Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: Dprq01A5Nx8ghCsFV2crJgHw0QQkzOhR5IWYna+EMq4=
Subject key identifier: EE:BD:CB:C8:75:8F:A5:5D:9E:A7:F2:46:6F:D0:4A:B6:F0:FC:64:D0
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 361718C196A87FA6A4D173699C63F4A463560885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 030B
Signing time: Fri 08 Aug 2025 10:59:25 +0000
Manifest this update: Fri 08 Aug 2025 10:54:25 +0000
Manifest next update: Sat 09 Aug 2025 14:12:25 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: 8/Cc7MYAs+D/GiP9fT/JM7Wbg52MtQwZldRDqfr4W30=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 14:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:17:18:c1:96:a8:7f:a6:a4:d1:73:69:9c:63:f4:a4:63:56:08:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Aug 8 10:54:25 2025 GMT
Not After : Aug 9 14:12:25 2025 GMT
Subject: CN=EEBDCBC8758FA55D9EA7F2466FD04AB6F0FC64D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:53:9b:1a:e0:e0:05:d0:ef:8f:50:f3:16:
c0:a4:63:39:3d:ad:dd:04:a1:8b:d2:0e:b6:38:5f:
a0:7d:42:57:21:84:a7:9a:aa:31:53:b1:e6:70:b1:
d2:b2:95:ab:b5:ea:0d:0a:ad:45:46:9c:d5:01:26:
7c:e2:e1:4a:15:0b:77:45:79:60:d1:88:32:51:e0:
a8:86:de:fc:25:7a:48:08:e5:bb:48:d3:3a:9c:3a:
a1:82:73:09:28:76:f9:bb:ad:58:47:c2:ee:38:c0:
17:cb:6c:36:c2:f8:ac:73:c4:13:8b:3e:9e:03:c8:
70:68:a8:a6:ed:4f:11:07:f7:d4:39:18:4a:11:1d:
95:75:1d:69:98:b7:80:26:a0:95:58:b0:05:96:25:
e5:15:fd:75:cf:01:c0:24:6a:b3:67:a5:1e:d8:43:
9c:6d:9d:f6:5c:cb:63:42:90:7b:cb:a4:72:fe:f8:
e4:0a:8f:5a:a7:8b:94:04:6b:1d:37:1e:94:99:c1:
1b:ae:b9:7c:99:6b:08:4a:e5:43:c9:b5:d0:fe:de:
04:b2:bf:c2:9d:c1:80:6e:51:8a:66:04:ea:26:01:
bf:4a:81:0a:0b:04:fb:b7:4c:1b:98:49:93:fd:d5:
0a:47:62:03:9f:72:df:24:44:d7:b0:8a:db:d4:50:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:CB:C8:75:8F:A5:5D:9E:A7:F2:46:6F:D0:4A:B6:F0:FC:64:D0
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:63:13:0e:30:75:39:2f:51:08:74:fc:f3:50:7c:dd:ed:45:
eb:7d:f7:57:7e:c4:47:3e:02:c9:0b:e1:c7:ac:40:0d:10:d4:
6b:ac:8c:7c:71:0a:48:45:4c:46:c1:ff:50:12:91:50:7b:12:
a1:ac:47:44:d1:c0:82:1d:94:a1:bd:a7:85:b9:6c:58:07:9f:
7a:5c:9b:6c:33:1d:d4:cc:7c:9c:4e:33:25:15:f0:e0:7d:91:
d7:a6:ba:a7:4f:70:10:d6:6a:2b:7c:f0:7e:45:58:14:29:da:
5c:4a:34:7c:bb:f8:70:ae:03:58:94:ef:a3:69:cb:78:64:92:
aa:8f:c6:aa:9b:d5:16:ee:24:e0:db:3b:7b:af:f7:dc:a3:2f:
5f:00:99:68:d4:3c:22:e0:ab:fe:b5:5b:e3:00:71:5c:35:12:
77:0d:fe:f2:bd:b8:5e:0f:85:28:cc:5b:43:cc:69:fa:07:f8:
16:6c:13:77:fb:d6:97:78:22:f9:50:2c:c0:fb:58:7b:84:2e:
1e:ec:3d:01:8f:06:0e:ef:f3:01:d0:4f:a0:39:34:4c:71:52:
e4:48:62:8f:ed:72:5f:ca:a4:a7:50:4c:e8:03:8f:de:9e:99:
28:11:b7:2e:a3:56:30:63:58:c8:1a:fe:fd:ef:4a:f3:fe:a8:
68:74:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:56 2025 by rpki-client