Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: Tpp2VGgQ0VEQ48IN94vIIsiKK3oiY8zvWuCzZ95NJhc=
Subject key identifier: C3:E8:80:82:F1:8E:92:35:F1:67:CD:DC:0D:D2:86:FE:51:EA:42:DF
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 4725679BA19E9B4247E8FFF36D9B4FC7F36187A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 0188
Signing time: Mon 03 Nov 2025 21:14:27 +0000
Manifest this update: Mon 03 Nov 2025 21:09:27 +0000
Manifest next update: Tue 04 Nov 2025 22:55:27 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: W1kOLo39E+D//DLDTdF0QdJhRB09S8sZc7X7LQzC7iU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 22:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:25:67:9b:a1:9e:9b:42:47:e8:ff:f3:6d:9b:4f:c7:f3:61:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Nov 3 21:09:27 2025 GMT
Not After : Nov 4 22:55:27 2025 GMT
Subject: CN=C3E88082F18E9235F167CDDC0DD286FE51EA42DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:32:56:79:28:33:ec:25:fd:44:32:f2:3c:89:
7a:e7:26:90:a2:09:ab:77:70:c4:c0:9c:ce:82:8f:
78:41:b0:33:a7:01:aa:87:74:58:7c:34:8d:bf:28:
25:0d:eb:d1:f3:06:ff:e2:9b:fa:63:fa:60:a0:c5:
16:16:d0:68:ec:b6:5b:d8:42:17:3a:9b:fe:e6:2c:
e2:ea:c7:b4:a4:55:0e:63:6e:9e:bf:f8:de:5a:2a:
c4:78:71:74:5a:0a:1c:e9:f2:b5:66:30:35:02:b0:
59:32:6c:3e:64:99:89:52:4a:75:15:6b:d8:9d:d8:
fd:82:04:35:a4:51:2f:85:47:40:79:51:8c:6a:b0:
f1:17:39:bc:b8:22:de:22:de:f0:67:3b:1a:79:79:
69:0c:e3:59:96:ed:25:c2:0e:db:91:db:f5:7e:99:
97:34:2e:0f:ad:f0:55:f9:a0:30:8a:64:78:db:a4:
ea:fd:da:0a:0e:ad:b9:57:aa:7d:2c:1d:64:59:de:
de:f5:7a:ce:1e:2c:06:4a:12:10:a6:a5:ad:55:a6:
96:6d:5e:f4:0f:0a:45:c0:23:59:27:5d:d6:29:b6:
d6:a9:aa:fd:41:01:1f:3a:3b:85:a2:2c:a1:34:2a:
c8:34:5b:77:94:b5:38:ad:bb:3a:f9:4f:0b:1e:93:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:80:82:F1:8E:92:35:F1:67:CD:DC:0D:D2:86:FE:51:EA:42:DF
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:c0:47:0e:c4:bd:b8:e4:59:be:0f:aa:ad:91:f4:7c:1b:
d0:18:e4:1d:a1:f4:63:e8:49:b1:63:23:34:f0:f1:b0:dd:e3:
7f:bc:3c:39:1d:cc:05:fd:74:b9:25:ae:87:e0:91:54:1b:4c:
de:2d:e2:3a:44:89:04:f5:43:c6:a0:50:fc:ad:f6:f6:83:2a:
d4:25:3c:0c:df:72:09:ff:63:81:1a:40:a7:e9:e5:49:5c:ae:
44:84:bb:9e:5d:0e:69:ed:8a:65:eb:ec:66:d5:82:dc:5f:5a:
19:58:76:3a:4f:22:07:f3:d2:bd:13:b6:2a:ec:92:95:f6:86:
e5:22:aa:53:ee:70:4a:83:59:e3:4e:c4:e7:8c:e0:2e:5b:5c:
05:f8:b8:13:6b:fb:4d:d4:6f:bd:e1:77:08:af:74:4c:c1:cb:
3a:ea:34:26:1b:b0:6f:10:6b:d0:1c:fc:ce:f5:c6:3a:ac:7b:
11:c5:11:c3:6a:9a:72:5b:cd:b3:2b:61:fb:d3:a2:fa:32:44:
46:bd:09:7f:7f:69:03:6a:a3:61:91:96:bd:06:30:9b:01:06:
0f:3d:fd:58:c0:57:e4:4e:46:7f:0f:19:6f:1d:5a:f6:37:68:
91:a3:c5:8c:aa:50:89:8c:f1:88:b3:16:af:7d:ff:02:f1:2f:
0a:42:6e:0e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURyVnm6Gem0JH6P/zbZtPx/Nhh6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2U0NWE2MWJhNzJlYmRiNWY2YzcwZjU5YzczMDg2Yzhi
ZjQ2ZWEyNjAeFw0yNTExMDMyMTA5MjdaFw0yNTExMDQyMjU1MjdaMDMxMTAvBgNV
BAMTKEMzRTg4MDgyRjE4RTkyMzVGMTY3Q0REQzBERDI4NkZFNTFFQTQyREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvMlZ5KDPsJf1EMvI8iXrnJpCi
Cat3cMTAnM6Cj3hBsDOnAaqHdFh8NI2/KCUN69HzBv/im/pj+mCgxRYW0GjstlvY
Qhc6m/7mLOLqx7SkVQ5jbp6/+N5aKsR4cXRaChzp8rVmMDUCsFkybD5kmYlSSnUV
a9id2P2CBDWkUS+FR0B5UYxqsPEXOby4It4i3vBnOxp5eWkM41mW7SXCDtuR2/V+
mZc0Lg+t8FX5oDCKZHjbpOr92goOrblXqn0sHWRZ3t71es4eLAZKEhCmpa1VppZt
XvQPCkXAI1knXdYpttapqv1BAR86O4WiLKE0Ksg0W3eUtTituzr5Twsek5pnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUw+iAgvGOkjXxZ83cDdKG/lHqQt8wHwYDVR0j
BBgwFoAUzkWmG6cuvbX2xw9ZxzCGyL9G6iYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm
OWFmLzAvQ0U0NUE2MUJBNzJFQkRCNUY2QzcwRjU5QzczMDg2QzhCRjQ2RUEyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3prV21HNmN1dmJYMnh3OVp4ekNHeUw5
RzZpWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w
YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMC9DRTQ1QTYxQkE3MkVCREI1RjZD
NzBGNTlDNzMwODZDOEJGNDZFQTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxDARw7EvbjkWb4Pqq2R
9Hwb0BjkHaH0Y+hJsWMjNPDxsN3jf7w8OR3MBf10uSWuh+CRVBtM3i3iOkSJBPVD
xqBQ/K329oMq1CU8DN9yCf9jgRpAp+nlSVyuRIS7nl0Oae2KZevsZtWC3F9aGVh2
Ok8iB/PSvRO2KuySlfaG5SKqU+5wSoNZ407E54zgLltcBfi4E2v7TdRvveF3CK90
TMHLOuo0JhuwbxBr0Bz8zvXGOqx7EcURw2qaclvNsyth+9Oi+jJERr0Jf39pA2qj
YZGWvQYwmwEGDz39WMBX5E5Gfw8Zbx1a9jdokaPFjKpQiYzxiLMWr33/AvEvCkJu
Dg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:14 2025 by rpki-client