Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: N0Tj1OPA71XGaYgLcxEDq4JKFvHracjIwQi26DQfu0E=
Subject key identifier: 0F:46:A7:7A:A5:7C:51:40:4E:E0:BF:15:73:8A:B7:55:BB:BD:A2:5A
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 682F9778F7ADF4888A008311011BD8620D4EEC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 02B2
Signing time: Tue 04 Nov 2025 08:15:11 +0000
Manifest this update: Tue 04 Nov 2025 08:10:11 +0000
Manifest next update: Wed 05 Nov 2025 08:29:11 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: mEWYJJB8ePZHIF3E4D+GkZ29NTK+cNvlrNtI3ALEu+Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2f:97:78:f7:ad:f4:88:8a:00:83:11:01:1b:d8:62:0d:4e:ec:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Nov 4 08:10:11 2025 GMT
Not After : Nov 5 08:29:11 2025 GMT
Subject: CN=0F46A77AA57C51404EE0BF15738AB755BBBDA25A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:db:a4:cc:ec:a7:3c:df:ac:5d:6c:69:5c:
80:96:c4:57:97:ff:bf:52:77:95:d8:c6:1b:6e:33:
21:9f:5f:4c:67:29:f1:c6:3d:47:fb:a8:76:ca:4c:
f1:9d:ef:a4:f1:3f:e0:5a:93:65:f3:45:b5:75:bc:
5e:7e:c3:ec:a4:09:a8:29:8e:0d:e8:2c:99:5f:4e:
b4:00:c1:cf:6d:e4:b6:4e:82:7b:6f:46:73:e4:7b:
84:91:83:53:df:68:bb:43:a7:06:78:8d:ab:20:09:
03:f5:c1:e1:ff:b1:92:d1:9d:e0:29:18:a5:d4:73:
c6:7c:6f:cf:67:1a:18:7c:a1:1b:eb:68:49:fa:f6:
64:36:25:b7:b9:3b:c1:b2:f3:fa:d6:de:74:b1:36:
ff:a8:82:2d:22:44:0d:19:2a:21:2d:55:94:09:f0:
14:82:eb:c6:27:17:b5:e2:6f:e9:4a:3c:7e:1c:e4:
f3:ba:f7:17:0c:b6:56:b3:cf:2e:49:cc:1d:04:15:
0d:4d:96:90:2d:af:fc:45:25:c2:b8:16:78:12:a2:
1e:9d:ae:6d:29:82:85:16:bd:fe:90:d1:5d:10:57:
f9:38:99:35:3b:44:fd:0a:ab:f7:d4:ed:d4:f5:d9:
35:b9:11:94:3f:fd:73:80:cd:2e:40:bf:f4:90:f2:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:A7:7A:A5:7C:51:40:4E:E0:BF:15:73:8A:B7:55:BB:BD:A2:5A
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0c:4b:54:81:14:1f:da:15:5d:3b:8a:bc:6f:6a:c4:98:70:
0a:d9:c9:c6:ae:98:0c:b8:3e:70:a0:34:1c:e0:e8:f6:c7:0d:
80:5c:d4:bf:8e:df:43:b1:74:06:7c:ed:d8:66:cb:d4:2b:ae:
a5:6a:c2:bb:bb:b8:7d:ab:57:3e:61:8a:a7:7a:43:00:5a:70:
6d:2c:5c:56:58:df:60:87:2e:45:25:79:2c:dc:4f:a1:68:a8:
9c:6b:47:d0:5f:2f:46:22:29:10:72:75:e0:f1:70:46:f5:a8:
b3:43:f9:a4:fa:da:06:a0:81:8c:74:9e:e6:d0:35:a3:57:6d:
d8:7b:02:8e:79:24:06:08:66:8b:b4:68:cb:94:56:b6:db:cf:
36:96:28:ab:5f:41:33:22:1f:f4:f1:7b:b3:fa:3a:ab:56:79:
80:6d:18:4a:be:bd:f0:08:4c:81:5c:ee:cd:bf:43:26:f2:50:
a2:c7:45:67:03:42:cf:e7:30:92:96:37:0d:12:58:76:44:c6:
08:d4:3a:45:3d:1b:ee:f3:36:16:9a:03:5b:82:9e:1c:49:1a:
08:af:1f:a9:bc:19:0a:e8:ed:82:c8:e1:9b:e7:e2:6a:17:5e:
a7:ed:78:70:3f:ce:f1:97:3c:53:5a:d8:23:4f:e6:e1:23:48:
0f:f8:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:17 2025 by rpki-client