21:2c:da:
43:f5:25:3f:a8:62:d5:c6:f3:e9:73:06:bc:18:cb:4d:4b:1c:
7a:65:85:55:33:d8:b8:18:bb:94:3e:d7:37:0f:7d:31:78:5c:
fb:a3:27:96:b7:ec:63:04:87:ac:17:c9:5f:10:e6:f5:b0:09:
b4:78:20:fa:e3:42:2e:cc:24:87:1a:61:40:c0:fc:41:15:2a:
ee:f7:c7:50:38:8b:fa:16:3b:ea:37:49:a2:06:26:79:9d:77:
67:75:3c:f7:ee:b9:95:ec:b8:4a:e6:fe:51:a3:41:2c:f6:77:
88:37:80:fb:81:3f:52:00:6a:05:70:a1:fe:57:6b:49:f4:62:
c9:e1:23:7a:43:96:7e:fa:ae:a0:6e:cb:07:87:bb:7f:32:ae:
ab:8a:2b:4d:6e:6b:2e:b9:23:cf:f3:46:a0:66:c6:62:f8:75:
0b:e9:71:98:7f:ad:37:30:39:fd:1a:0b:9e:a5:f4:d5:44:48:
33:af:bd:8c:b3:f8:3e:83:3f:34:68:f6:28:28:32:33:32:b9:
78:1f:20:81:ee:19:96:a8:d1:6d:4e:e3:75:71:36:93:15:ce:
5a:4f:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:33:07 2025 by rpki-client