Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: 80YQDY3bhYjCSy0rsmP9Vi032ecshXyXekmsJHvZ/Po=
Subject key identifier: EE:20:63:4B:72:48:68:93:21:F6:56:B1:04:C4:91:E1:76:16:3B:9E
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 442EEE0BDE969D77309BBA6ED36ABCE9A5A420A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 0270
Signing time: Sun 03 Aug 2025 18:05:01 +0000
Manifest this update: Sun 03 Aug 2025 18:00:01 +0000
Manifest next update: Mon 04 Aug 2025 19:57:01 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: JUw+agYcCkSqi3qa5gB+Ln7xivxCGK2e7EHGKmpI32U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 19:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2e:ee:0b:de:96:9d:77:30:9b:ba:6e:d3:6a:bc:e9:a5:a4:20:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Aug 3 18:00:01 2025 GMT
Not After : Aug 4 19:57:01 2025 GMT
Subject: CN=EE20634B7248689321F656B104C491E176163B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:d0:85:bf:6d:1d:46:18:fa:07:e0:e0:a0:
f7:78:1c:66:cd:c4:bc:93:f1:2d:09:af:3f:45:21:
73:e4:b2:71:e2:ce:96:16:76:91:a5:44:9f:c9:4b:
00:11:15:e3:5b:cc:fb:7b:9e:1e:c6:8a:40:d2:6b:
71:fc:1e:a0:de:0e:55:b1:2c:81:56:70:00:80:de:
1f:34:f2:40:3a:a1:a7:38:e8:1c:1d:c1:80:72:ee:
f1:28:7c:9a:61:c4:b0:29:76:4f:40:45:a8:98:72:
27:53:fd:a2:65:93:fa:dd:c2:b3:8e:09:94:ca:0a:
2f:8e:d2:dd:b1:a7:24:70:20:04:1a:71:20:0d:94:
15:e7:d7:e7:d8:cd:26:cc:34:a5:5c:ec:dd:26:ac:
bc:3d:90:32:a5:7c:0d:71:d1:d8:6b:22:a4:d0:91:
f8:71:78:9f:4f:36:87:3d:8c:fa:cf:9b:d9:87:aa:
ff:92:4b:25:b9:23:dc:95:ab:ba:1f:15:4c:69:68:
d2:85:84:cc:88:e6:a3:20:41:75:ec:fb:38:ba:e4:
0f:ae:56:6a:bc:a8:55:cc:71:5f:f9:bb:a0:c0:ab:
79:87:9d:68:10:be:cc:34:b1:a4:30:13:1d:1b:33:
eb:1d:67:02:42:33:81:3e:dc:b8:bc:f9:da:73:7e:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:20:63:4B:72:48:68:93:21:F6:56:B1:04:C4:91:E1:76:16:3B:9E
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3e:8a:fb:cd:f6:98:d3:cc:b6:84:11:0a:f0:b0:2a:78:da:
78:48:92:ff:41:d9:15:41:83:1e:ee:24:15:70:84:ae:6d:bd:
55:54:19:fe:49:bc:c1:06:e4:50:78:d9:c1:fc:07:33:82:4c:
27:d8:04:22:b7:99:4f:7c:af:5d:bf:84:91:c1:e5:d9:21:a4:
b0:1b:b3:ea:fa:d0:20:61:ab:da:d7:55:ee:c9:97:b0:c8:0c:
84:01:ef:ad:87:3c:e6:89:9a:5c:8c:ee:42:1d:8f:71:3f:ac:
9b:90:1d:d1:3f:72:e9:23:b4:3e:b1:85:af:b9:38:8f:1c:47:
5b:88:a0:36:a3:2b:5c:eb:0e:6f:6d:07:e3:8d:fd:11:67:9d:
31:b7:55:5a:3e:6f:f1:6c:dc:e3:89:42:45:39:68:d2:0c:c6:
31:3b:02:46:c5:fb:7c:9a:d9:17:1c:d5:50:f5:1e:32:13:cf:
f2:64:e7:d2:9f:d8:ee:e4:a2:d0:e8:25:07:c6:b7:76:26:22:
6f:40:8b:3a:14:fc:b6:48:42:ab:e8:42:28:98:5e:f9:e9:ab:
12:bb:79:89:5f:d9:ad:6e:71:66:2a:4e:62:b0:ed:47:c9:20:
63:72:64:77:2e:6a:40:d9:6f:90:ea:d3:81:91:9a:00:ae:7f:
bc:5b:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:43 2025 by rpki-client