Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: KtmUl9sjuh8EcPLAtsLrItebpPRk6YpzC29504I9yZU=
Subject key identifier: 99:2F:53:7E:0A:FB:89:F9:52:E2:32:61:11:38:F7:0D:80:00:2A:A6
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 15F88670490D6DD1C64763056B22C356A0BAE0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 049A
Signing time: Tue 04 Nov 2025 01:13:04 +0000
Manifest this update: Tue 04 Nov 2025 01:08:04 +0000
Manifest next update: Wed 05 Nov 2025 03:04:04 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: A/AuY/BSi5iwsPEQxtOV4r2Jj21Xvxxlv4Ljxrvk8V4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f8:86:70:49:0d:6d:d1:c6:47:63:05:6b:22:c3:56:a0:ba:e0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Nov 4 01:08:04 2025 GMT
Not After : Nov 5 03:04:04 2025 GMT
Subject: CN=992F537E0AFB89F952E232611138F70D80002AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:dc:63:44:48:d0:38:28:9d:27:13:5f:64:
8c:6e:54:75:96:c5:e9:87:99:86:73:9f:51:c2:b9:
45:b2:65:cc:55:aa:24:d7:f3:4a:22:2f:f3:9a:bf:
e9:ce:2a:67:12:7a:ca:0d:ed:23:31:9a:b2:21:dc:
78:8a:da:b3:92:d4:9d:bf:a8:c6:3f:32:e0:5e:2d:
1a:8e:64:4d:45:8c:dc:3e:1d:c9:18:e7:27:8e:6a:
9c:f8:e4:3b:8b:4c:28:d6:2c:d5:2f:4e:56:0d:0e:
e3:fd:5d:1b:c0:e2:7e:f4:f4:76:6b:ac:f7:2e:27:
21:56:c3:8f:2e:8d:66:ae:2f:2b:f9:3f:df:21:9f:
e9:1d:28:a1:23:f2:59:f1:c4:2d:c1:87:c8:00:3a:
d6:a2:be:05:87:fb:d8:aa:ab:ce:d8:5e:a0:9a:2c:
08:e0:52:e5:69:cf:cd:a7:6a:cd:d2:6b:48:cc:58:
e6:4a:ac:4c:d3:3f:8c:0d:7f:5c:2d:80:78:2c:fd:
c8:f3:97:42:67:93:fb:bb:68:13:8d:2d:f4:5f:80:
94:6a:26:dd:99:e1:c0:cc:54:93:26:1c:1a:06:c6:
66:2c:49:80:58:40:51:9e:d0:b4:eb:68:ad:cf:b4:
ac:c7:c0:8c:9a:d9:a0:f4:01:22:b6:70:30:74:bf:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:53:7E:0A:FB:89:F9:52:E2:32:61:11:38:F7:0D:80:00:2A:A6
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b3:e2:6e:2c:08:ec:16:b0:55:b9:73:11:4d:70:6b:d5:8b:
84:b2:72:f4:8d:09:cf:a0:7e:0e:72:48:ca:72:3c:32:28:9f:
fd:9f:40:b9:19:90:75:99:0c:e7:1d:03:90:dc:e0:c0:fc:f2:
f0:e7:d7:fd:75:57:ac:59:af:0d:07:59:85:5d:17:ca:f6:6c:
32:20:78:93:e8:15:d3:95:0c:28:b0:3c:43:0d:36:65:c3:17:
57:af:0d:2a:ea:7b:31:12:9c:4a:ff:2d:7e:92:68:32:16:cd:
d8:37:66:10:78:8e:ff:ea:16:9d:0c:dd:ab:31:4b:0d:8c:11:
65:e4:1d:2b:b5:d0:1a:8a:57:9f:d5:25:2d:e8:76:6b:1a:bd:
c5:14:c3:26:ee:c0:de:3d:74:41:be:87:4d:72:b4:13:25:1a:
77:9b:1b:96:07:cb:75:16:50:ae:ab:71:53:2a:d0:15:20:93:
3a:a9:9f:c5:d6:1a:9d:17:9a:81:f3:c7:c1:34:cf:ae:4d:bb:
87:e6:1e:73:5e:e0:ad:16:13:f6:79:00:72:7f:0b:38:bb:50:
6c:aa:93:e6:ab:e2:74:d2:37:6c:9a:d6:5a:8d:31:83:c0:05:
4f:9b:cf:a1:0c:72:cb:e9:fb:e0:0a:38:ff:ca:71:b5:8e:a7:
8c:be:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:01 2025 by rpki-client