Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier: 3js71A4N4pNxqmROJaXEKeWdoa23LSkmswoG55KVNI4=
Subject key identifier: BC:34:30:11:FF:5D:09:BE:A0:36:3F:B6:B9:6F:D8:2E:E2:49:A2:EE
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 4EC2D0AABDD999EEA7C0E8F11DBD748E72B17BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number: 03A6
Signing time: Sun 10 Aug 2025 17:07:24 +0000
Manifest this update: Sun 10 Aug 2025 17:02:24 +0000
Manifest next update: Mon 11 Aug 2025 17:27:24 +0000
Files and hashes: 1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: PYIk5UMgbFOfF1xVFir9D20Oclfdgu8xDU9bKVse9cM=)
2: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: /togfiKp/esHW/5NXVI5ia6O80flF7M0uGoRMDTj9cQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c2:d0:aa:bd:d9:99:ee:a7:c0:e8:f1:1d:bd:74:8e:72:b1:7b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Aug 10 17:02:24 2025 GMT
Not After : Aug 11 17:27:24 2025 GMT
Subject: CN=BC343011FF5D09BEA0363FB6B96FD82EE249A2EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:9d:ed:17:6b:2b:96:c2:b0:3a:ab:ce:a1:
dc:6c:3a:9b:67:a6:e4:f8:93:87:73:2b:10:d0:36:
0c:11:27:eb:9a:33:d0:c1:09:3b:f6:ef:f6:73:5c:
5d:c5:64:02:56:ae:ef:ed:36:1b:9e:81:61:c3:b1:
bc:43:28:3a:5e:1e:da:c3:b7:80:43:6f:08:8f:8e:
ea:56:6f:0a:2c:ba:65:b7:ef:1a:88:ef:fe:70:b1:
a6:58:fd:cf:f3:0f:3a:74:a1:91:b5:4c:6a:68:6a:
76:82:61:94:0c:bc:bd:5b:5d:2b:b0:a8:0a:fa:85:
de:bd:68:2b:c6:f5:3f:4a:eb:51:4a:4f:7a:a8:9e:
d0:14:ea:39:32:da:94:da:59:16:6a:73:4f:00:61:
ca:97:3d:59:1c:c1:97:0d:69:32:32:3f:e3:ed:5a:
74:0c:19:f4:39:eb:70:de:e5:9a:22:3a:df:31:65:
b2:d5:75:18:79:d8:54:39:2c:2f:37:96:93:75:00:
0c:c3:07:39:4b:67:76:99:63:28:0b:e4:9b:b0:44:
63:be:52:18:26:d6:6a:16:10:c4:92:23:33:7d:b4:
b4:4b:8c:26:96:14:cd:71:ef:63:fb:f1:8e:a1:fa:
48:e1:5c:af:2a:07:88:95:bd:78:d1:04:32:11:c1:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:30:11:FF:5D:09:BE:A0:36:3F:B6:B9:6F:D8:2E:E2:49:A2:EE
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8d:b9:9f:9d:4b:db:4e:56:36:ce:6e:1a:f1:fa:43:6d:55:
1e:a9:09:a6:8d:b0:96:34:1a:7e:dc:42:9b:b2:38:03:c0:24:
5f:e1:b4:04:12:85:fe:60:6a:97:dd:25:55:cf:9d:d3:d3:fa:
50:11:91:ed:b7:15:4e:42:15:f1:41:b5:25:2b:9b:2e:c2:8b:
ee:99:9b:9e:30:92:3e:4e:ed:7c:0f:13:c5:9e:c7:69:84:08:
08:e9:54:65:3e:e3:4a:d1:d9:2c:78:01:64:f4:7d:78:2d:a0:
00:87:ea:0e:63:b1:b3:95:dd:02:c6:6d:36:6f:77:40:01:5a:
39:48:39:50:44:96:7b:6f:f4:a4:6b:00:fb:06:83:cf:49:68:
38:9c:bb:9e:41:a7:4e:5a:1b:fb:d7:23:71:f1:e2:f3:38:38:
0a:17:2d:ee:84:60:ec:ff:f4:9a:90:d2:ef:3c:6a:fd:df:0e:
03:a1:06:30:77:1b:29:1e:3f:c1:47:50:63:71:73:38:e6:f2:
7b:8c:ff:00:ff:a8:4f:7c:12:39:ca:dc:a3:41:33:b1:b8:44:
32:fa:90:da:da:ce:fe:cc:47:00:58:a0:2d:3c:00:07:ec:3d:
0a:43:fa:13:de:95:56:89:a5:9b:c7:ce:f6:26:10:a3:2f:99:
f4:6f:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:49:03 2025 by rpki-client