
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: +xjV6zUYSYJS0+dXvr0maP4gggn8DPip4qFy11aZq5w=
Subject key identifier: AD:D2:F9:8D:B7:E3:C3:89:7D:EF:9F:D3:2C:57:AC:77:52:2F:05:D9
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 4946D2DDEB2C32C19BA1B144F7A544BDEBD958AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 01F7
Signing time: Fri 13 Jun 2025 10:25:03 +0000
Manifest this update: Fri 13 Jun 2025 10:20:03 +0000
Manifest next update: Sat 14 Jun 2025 13:25:03 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: Hi1jYqrlUR1qNGBn2qDdOXqMAqwCjoDU+DNFTwn1DGA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:46:d2:dd:eb:2c:32:c1:9b:a1:b1:44:f7:a5:44:bd:eb:d9:58:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Jun 13 10:20:03 2025 GMT
Not After : Jun 14 13:25:03 2025 GMT
Subject: CN=ADD2F98DB7E3C3897DEF9FD32C57AC77522F05D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:c6:95:cb:1f:d0:ef:4b:0a:f4:7a:1e:6b:
b5:6f:c9:64:d9:ab:dc:af:3f:0e:a4:eb:bb:1e:df:
ae:1f:5a:03:3b:9c:3e:f9:7f:21:e3:28:48:85:07:
3e:46:97:57:84:c4:65:4b:14:71:9a:4a:79:7c:16:
3d:73:92:24:67:bb:76:e5:91:e2:0c:17:6c:a9:70:
97:9e:ea:50:d8:c1:3f:d6:37:ed:71:e2:a4:cc:8d:
a4:f9:97:d8:43:53:8f:42:3b:b8:31:78:42:aa:27:
81:83:86:ae:8b:58:6f:32:21:74:13:5f:22:4f:a3:
31:d1:f7:b2:be:1d:56:17:8a:45:e8:32:cb:ec:92:
87:16:e4:4e:ea:2b:3f:0f:e0:74:db:26:32:d2:6b:
57:6e:14:df:89:fd:af:18:75:fd:f5:eb:55:7b:90:
90:5f:67:38:b9:fc:bb:c1:04:f3:ed:0f:74:6b:bb:
90:d5:67:fd:0f:3d:07:1c:fe:84:0b:c4:b7:4f:c3:
09:c8:a2:28:18:e7:5f:19:7b:69:40:da:21:24:4c:
fd:bb:9f:ca:e7:3d:ba:17:ea:26:3f:d8:8a:fd:2f:
fa:69:99:e2:e5:95:75:6e:4f:92:f0:c8:89:e9:8f:
14:c4:f4:b8:bc:ba:6a:e4:9f:60:7b:0c:9c:30:ca:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:F9:8D:B7:E3:C3:89:7D:EF:9F:D3:2C:57:AC:77:52:2F:05:D9
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:27:b1:95:29:8b:a3:ca:45:a6:07:34:2e:06:d8:36:83:f1:
29:54:f6:8c:e2:2b:40:f6:14:e0:2f:50:bd:e6:22:ef:19:5e:
08:d0:24:2e:c3:9a:ab:eb:3a:4d:e5:14:d3:0a:45:22:1d:c2:
ac:d8:0e:53:b9:f0:d6:44:08:8b:aa:aa:5f:0a:23:21:36:ac:
cf:20:16:74:78:d0:d5:1f:c5:b9:f7:2d:d4:4a:bd:eb:2f:7d:
77:11:bd:82:5b:de:37:db:71:0e:2d:de:a0:36:2e:b0:70:38:
b7:d9:24:40:36:94:7d:89:c3:b6:6a:e6:96:56:9e:c5:65:e8:
d6:1d:43:4f:89:9d:31:0d:b7:ae:24:fd:12:eb:4f:dd:a1:30:
06:02:72:57:c3:ae:19:de:83:10:65:90:20:b5:8a:72:e9:c4:
f3:b7:08:fc:8c:30:64:05:7d:c8:7e:e0:9e:c6:66:49:63:77:
81:2b:04:84:22:d4:35:ac:54:61:89:42:5f:fc:b8:5f:70:7e:
ed:13:3e:ae:b4:e0:ce:5b:90:99:3f:1d:4a:b4:2f:2b:92:1b:
ea:54:bb:41:74:c3:8f:35:2d:24:a6:93:a0:65:1f:95:53:08:
90:f8:8d:5b:9f:11:1e:a3:ad:39:20:2c:05:12:18:4a:5e:94:
d8:74:73:51
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSUbS3essMsGbobFE96VEvevZWK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZjY2YxOWQ3YjYxMDg4MGRiMjJkNDBlYzliYWUwMmIx
MjAxMzc2MzAeFw0yNTA2MTMxMDIwMDNaFw0yNTA2MTQxMzI1MDNaMDMxMTAvBgNV
BAMTKEFERDJGOThEQjdFM0MzODk3REVGOUZEMzJDNTdBQzc3NTIyRjA1RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDsaVyx/Q70sK9Hoea7VvyWTZ
q9yvPw6k67se364fWgM7nD75fyHjKEiFBz5Gl1eExGVLFHGaSnl8Fj1zkiRnu3bl
keIMF2ypcJee6lDYwT/WN+1x4qTMjaT5l9hDU49CO7gxeEKqJ4GDhq6LWG8yIXQT
XyJPozHR97K+HVYXikXoMsvskocW5E7qKz8P4HTbJjLSa1duFN+J/a8Ydf3161V7
kJBfZzi5/LvBBPPtD3Rru5DVZ/0PPQcc/oQLxLdPwwnIoigY518Ze2lA2iEkTP27
n8rnPboX6iY/2Ir9L/ppmeLllXVuT5LwyInpjxTE9Li8umrkn2B7DJwwytP5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUrdL5jbfjw4l975/TLFesd1IvBdkwHwYDVR0j
BBgwFoAUZszxnXthCIDbItQOybrgKxIBN2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzIvNjZDQ0YxOUQ3QjYxMDg4MERCMjJENDBFQzlCQUUwMkIxMjAxMzc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pzenhuWHRoQ0lEYkl0UU95YnJnS3hJ
Qk4yTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hY2VjZmRjNy02
ZGI5LTQyNWItYWNhZS03ZTIwZmJlNmUxMjkvMi82NkNDRjE5RDdCNjEwODgwREIy
MkQ0MEVDOUJBRTAyQjEyMDEzNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCexlSmLo8pFpgc0LgbY
NoPxKVT2jOIrQPYU4C9QveYi7xleCNAkLsOaq+s6TeUU0wpFIh3CrNgOU7nw1kQI
i6qqXwojITaszyAWdHjQ1R/Fufct1Eq96y99dxG9glveN9txDi3eoDYusHA4t9kk
QDaUfYnDtmrmllaexWXo1h1DT4mdMQ23riT9EutP3aEwBgJyV8OuGd6DEGWQILWK
cunE87cI/IwwZAV9yH7gnsZmSWN3gSsEhCLUNaxUYYlCX/y4X3B+7RM+rrTgzluQ
mT8dSrQvK5Ib6lS7QXTDjzUtJKaToGUflVMIkPiNW58RHqOtOSAsBRIYSl6U2HRz
UQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:57 2025 by rpki-client