
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: lkzXhQnCrvH6gGxdHY0ja+R7bYbtaSxuChXZQpVqWq4=
Subject key identifier: C3:7E:C0:43:1C:47:98:A3:E0:EF:5C:3B:5D:C4:D3:A3:BB:1A:89:05
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 50E6DB112E78A35C944EF66DA8DE55F2A96D66E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 0396
Signing time: Wed 13 Aug 2025 00:50:14 +0000
Manifest this update: Wed 13 Aug 2025 00:45:14 +0000
Manifest next update: Thu 14 Aug 2025 02:45:14 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: XyQlqK2yZ93V7iHsg/uGuu+Zqf70RuasX2RMcc2MxFY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e6:db:11:2e:78:a3:5c:94:4e:f6:6d:a8:de:55:f2:a9:6d:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Aug 13 00:45:14 2025 GMT
Not After : Aug 14 02:45:14 2025 GMT
Subject: CN=C37EC0431C4798A3E0EF5C3B5DC4D3A3BB1A8905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:df:1d:a2:83:69:db:9d:61:c9:7c:d4:d3:
e9:fc:de:31:25:70:b4:13:0c:52:17:2d:82:d3:bb:
d2:32:57:e2:d1:3e:78:9a:a2:db:3c:b1:00:43:a3:
79:c7:91:81:f7:32:a4:61:e2:67:f9:3a:c5:8f:12:
e8:f2:de:dd:20:69:82:48:f3:5f:43:30:df:73:56:
e4:74:1f:dc:94:07:35:87:a2:d3:5e:66:47:6c:09:
eb:66:b6:18:c2:c8:cb:9f:f9:04:82:e0:4a:11:07:
d0:89:bf:aa:b8:99:20:90:42:98:3c:72:d8:d3:73:
2f:a4:bd:e3:f6:69:6d:de:89:86:0b:11:65:48:7e:
d4:de:d3:18:31:c0:63:9d:69:04:f9:4f:da:14:c9:
23:b1:97:b0:51:ee:74:20:e5:75:9a:ac:f7:84:48:
e0:c7:17:93:96:fe:8b:cc:cd:13:2d:cc:ee:73:ba:
a6:91:46:2c:84:7c:d2:78:56:12:cd:30:2a:97:05:
21:ea:3a:ff:d0:e9:e2:da:c7:2c:8d:07:f5:8c:0b:
b7:8d:14:64:38:ff:c6:b1:4f:91:f0:bd:d5:48:f0:
e9:8a:a8:49:bd:5b:e6:40:22:9f:d0:50:de:b6:bb:
3b:6c:56:20:29:44:55:90:4f:e5:31:63:61:44:cd:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:C0:43:1C:47:98:A3:E0:EF:5C:3B:5D:C4:D3:A3:BB:1A:89:05
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:97:21:8f:ac:0c:2f:50:c3:6e:f3:ec:10:2f:d1:6b:df:44:
8a:50:85:5d:2a:f8:97:03:00:b4:fd:5d:84:3f:9f:ee:5a:07:
04:7c:a0:d1:5c:a5:9f:6a:e1:87:46:de:51:f8:88:2c:8e:72:
6a:b0:65:af:c6:73:8e:2c:9d:47:3f:98:c5:4e:e2:d4:9d:6b:
fb:04:81:db:75:ed:44:31:6b:b9:d2:f3:8e:ce:74:27:55:8a:
24:a4:1a:42:95:94:ab:58:73:cc:31:32:b6:37:1d:c0:61:bd:
67:08:dc:6e:99:be:f5:8b:e5:db:c5:a7:83:21:15:bb:7d:31:
83:b1:e7:ff:1c:48:53:f9:fd:28:13:fc:b2:26:8d:53:00:57:
39:c2:3e:c2:f0:bc:b5:04:68:aa:5e:b8:09:f8:37:00:ee:b0:
c3:f0:c5:59:0e:6a:03:61:0f:80:61:8c:d6:0f:45:c1:b4:cf:
0d:5d:c5:b8:c1:71:44:ec:e4:bd:df:78:78:71:c7:34:fe:34:
3d:37:81:07:dd:cc:1d:46:42:3f:b5:19:34:f5:35:2f:4b:22:
a3:fa:3b:6a:e3:68:aa:5e:dc:24:2a:64:88:3b:a6:2a:0d:01:
82:17:2f:cc:fb:db:bf:bd:a4:a9:47:d6:29:47:25:e0:1c:bd:
84:15:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:32 2025 by rpki-client