Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: m5+nCN3iih9dr4fQ1f9U11FTAIlAt6iXSLXw2JK86zg=
Subject key identifier: 86:75:86:E5:01:99:AC:F5:40:D3:12:16:5B:61:F7:E8:E9:78:95:B1
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 31F47906C052BE7F8618A2573CA9A127F0EA977F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 040D
Signing time: Sun 15 Jun 2025 08:36:23 +0000
Manifest this update: Sun 15 Jun 2025 08:31:23 +0000
Manifest next update: Mon 16 Jun 2025 10:56:23 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: ne6CjPGuDsASswTphxqvjvpMhdbamb88Ia7lj9pM4po=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f4:79:06:c0:52:be:7f:86:18:a2:57:3c:a9:a1:27:f0:ea:97:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Jun 15 08:31:23 2025 GMT
Not After : Jun 16 10:56:23 2025 GMT
Subject: CN=867586E50199ACF540D312165B61F7E8E97895B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:d1:1b:ad:e7:45:be:02:4a:26:43:57:d8:
55:e2:1d:78:ce:7f:05:fa:20:e4:6d:25:b6:14:3f:
b9:74:22:68:d0:70:60:8c:14:13:fb:e0:13:68:6c:
1f:7c:cc:41:68:d2:20:5a:75:b7:d1:23:99:63:19:
41:af:1b:32:42:e5:c0:75:89:06:33:61:03:58:64:
e7:66:e3:5d:a6:8d:57:73:b7:2c:3e:34:8f:42:eb:
d0:fb:66:8a:6d:1f:ed:b0:1a:bd:c1:1e:ce:f7:61:
6d:3f:9c:05:f7:93:c9:31:c4:10:77:99:0e:94:7b:
b1:24:ff:9d:a5:2a:a4:c8:f4:8c:55:0f:8f:58:52:
08:29:39:b0:82:54:19:71:4b:5f:6c:8e:eb:44:9a:
e3:78:92:97:15:88:1e:8b:08:6c:da:5f:e8:8c:af:
8e:d4:88:d5:db:73:67:84:1b:05:ea:48:62:b7:d3:
b8:3c:65:ad:02:97:10:ab:8a:1b:4a:53:16:3a:7e:
33:b8:0a:ca:2a:f2:fc:8a:3c:8c:55:b6:75:cf:f9:
3a:49:c1:6f:f0:c2:bb:fe:3d:cf:d2:49:d7:0b:d8:
fa:75:75:2e:d7:bd:e2:21:e6:55:ae:d0:bf:19:70:
b9:21:a6:23:13:26:20:62:ec:0d:08:b4:03:3e:fb:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:86:E5:01:99:AC:F5:40:D3:12:16:5B:61:F7:E8:E9:78:95:B1
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b1:e8:fb:3d:4e:cd:c7:37:dc:f1:22:b9:0b:6f:bd:f0:79:
51:17:ad:97:07:6d:c6:cb:04:c8:b0:38:25:c1:60:85:a9:2c:
e2:e8:a5:36:35:92:e7:ec:94:c2:ff:fb:a6:dc:82:21:96:12:
7e:56:5d:c6:cc:9d:c9:8b:1c:52:49:15:82:a9:14:06:51:93:
79:7f:7b:1c:22:b5:81:12:1a:88:3a:5b:13:89:b1:5d:e6:88:
a0:d9:82:fc:cf:03:01:b5:19:2c:49:1a:bd:2d:2f:cb:b5:bf:
1b:9d:71:11:5b:c6:4b:2d:48:cf:f1:85:91:15:ee:98:1c:69:
08:68:13:41:fe:43:20:5e:a4:78:c6:01:4b:d8:41:26:f8:be:
d8:18:9c:45:f4:44:a4:7e:d6:10:8d:52:41:44:03:a8:bd:b6:
14:e9:b5:d4:30:ac:ce:96:0d:f0:52:ff:9f:6b:3c:04:72:07:
dd:09:9a:c5:80:50:c8:2b:b0:53:9c:0e:63:cc:5d:fa:85:1a:
89:4e:76:be:fe:67:ea:40:07:67:c0:b2:34:57:0a:52:b5:6a:
85:29:5b:db:a7:23:68:81:ce:27:34:e8:16:d5:fc:b7:d5:f5:
bf:16:c5:0c:a4:ac:d8:71:81:d6:32:a5:5e:6f:f2:5f:81:69:
e5:9f:25:f7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMfR5BsBSvn+GGKJXPKmhJ/Dql38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4
ZjUyM2IxMTAeFw0yNTA2MTUwODMxMjNaFw0yNTA2MTYxMDU2MjNaMDMxMTAvBgNV
BAMTKDg2NzU4NkU1MDE5OUFDRjU0MEQzMTIxNjVCNjFGN0U4RTk3ODk1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDdEbredFvgJKJkNX2FXiHXjO
fwX6IORtJbYUP7l0ImjQcGCMFBP74BNobB98zEFo0iBadbfRI5ljGUGvGzJC5cB1
iQYzYQNYZOdm412mjVdztyw+NI9C69D7ZoptH+2wGr3BHs73YW0/nAX3k8kxxBB3
mQ6Ue7Ek/52lKqTI9IxVD49YUggpObCCVBlxS19sjutEmuN4kpcViB6LCGzaX+iM
r47UiNXbc2eEGwXqSGK307g8Za0ClxCrihtKUxY6fjO4Csoq8vyKPIxVtnXP+TpJ
wW/wwrv+Pc/SSdcL2Pp1dS7XveIh5lWu0L8ZcLkhpiMTJiBi7A0ItAM++zcrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUhnWG5QGZrPVA0xIWW2H36Ol4lbEwHwYDVR0j
BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5
U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05
Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG
Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrHo+z1Ozcc33PEiuQtv
vfB5URetlwdtxssEyLA4JcFghaks4uilNjWS5+yUwv/7ptyCIZYSflZdxsydyYsc
UkkVgqkUBlGTeX97HCK1gRIaiDpbE4mxXeaIoNmC/M8DAbUZLEkavS0vy7W/G51x
EVvGSy1Iz/GFkRXumBxpCGgTQf5DIF6keMYBS9hBJvi+2BicRfREpH7WEI1SQUQD
qL22FOm11DCszpYN8FL/n2s8BHIH3QmaxYBQyCuwU5wOY8xd+oUaiU52vv5n6kAH
Z8CyNFcKUrVqhSlb26cjaIHOJzToFtX8t9X1vxbFDKSs2HGB1jKlXm/yX4Fp5Z8l
9w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:26:39 2025 by rpki-client