Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: 9mS4E8JU2VrluQKZVftC746xdbHGSBxUbDi7PvjpKI8=
Subject key identifier: B6:BD:C7:76:71:55:DB:78:1E:DF:6E:D5:1E:DC:91:F7:6F:9B:D2:FE
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 62BD85AE59EC1338A1DAC23CB7E670CBE11F954B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 024C
Signing time: Sat 14 Jun 2025 13:12:56 +0000
Manifest this update: Sat 14 Jun 2025 13:07:56 +0000
Manifest next update: Sun 15 Jun 2025 15:35:56 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: HXi54AP1xJW1oKx9RMmOnerWHItYYHtoMJ2SNOUtjdI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bd:85:ae:59:ec:13:38:a1:da:c2:3c:b7:e6:70:cb:e1:1f:95:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Jun 14 13:07:56 2025 GMT
Not After : Jun 15 15:35:56 2025 GMT
Subject: CN=B6BDC7767155DB781EDF6ED51EDC91F76F9BD2FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:4e:6e:a6:b3:19:0d:6d:26:6b:d5:a0:e4:
97:73:00:c7:da:a4:eb:7f:12:8f:f2:0f:bc:21:26:
3f:fa:1a:7c:8a:1d:d1:4c:07:dc:22:32:98:48:22:
31:de:c6:0d:01:aa:39:31:4a:6b:da:64:e8:e4:7a:
b4:1a:89:04:77:74:6c:3d:bc:e0:1e:1e:5b:cf:e0:
23:fd:b2:e4:91:d6:e2:5a:e4:08:1c:a1:25:74:8f:
ff:21:2f:95:f2:bf:0a:02:4b:46:9b:cf:81:48:9b:
6b:fe:9b:4a:99:63:6b:5d:af:0d:82:2b:ed:c7:87:
1e:f0:12:7c:de:f2:48:c9:f0:b4:bb:82:17:4d:4d:
d5:e0:08:ff:ca:7b:94:fd:ee:a1:d2:cf:06:ca:59:
d1:5e:36:49:b6:6d:37:00:80:de:e4:2c:e2:92:17:
5e:83:a5:6a:da:62:bf:85:ef:05:7a:6c:22:ad:fc:
95:1f:92:7b:86:1d:43:66:9b:61:73:52:06:5f:d3:
97:ba:e0:17:17:b0:3d:97:1c:14:9a:14:bf:ea:06:
02:c9:d1:5c:d5:01:3c:59:b3:69:09:70:7e:64:d2:
08:07:da:47:e0:70:a6:e6:aa:f0:27:2a:fc:ed:71:
83:97:8a:b0:3d:c7:2f:9c:06:ae:60:60:e7:b4:2b:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:C7:76:71:55:DB:78:1E:DF:6E:D5:1E:DC:91:F7:6F:9B:D2:FE
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:34:45:24:de:ae:83:1f:90:8c:2a:1e:7a:71:a7:51:27:e2:
54:48:2c:2c:96:55:33:47:74:7f:c4:87:b2:21:e3:9c:ee:ad:
fd:6b:68:21:cd:02:08:ab:af:66:01:51:4e:47:ce:74:9d:09:
e2:a0:35:60:cc:1c:2b:91:c3:56:88:37:89:fc:60:72:ba:c6:
c2:23:a0:59:15:e3:ea:9d:60:00:4c:dd:d9:f1:21:96:4b:c2:
f1:79:40:7a:03:6a:3e:3a:45:9d:9b:ad:ec:19:8f:0e:7c:69:
10:00:f8:d5:ee:53:c8:1a:1f:44:b4:81:e0:08:60:0a:d3:a0:
94:12:1c:4a:1f:23:a3:da:c6:bf:55:b1:a9:c3:4e:63:5f:30:
5a:a0:17:59:14:2d:4b:77:2d:9c:ab:b3:24:1d:16:01:5c:a4:
e0:d3:de:2c:76:4b:91:50:c5:b9:c0:ca:9b:5b:48:5d:11:5e:
6d:60:4f:f7:f3:97:df:a1:43:6f:4a:37:ad:57:7d:12:ac:ad:
82:91:e5:44:43:ec:04:b6:91:86:5b:e2:bf:95:13:5d:09:db:
55:b1:45:5d:8c:d8:04:e6:12:53:77:1b:42:7c:5b:c8:83:8a:
01:59:cb:7b:4e:66:14:b8:89:d3:ca:d5:bb:8b:7f:f3:b5:bb:
65:dc:59:d5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYr2FrlnsEzih2sI8t+Zwy+EflUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNmN2IyOTM3MWU4MTQzMzZjNTJkOWM0M2QxYWY0Zjlm
YTMzZTg1NTAeFw0yNTA2MTQxMzA3NTZaFw0yNTA2MTUxNTM1NTZaMDMxMTAvBgNV
BAMTKEI2QkRDNzc2NzE1NURCNzgxRURGNkVENTFFREM5MUY3NkY5QkQyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDduU5uprMZDW0ma9Wg5JdzAMfa
pOt/Eo/yD7whJj/6GnyKHdFMB9wiMphIIjHexg0BqjkxSmvaZOjkerQaiQR3dGw9
vOAeHlvP4CP9suSR1uJa5AgcoSV0j/8hL5XyvwoCS0abz4FIm2v+m0qZY2tdrw2C
K+3Hhx7wEnze8kjJ8LS7ghdNTdXgCP/Ke5T97qHSzwbKWdFeNkm2bTcAgN7kLOKS
F16DpWraYr+F7wV6bCKt/JUfknuGHUNmm2FzUgZf05e64BcXsD2XHBSaFL/qBgLJ
0VzVATxZs2kJcH5k0ggH2kfgcKbmqvAnKvztcYOXirA9xy+cBq5gYOe0KyGDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtr3HdnFV23ge327VHtyR92+b0v4wHwYDVR0j
BBgwFoAUY/eyk3HoFDNsUtnEPRr0+foz6FUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzMvNjNGN0IyOTM3MUU4MTQzMzZDNTJEOUM0M0QxQUY0RjlGQTMzRTg1NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lfZXlrM0hvRkROc1V0bkVQUnIwLWZv
ejZGVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05
NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMy82M0Y3QjI5MzcxRTgxNDMzNkM1
MkQ5QzQzRDFBRjRGOUZBMzNFODU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzRFJN6ugx+QjCoeenGn
USfiVEgsLJZVM0d0f8SHsiHjnO6t/WtoIc0CCKuvZgFRTkfOdJ0J4qA1YMwcK5HD
Vog3ifxgcrrGwiOgWRXj6p1gAEzd2fEhlkvC8XlAegNqPjpFnZut7BmPDnxpEAD4
1e5TyBofRLSB4AhgCtOglBIcSh8jo9rGv1WxqcNOY18wWqAXWRQtS3ctnKuzJB0W
AVyk4NPeLHZLkVDFucDKm1tIXRFebWBP9/OX36FDb0o3rVd9EqytgpHlREPsBLaR
hlviv5UTXQnbVbFFXYzYBOYSU3cbQnxbyIOKAVnLe05mFLiJ08rVu4t/87W7ZdxZ
1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:49 2025 by rpki-client