Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: OnXpLJlp8eHTi65J6RzUT0Q714uQQ5h0TgORF4UQgp0=
Subject key identifier: D2:EE:3F:AF:81:E9:49:07:5F:BB:B4:37:F8:04:17:B5:35:B2:80:16
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 677E93B3E838A9195A9E625BD8BBEA582A9929D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 02EC
Signing time: Tue 04 Nov 2025 03:40:56 +0000
Manifest this update: Tue 04 Nov 2025 03:35:56 +0000
Manifest next update: Wed 05 Nov 2025 06:42:56 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: K05O1XD+mZ4tHL+HFxlAzqeJJbu0f0kxPwmEr2g3YJ4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7e:93:b3:e8:38:a9:19:5a:9e:62:5b:d8:bb:ea:58:2a:99:29:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Nov 4 03:35:56 2025 GMT
Not After : Nov 5 06:42:56 2025 GMT
Subject: CN=D2EE3FAF81E949075FBBB437F80417B535B28016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:84:30:3d:ca:df:bf:af:7a:86:e8:0e:85:
c5:10:dd:e9:c7:2c:18:14:16:46:14:0e:fd:a0:a0:
92:7d:8a:56:ec:ec:44:74:a0:48:71:7f:2f:db:c7:
e6:a1:a3:c0:af:d4:08:c0:ab:ac:a4:99:a0:c5:cf:
8d:a9:98:f8:85:3d:65:cd:a2:89:0d:5f:c2:c1:a9:
ec:11:6a:db:49:8e:c1:ca:5b:6e:4e:c5:51:ad:4a:
4d:91:68:d7:76:cc:06:9a:18:55:64:e1:ba:14:19:
ab:3d:be:a7:fa:b0:05:08:dd:9b:89:3b:60:52:76:
1a:d8:98:b1:56:88:e0:46:98:7a:2c:66:c2:6e:7e:
6c:50:a3:bd:67:6e:78:90:db:07:cc:d8:20:21:61:
9b:38:69:79:a3:16:35:77:b9:9d:13:cd:54:9b:09:
29:0a:47:31:49:1f:fe:08:54:ed:2e:43:64:0c:e3:
b2:3e:b2:da:8e:da:5d:f5:67:47:83:4b:2e:c7:1b:
cf:b8:d4:44:53:a6:10:d4:08:d8:b2:cf:d4:7c:da:
b4:d1:3a:7b:a6:56:ef:4c:34:3f:b4:83:0b:4d:20:
48:89:aa:77:43:f3:7e:3d:18:0f:fc:fa:36:8f:5d:
d2:be:21:02:6a:6e:46:80:58:7e:07:81:7b:77:b8:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:3F:AF:81:E9:49:07:5F:BB:B4:37:F8:04:17:B5:35:B2:80:16
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4e:69:07:b8:61:49:67:e2:92:2e:be:3a:84:6e:9b:3b:4f:
7c:7d:88:96:d8:41:0e:7a:cb:62:47:51:f7:27:9f:16:95:99:
66:fe:e6:d0:79:ad:76:cd:81:8e:47:0b:8c:57:0b:4b:53:68:
0f:c5:df:ed:9c:9b:df:38:d7:89:b6:c8:25:6e:de:de:87:2b:
be:cb:4c:f8:e9:52:f5:5c:95:9e:e6:70:d2:54:3e:88:76:23:
55:55:37:79:a9:83:18:b6:f5:1f:4f:54:61:76:9c:22:06:38:
37:c7:7e:7e:35:06:4e:50:d9:20:73:43:bd:44:e7:ef:3f:64:
b0:8b:cf:9d:39:00:8d:76:fe:d0:ff:c1:8e:0d:75:c6:09:80:
2e:c3:cf:49:d1:a1:00:31:97:4e:b4:4c:e6:4b:31:2f:45:23:
f6:f6:2e:48:15:72:02:22:57:51:95:0a:be:92:34:44:1d:36:
aa:2a:16:f7:3e:fe:0e:38:7d:7f:9d:57:03:e7:ac:df:55:23:
7d:2a:6b:dd:d9:54:76:2c:82:6a:23:68:38:84:a0:0f:07:58:
a9:f6:01:21:ea:e0:13:53:07:a7:f1:6f:8f:53:80:f4:7f:17:
f5:ec:38:11:15:83:ba:2a:bb:e1:f0:41:61:9a:f9:96:e5:28:
f2:b6:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:43 2025 by rpki-client