Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
File: 64742A2EF43282A0509E6A31574C96C8006ECCD5.mft (raw, json)
Hash identifier: Fy9DND/cwMjFxzTp6BzMBa95nYRECxdMfHib9LNbjac=
Subject key identifier: 5D:35:B4:44:62:5A:5C:34:28:5E:47:EE:A8:62:6E:47:9C:85:E4:1E
Authority key identifier: 64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
Certificate issuer: /CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Certificate serial: 207520B74C9378B1FBD750FC0B65448880983F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
Manifest number: 3C
Signing time: Sun 10 Aug 2025 22:57:56 +0000
Manifest this update: Sun 10 Aug 2025 22:52:56 +0000
Manifest next update: Tue 12 Aug 2025 00:40:56 +0000
Files and hashes: 1: 64742A2EF43282A0509E6A31574C96C8006ECCD5.crl (hash: JUREmKGvUdMuNcWJhV6z47HrReKMrPWGiZSc+1du/TI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:75:20:b7:4c:93:78:b1:fb:d7:50:fc:0b:65:44:88:80:98:3f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Validity
Not Before: Aug 10 22:52:56 2025 GMT
Not After : Aug 12 00:40:56 2025 GMT
Subject: CN=5D35B444625A5C34285E47EEA8626E479C85E41E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2e:44:5c:02:5d:17:69:8d:24:27:62:3f:c3:
c5:77:61:3a:6d:26:c4:0c:27:22:c6:63:84:bd:78:
7f:4d:fc:1e:a6:19:de:79:fd:25:90:3a:fd:1d:c4:
82:bf:c1:67:5e:21:8f:09:7d:40:3b:1a:01:83:9c:
46:52:6c:cd:40:ab:68:d2:2b:5c:0a:32:ca:ab:ab:
8a:c8:e9:11:60:22:53:6e:31:85:41:1e:8d:62:2f:
98:09:eb:b8:06:75:49:94:b6:47:af:cb:93:6d:10:
c2:be:5e:db:b4:bd:fd:af:cd:b7:92:08:93:14:3e:
ce:99:cc:07:70:51:cd:02:9a:29:a2:d4:55:e6:bf:
e8:7a:b2:57:ec:32:7d:99:3e:26:60:6f:88:3c:d1:
b8:4c:bd:1d:66:c3:7a:48:3e:5a:be:cb:c5:75:32:
7e:62:48:df:f0:1a:b3:c8:54:6a:12:aa:27:7d:a3:
33:8f:f5:7b:e3:be:85:51:5a:8a:59:72:cc:6c:fe:
28:25:f4:31:cc:e9:23:4b:29:15:4e:c0:c8:bc:68:
fa:08:b8:12:f1:6e:9c:c0:67:80:35:96:fc:2d:45:
b2:d2:7d:a8:8c:62:5d:6e:3d:b3:8b:7a:9d:37:f7:
e0:53:5f:02:1d:5a:27:be:39:ab:d0:9a:c7:58:e7:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:B4:44:62:5A:5C:34:28:5E:47:EE:A8:62:6E:47:9C:85:E4:1E
X509v3 Authority Key Identifier:
keyid:64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cf:a2:62:80:97:16:b8:dd:3f:7c:aa:9c:63:38:03:0b:48:
45:60:27:26:3d:c9:2a:13:b6:eb:eb:28:56:a3:3b:03:af:3a:
75:d0:ce:d1:6e:e3:f7:45:6b:84:7c:5a:59:06:4b:ca:c7:a0:
50:bb:a8:96:42:30:a7:a4:ab:e0:6a:18:2d:4b:4e:d4:50:36:
8d:6a:1d:9e:e3:f0:ca:a9:0f:d1:a5:29:2b:a3:27:d2:6e:86:
ba:35:10:c1:6b:40:12:2b:b8:83:75:55:3d:db:cd:4c:98:9a:
74:f3:f6:e4:27:f7:c1:68:11:8f:7f:cb:af:a5:8b:95:a9:c6:
b9:08:f9:1c:31:26:76:75:c9:93:e1:51:c9:61:6f:7d:8b:42:
8c:94:79:4f:b3:56:ea:ae:0c:bf:4b:35:8e:42:ac:e5:a2:49:
b2:df:63:d7:b3:2c:62:bc:ba:68:ee:db:3b:5f:61:3d:69:0d:
26:f9:7e:05:b0:ab:1f:61:e8:21:28:2a:82:ec:44:2a:5b:aa:
c0:ff:e9:8e:72:01:5e:72:98:2b:67:2b:b8:b9:3c:ee:83:9a:
77:07:69:93:df:90:ad:e5:19:4c:51:79:04:97:c4:1f:c8:ab:
46:79:3c:05:f5:30:2d:65:ba:e0:ee:65:ef:02:a8:f9:13:97:
2f:bb:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:26 2025 by rpki-client