
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: taKuxZU+QLmEqJa/BDrHD40mSY/wnbuQU+NSAUN4gs0=
Subject key identifier: F3:EA:AB:AB:F9:DF:D6:E2:4B:C3:81:BA:B8:77:5F:F7:E6:94:EE:D2
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 330EE2EDC11B5AB044C775A8E268D2B3B83AC226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 023F
Signing time: Sun 10 Aug 2025 00:28:28 +0000
Manifest this update: Sun 10 Aug 2025 00:23:28 +0000
Manifest next update: Mon 11 Aug 2025 03:38:28 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: r8axV7u4Ra0yk6HIcB30WIo0wkBZEj6mxK2vGgNFY7c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 03:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0e:e2:ed:c1:1b:5a:b0:44:c7:75:a8:e2:68:d2:b3:b8:3a:c2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Aug 10 00:23:28 2025 GMT
Not After : Aug 11 03:38:28 2025 GMT
Subject: CN=F3EAABABF9DFD6E24BC381BAB8775FF7E694EED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:00:35:33:4c:54:c2:85:74:be:58:ba:4a:
c3:35:1b:7a:fa:d4:24:de:99:51:a8:8e:16:b9:93:
0c:7b:84:e1:be:bb:84:05:de:d1:9c:18:36:96:b7:
56:d5:de:3c:c3:a9:30:dc:f5:9d:4d:5d:89:17:34:
e8:23:0a:ed:73:b9:08:5d:91:f1:5b:3a:fd:21:d9:
bf:99:16:3d:fa:34:f6:9e:7b:f4:e7:8f:0e:4d:c2:
e8:53:a2:5f:28:b6:9e:63:bf:43:62:bb:a7:4a:8c:
50:08:eb:35:46:e1:d3:71:ad:99:21:a9:a3:63:7a:
95:16:34:59:eb:5c:3c:3d:0e:39:22:c4:85:39:76:
66:54:36:3d:10:ae:8d:8b:0e:26:d0:f0:59:3d:04:
56:3e:f1:6b:a7:fb:e0:4e:66:58:16:98:82:1d:34:
3d:e1:52:bf:c7:5e:c5:8f:2d:70:c1:78:c9:f2:66:
73:eb:21:f3:bc:df:5a:6e:90:5b:75:b5:a4:5c:07:
b4:29:28:9e:3f:d1:d3:44:da:4e:ea:de:42:fb:4d:
36:10:ac:88:1b:82:6b:72:17:27:f5:77:16:75:47:
cf:c3:77:e3:1b:db:e0:89:07:18:a8:e4:01:bf:00:
cc:37:ed:0c:6d:29:c5:fc:27:ca:f3:95:9e:f2:2c:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EA:AB:AB:F9:DF:D6:E2:4B:C3:81:BA:B8:77:5F:F7:E6:94:EE:D2
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ea:04:55:f0:31:92:e3:6e:e9:2b:d8:7d:40:8e:1a:f2:e5:
5f:76:e7:fd:09:0b:4b:b6:b4:c7:db:03:ff:30:63:56:91:25:
c8:41:33:e5:a0:bb:2f:27:10:2e:c0:53:0a:31:8b:21:3d:7a:
d6:90:50:2d:1e:bf:b6:99:db:ac:18:0c:10:dd:1d:3a:49:7b:
10:75:85:68:7a:8f:e4:61:75:6b:18:54:f6:0b:bd:b2:44:b0:
4b:89:93:7c:f6:04:6d:13:a4:61:2d:17:c5:a2:0f:35:2b:a3:
5b:7c:3f:9e:08:04:1a:69:d5:ae:a7:10:4c:4c:02:a0:ef:26:
32:09:09:52:43:e2:a1:40:5d:13:8c:2b:b7:04:4c:70:30:ff:
b2:24:ea:19:85:4d:9b:d0:82:cd:d7:8e:40:d5:59:b5:93:89:
64:02:0c:42:f3:97:b1:e7:e3:80:c5:33:12:62:dd:c5:ea:8a:
45:03:a4:be:84:40:8e:02:20:75:f5:39:94:c4:a1:17:96:53:
e6:a9:ac:79:7d:b1:4c:e3:aa:c8:23:4e:e8:c5:2b:99:d4:e6:
7f:7a:7c:88:fa:ee:c2:5b:ee:fe:18:94:31:31:cb:6f:0d:4e:
33:d3:2c:fb:3d:8b:46:eb:e9:35:45:f0:2d:21:2c:3c:6f:67:
2b:58:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:11 2025 by rpki-client