Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: xC+O8MwiE8yoAaH9U52kyWUgUmsrjQAx/5NwB+ZUyIw=
Subject key identifier: 66:9C:EC:E3:11:CC:72:72:43:43:1F:AB:42:63:29:AC:D0:DB:8B:FB
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 64A029B9481C1F1952EC372FAD79E011B7B00E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 03A0
Signing time: Tue 17 Jun 2025 00:00:09 +0000
Manifest this update: Mon 16 Jun 2025 23:55:09 +0000
Manifest next update: Wed 18 Jun 2025 02:05:09 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: 5He7aTWLcBYaPqXhVaOkO7DywGzerR6JF2YbZAaUL+o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a0:29:b9:48:1c:1f:19:52:ec:37:2f:ad:79:e0:11:b7:b0:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Jun 16 23:55:09 2025 GMT
Not After : Jun 18 02:05:09 2025 GMT
Subject: CN=669CECE311CC727243431FAB426329ACD0DB8BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:25:9c:05:21:61:1f:0c:d3:cb:aa:59:46:
a0:ec:24:6b:cd:2e:57:07:bf:a5:44:7d:df:8d:21:
4f:3f:f5:5c:9a:06:ba:31:a9:ab:87:78:6f:93:7d:
53:7b:35:e7:3b:68:67:46:fb:5c:4b:ba:09:00:55:
cf:01:c2:62:13:c6:00:36:07:ad:58:1e:6c:af:d2:
9e:2a:68:4a:18:9f:f7:35:f2:a8:64:5e:e9:00:1a:
8b:63:a1:58:55:da:a5:ab:a3:a9:ac:a5:f5:92:8f:
49:e9:38:2e:e2:0a:1a:be:11:93:60:c0:ed:e6:a9:
53:ea:47:c7:a1:8f:b7:a2:49:1e:c1:ad:bf:8a:3b:
7c:3d:fc:e8:64:3a:96:47:8a:8c:aa:81:14:3c:37:
1d:03:e1:a3:38:53:98:06:c6:4b:82:f1:90:97:68:
93:94:15:18:96:6e:30:96:6d:7e:3d:78:d8:9b:02:
92:0c:f3:41:e3:87:1a:5a:55:5a:2c:13:6c:07:29:
4d:3b:7d:85:2a:12:62:02:d1:1d:b6:5f:37:1f:d0:
fb:6a:eb:3b:29:55:3c:57:75:2b:b6:97:81:ee:fd:
e5:79:a0:9e:e5:a5:e1:78:bc:4e:a3:de:75:d7:26:
7c:78:ec:2b:f2:83:68:34:1a:35:46:51:80:39:c8:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9C:EC:E3:11:CC:72:72:43:43:1F:AB:42:63:29:AC:D0:DB:8B:FB
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:29:3d:5e:b4:65:9c:98:ed:2b:7f:55:9f:22:68:fa:3f:42:
76:27:bf:21:73:41:25:b9:b9:9f:b5:88:26:4d:dd:4e:e8:29:
70:be:8e:06:6b:46:27:68:32:21:1c:bf:50:7e:76:16:93:da:
15:20:4b:c4:a8:31:05:c6:dc:7c:b4:f4:f7:42:78:c9:82:82:
9b:8e:fe:95:46:ec:83:14:35:5d:81:b8:07:b2:4b:20:b7:df:
7c:da:fe:2b:b6:ce:e6:22:1b:d5:61:ec:a2:3b:33:e0:5c:9d:
b9:53:3a:ea:a2:0a:85:27:49:51:40:79:da:2e:2a:68:b7:02:
5b:a7:3e:c3:98:83:ad:96:e0:87:07:97:90:55:28:2d:23:e6:
e1:73:81:d7:ef:16:6b:d7:72:b6:f5:19:4b:08:65:2d:0e:df:
af:c2:68:25:07:65:ab:e8:8b:8f:a1:80:99:44:36:1e:ee:55:
e6:06:c5:3e:c6:43:3c:47:5f:ac:b3:a5:39:8d:c6:4e:0c:f6:
b8:50:6f:32:68:ac:7d:ff:c2:c4:d8:49:3f:ef:43:ea:d1:4c:
47:72:51:ec:b8:f8:64:25:88:70:2c:8c:52:19:8d:b6:1d:df:
ee:c9:d9:34:d9:d0:68:b8:d8:51:e4:d6:95:d7:07:87:f7:35:
19:51:cd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:01:52 2025 by rpki-client