Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier: XmkO6GVt2sWBZvI6gy4vVRU6bU5sK9p5DUWdi9RT4cQ=
Subject key identifier: CC:3B:33:51:A4:92:93:6F:92:0B:E3:F0:A6:F6:4E:24:B0:23:AB:E0
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 09C2C634939B27419EED1C1EF443722E72615B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number: 0419
Signing time: Tue 04 Nov 2025 05:12:06 +0000
Manifest this update: Tue 04 Nov 2025 05:07:06 +0000
Manifest next update: Wed 05 Nov 2025 06:27:06 +0000
Files and hashes: 1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: /LyhalidlUOX3HcY3D9tT4LuyyZKY5T3Uf//GLxMbZI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c2:c6:34:93:9b:27:41:9e:ed:1c:1e:f4:43:72:2e:72:61:5b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Nov 4 05:07:06 2025 GMT
Not After : Nov 5 06:27:06 2025 GMT
Subject: CN=CC3B3351A492936F920BE3F0A6F64E24B023ABE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:92:e1:3d:cb:92:e1:33:86:56:57:8c:26:
3f:8d:a5:01:d7:b7:37:e5:58:39:cc:e5:48:00:c9:
06:9b:bc:e8:01:04:6e:c3:cd:24:56:c4:f3:04:08:
d1:ab:55:b0:1a:45:2d:8b:27:25:7f:4e:df:69:7e:
14:8b:81:2a:f6:73:22:fd:8f:a8:c2:ed:88:48:4e:
3b:8e:3b:db:af:26:e1:8d:59:56:0e:f6:de:80:9c:
1f:38:a1:73:55:99:a8:9a:09:e9:ab:ff:50:78:eb:
74:ec:40:04:cf:f4:e5:f2:96:58:61:12:0b:4c:18:
44:d5:ea:c6:e3:4b:4f:f0:6e:2c:b9:50:6f:7d:80:
8f:85:f7:c5:dd:4a:dd:47:52:77:a3:06:8c:cb:60:
64:6c:54:ff:a1:4c:8a:9c:56:55:b3:47:e3:e9:82:
66:ca:91:69:88:c2:ae:55:7e:e0:0a:87:10:03:cb:
a7:2e:58:a5:26:d6:a6:f4:ef:ba:e5:93:34:14:2e:
14:fb:99:73:b4:1b:2d:92:af:76:b1:68:65:23:5d:
a8:1d:c4:ce:c8:99:08:80:cd:9b:a6:ad:5c:c8:20:
ef:60:88:01:fb:de:0a:06:70:aa:71:cd:2d:5d:f2:
d2:89:74:be:fd:7b:85:2b:e4:28:bf:a4:a0:80:43:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3B:33:51:A4:92:93:6F:92:0B:E3:F0:A6:F6:4E:24:B0:23:AB:E0
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e6:84:de:54:e5:fd:33:a9:ce:35:ab:d4:db:94:a4:64:ab:
36:36:23:e5:87:6a:14:ae:21:8e:0f:18:8b:35:a1:4f:a9:21:
88:50:f4:65:dc:6b:04:20:b4:c4:4e:d2:ca:4e:d8:ad:30:65:
90:b7:f6:63:cf:77:2e:74:cf:36:33:df:b2:91:6a:3c:94:37:
57:fc:11:de:b3:f1:1e:24:10:31:98:b6:dd:11:82:37:f6:fc:
5a:af:ba:0c:22:3a:07:9b:19:4c:e7:49:69:03:f3:b6:ae:cf:
93:b3:74:ea:cb:07:03:86:5d:a9:5e:72:fb:f9:0c:10:fa:22:
22:f4:7e:63:bd:db:6f:a3:49:9c:1e:dc:47:db:30:3f:27:fa:
40:07:db:82:1a:93:01:0b:89:92:86:e0:42:57:5f:d6:ec:4e:
e0:75:8b:a0:9e:9c:eb:a6:c5:ed:10:1a:be:77:7c:d0:b5:ff:
0a:2f:06:dc:8f:64:33:88:e4:e3:97:a3:76:5d:0a:b7:74:79:
39:c3:b3:e7:d1:2f:10:5c:09:e8:9f:13:ea:21:d3:7e:6e:5f:
f4:d7:02:d9:cd:c2:9e:4b:a3:77:09:12:cb:21:34:b9:8f:95:
2f:c6:2b:1d:b5:8a:ab:5d:a1:74:8a:36:15:3d:65:3a:21:53:
0b:b5:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:27 2025 by rpki-client