Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: aeeasYgsNRyLPSBWmYQQ4GXH9djHAZMfWuGx7A3JUm4=
Subject key identifier: C2:89:F5:8F:72:3B:33:13:26:7B:CC:D9:40:69:39:6E:18:05:EC:8D
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 49612F9CF98758F1579ECACD09119162A5FBA552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 04CC
Signing time: Tue 04 Nov 2025 05:41:43 +0000
Manifest this update: Tue 04 Nov 2025 05:36:43 +0000
Manifest next update: Wed 05 Nov 2025 09:05:43 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: wjbSonaIRE4P/HWWGgC/D5Vk4JJ4WqDDx7ukZXXwZDw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:61:2f:9c:f9:87:58:f1:57:9e:ca:cd:09:11:91:62:a5:fb:a5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Nov 4 05:36:43 2025 GMT
Not After : Nov 5 09:05:43 2025 GMT
Subject: CN=C289F58F723B3313267BCCD94069396E1805EC8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:a2:8c:a2:dc:5a:75:18:8a:eb:61:00:c2:
2f:7f:71:59:68:ba:66:dc:32:4d:17:87:b8:1c:94:
b8:48:e8:ea:cb:02:e6:f7:7f:48:64:37:8e:b4:8e:
a1:3c:68:da:20:f3:51:a7:04:de:11:a2:2e:0c:ca:
4c:09:de:3d:66:50:de:96:57:7c:e3:76:96:1d:43:
05:b5:6b:d6:fa:b9:20:7e:e0:0e:72:c0:11:39:86:
f8:ae:16:93:70:e1:f4:aa:89:be:98:d0:05:25:72:
54:58:7f:e7:14:87:29:fb:d9:5d:31:e6:7d:b4:25:
04:0f:83:3e:c2:25:b7:2d:69:a8:82:d8:03:fe:5e:
36:53:83:31:05:ab:b1:ec:e9:de:3f:81:af:8e:23:
6b:99:46:eb:02:53:43:02:37:fc:6d:30:f7:82:e8:
6f:97:94:1f:e0:a2:72:ad:a0:e0:a5:0a:56:0b:4c:
8b:47:b3:40:1e:b6:f0:ef:9e:60:65:35:f3:1e:b5:
51:7f:84:99:2b:d5:17:f6:d3:f6:0c:d5:81:6b:5a:
44:aa:1f:c5:cc:1b:92:e1:8c:b8:e1:d3:87:18:ee:
47:7d:b3:29:43:92:ae:58:f9:29:7d:53:a0:f6:25:
dc:68:f3:5b:61:5f:b2:ef:f8:35:73:84:30:cf:9f:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:F5:8F:72:3B:33:13:26:7B:CC:D9:40:69:39:6E:18:05:EC:8D
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6a:6c:cc:46:0c:29:05:48:d1:b7:3a:9c:4b:02:73:f4:56:
86:dd:65:53:88:f9:f5:9c:f5:a6:40:55:db:58:84:01:74:a3:
77:a0:24:a8:43:d0:11:05:41:51:dd:d3:f3:68:af:22:78:54:
e4:09:bd:77:2a:8c:7f:8c:1c:fa:6c:8a:09:b8:82:56:ad:22:
ef:a6:44:cf:64:d1:13:b9:4d:11:76:64:94:e3:ac:12:eb:46:
9e:6a:85:31:8a:7f:2e:21:7f:1a:84:33:0b:87:68:5d:30:69:
fa:c8:3f:84:54:08:09:a2:a5:5a:3d:b2:11:80:30:a9:96:d8:
57:e8:19:ea:71:4c:7a:05:59:54:6a:34:7a:4c:ed:33:d5:fb:
67:91:f0:89:f6:a8:2e:0c:48:a3:48:22:10:b4:e8:62:27:24:
af:45:cd:5d:ed:7d:2f:72:3d:75:c1:11:dc:34:27:ca:f9:ff:
22:e4:21:6b:3d:d2:cb:6a:35:03:5a:3f:7f:25:fa:00:7f:0e:
62:a6:e9:76:18:53:20:8e:4e:6c:ee:f8:61:73:2e:4f:0d:6a:
b2:9c:94:e8:80:b5:34:92:c8:cd:f0:04:c4:16:14:9c:d5:8c:
2b:81:94:35:56:da:4a:53:cd:e9:19:bd:fb:f4:42:6f:81:fa:
27:d2:bd:62
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSWEvnPmHWPFXnsrNCRGRYqX7pVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4
ZjUyM2IxMTAeFw0yNTExMDQwNTM2NDNaFw0yNTExMDUwOTA1NDNaMDMxMTAvBgNV
BAMTKEMyODlGNThGNzIzQjMzMTMyNjdCQ0NEOTQwNjkzOTZFMTgwNUVDOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhaKMotxadRiK62EAwi9/cVlo
umbcMk0Xh7gclLhI6OrLAub3f0hkN460jqE8aNog81GnBN4Roi4MykwJ3j1mUN6W
V3zjdpYdQwW1a9b6uSB+4A5ywBE5hviuFpNw4fSqib6Y0AUlclRYf+cUhyn72V0x
5n20JQQPgz7CJbctaaiC2AP+XjZTgzEFq7Hs6d4/ga+OI2uZRusCU0MCN/xtMPeC
6G+XlB/gonKtoOClClYLTItHs0AetvDvnmBlNfMetVF/hJkr1Rf20/YM1YFrWkSq
H8XMG5LhjLjh04cY7kd9sylDkq5Y+Sl9U6D2Jdxo81thX7Lv+DVzhDDPn139AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUwon1j3I7MxMme8zZQGk5bhgF7I0wHwYDVR0j
BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5
U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05
Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG
Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2pszEYMKQVI0bc6nEsC
c/RWht1lU4j59Zz1pkBV21iEAXSjd6AkqEPQEQVBUd3T82ivInhU5Am9dyqMf4wc
+myKCbiCVq0i76ZEz2TRE7lNEXZklOOsEutGnmqFMYp/LiF/GoQzC4doXTBp+sg/
hFQICaKlWj2yEYAwqZbYV+gZ6nFMegVZVGo0ekztM9X7Z5HwifaoLgxIo0giELTo
Yickr0XNXe19L3I9dcER3DQnyvn/IuQhaz3Sy2o1A1o/fyX6AH8OYqbpdhhTII5O
bO74YXMuTw1qspyU6IC1NJLIzfAExBYUnNWMK4GUNVbaSlPN6Rm9+/RCb4H6J9K9
Yg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:32 2025 by rpki-client