Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: 8zbYNvh5JdE7oKBu56I/+SGvL6dSD1GJZW8tElkeGRY=
Subject key identifier: AF:67:D5:85:ED:CB:C2:F1:A9:CC:33:14:72:6C:DA:0B:16:A7:BC:A0
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 4567F88E193D1DA408C18BDAAEF96A6635E48080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 041F
Signing time: Mon 04 Aug 2025 06:53:41 +0000
Manifest this update: Mon 04 Aug 2025 06:48:41 +0000
Manifest next update: Tue 05 Aug 2025 08:51:41 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: UmB9ivsdzMGqr+eBEbpcyXWmSIckoNpLWCF6tgT3ARU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:67:f8:8e:19:3d:1d:a4:08:c1:8b:da:ae:f9:6a:66:35:e4:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Aug 4 06:48:41 2025 GMT
Not After : Aug 5 08:51:41 2025 GMT
Subject: CN=AF67D585EDCBC2F1A9CC3314726CDA0B16A7BCA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:ac:96:8c:66:ce:ec:dc:07:a2:0e:ef:5d:
e2:41:c4:98:05:9e:ec:db:ed:16:9a:5a:e9:7f:a0:
8d:f9:51:1a:56:67:55:dd:15:f1:84:9e:fe:4d:1b:
76:9e:32:6c:dd:ac:26:c3:38:54:c5:1b:ac:67:01:
8a:c4:0f:a1:b2:39:00:f6:96:5c:be:d2:c9:2c:a0:
28:51:7f:8b:d5:d0:67:36:5a:4e:db:6c:2d:c7:49:
6a:19:6d:db:66:e9:f1:6a:ec:d7:4a:4c:04:97:3c:
48:76:cc:d5:7a:d5:28:f9:c4:97:cb:ec:95:bb:9a:
5b:f3:40:1b:af:0d:b9:49:c9:6f:e5:df:82:7d:47:
a7:a9:7d:2e:16:ea:78:1d:c7:f6:a8:53:c4:97:60:
c1:e1:05:3d:54:dc:94:60:9d:7c:65:88:0a:b5:3b:
80:13:c6:c5:0f:ea:b0:83:6e:07:38:59:01:97:9a:
11:15:d7:e8:a8:98:a9:d6:c9:29:52:71:ea:9a:89:
c4:cc:d5:70:e0:e9:1f:09:dd:c7:d8:49:7d:b9:d3:
54:2c:04:1c:59:e7:40:7d:a6:c2:11:e7:7c:76:17:
f1:7c:b2:1d:5b:ae:33:47:95:43:6f:f0:33:27:c8:
93:57:81:ff:ef:8b:6d:b5:de:65:6e:36:62:c8:c5:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:D5:85:ED:CB:C2:F1:A9:CC:33:14:72:6C:DA:0B:16:A7:BC:A0
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4d:bb:c4:bd:5d:7e:e9:4a:d7:2c:b3:f9:58:b6:00:5b:e2:
b2:ad:c7:83:ef:17:71:73:20:d7:8a:87:f9:85:32:84:6a:d5:
ef:e4:28:c6:00:3a:29:12:1f:3b:b0:17:d2:64:c2:40:bc:2e:
eb:95:ec:e8:d4:b4:b8:4b:44:a6:c0:38:49:24:31:c4:3c:32:
a7:66:c8:40:03:d3:cb:00:6c:f6:6e:0a:b8:eb:12:c1:93:4f:
85:3b:6a:06:58:46:96:7d:42:14:91:71:da:f6:2d:3f:bf:94:
53:00:e6:b0:1d:14:06:f8:8c:9f:f6:15:e5:60:21:08:62:30:
0e:9c:f9:21:11:e7:26:3f:35:95:ba:73:81:19:e4:95:d2:83:
ca:0c:14:d7:3b:b9:ff:34:99:6b:f9:36:98:ef:17:bf:fc:1a:
72:e2:31:1d:07:12:f3:92:46:ca:87:9a:57:4f:c0:2e:4d:ce:
9a:e3:72:85:94:e2:4a:00:73:58:e8:5b:37:d9:e4:ad:85:2e:
5a:aa:ee:19:63:81:8b:bf:ff:0e:5f:49:00:6d:1f:45:fd:1b:
27:d1:b4:95:8e:ba:6b:9a:fe:22:9b:7d:8a:f1:73:4f:28:b9:
77:93:61:ce:15:44:40:71:fb:2a:96:83:cd:b1:d7:72:a4:d7:
87:2b:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:02 2025 by rpki-client