Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: 5VoEHBqkFPlVM2QZvoE9eD/5CcOKvI9kg2/gI2Ro7wo=
Subject key identifier: 5C:91:83:2A:62:4B:24:4E:D8:5A:AA:07:1D:FE:07:F7:D3:3D:1E:27
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 1806917822756EF354983F2E56C1485FF5FEF833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 02E3
Signing time: Tue 04 Nov 2025 12:20:56 +0000
Manifest this update: Tue 04 Nov 2025 12:15:56 +0000
Manifest next update: Wed 05 Nov 2025 12:51:56 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: jyhKuxE7Ut137Fw3GeUpO97LdPT2sfA22szVdJjS7FM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:06:91:78:22:75:6e:f3:54:98:3f:2e:56:c1:48:5f:f5:fe:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Nov 4 12:15:56 2025 GMT
Not After : Nov 5 12:51:56 2025 GMT
Subject: CN=5C91832A624B244ED85AAA071DFE07F7D33D1E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:5a:d5:e5:8b:6c:1c:4d:c4:78:56:c9:58:
bb:2a:c3:10:2d:0e:ef:7c:55:09:88:89:1f:03:2f:
bd:21:d9:e8:45:3b:d3:89:bd:46:85:84:05:35:79:
5b:25:b2:c0:46:dd:b7:73:89:1a:6a:68:b6:ef:d2:
bf:ea:f7:d0:73:01:7a:d7:1c:9e:27:3c:bc:a3:7a:
ca:2f:db:0c:d5:75:b2:25:0f:67:05:05:74:5a:96:
66:ea:65:6c:5f:8d:e2:b2:b6:d1:ac:69:38:e6:8c:
31:19:e0:d9:80:6c:a4:91:85:93:be:ea:fc:16:86:
fc:2e:8a:b1:8f:ae:08:99:f2:fc:5a:c0:d0:fa:76:
70:93:c0:71:21:c9:13:33:61:fa:0c:d6:fe:d0:16:
12:63:b2:b9:06:2d:a6:f4:a1:c6:8f:4e:47:79:8b:
24:52:e2:ab:15:9a:ad:c6:2c:58:b0:6b:d3:08:27:
2b:3c:a8:c7:71:22:e8:39:91:d1:14:02:71:3c:49:
94:cf:07:8f:32:28:5b:81:4d:8b:6b:94:38:45:7c:
a3:29:92:18:85:67:04:78:87:31:90:6b:7a:e7:a1:
e3:2a:7a:ed:25:0b:4a:0b:24:43:a9:ac:fd:00:b2:
1f:96:01:4a:63:06:93:1e:b8:4f:a2:33:93:e9:e2:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:91:83:2A:62:4B:24:4E:D8:5A:AA:07:1D:FE:07:F7:D3:3D:1E:27
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:99:1b:fb:4a:c0:62:a5:47:c0:e7:55:c3:19:ae:a6:6d:b4:
1c:b4:cd:15:47:a1:d9:a5:96:37:19:19:ce:1e:1b:a7:73:32:
ac:8c:32:29:55:8b:28:4f:17:9d:ec:8a:7c:63:6e:a4:f2:25:
ef:0e:3a:d8:01:35:32:04:f2:08:24:3c:6d:04:92:53:28:0a:
89:14:0a:03:19:6a:94:b2:7b:52:9b:4a:e2:f7:25:fb:0c:9e:
fd:cf:bb:c2:83:53:cf:2b:11:c9:ae:84:d2:7b:5a:3a:3d:61:
f0:96:7e:b9:45:f2:fe:8d:76:e4:f0:74:f0:c6:6b:80:a5:a2:
b1:40:e3:b6:5d:c7:cd:06:91:07:0c:36:56:28:57:4b:54:89:
9c:2e:25:9e:6f:b4:4c:dd:f8:7e:b8:66:f1:fe:ab:31:4c:e2:
c6:f5:d3:e8:f2:37:42:c5:74:cb:e6:fa:3c:c6:90:85:92:85:
f4:26:dc:19:cc:f4:70:9d:3a:8c:64:7f:54:cc:0d:ec:e0:56:
d2:2b:69:81:a7:77:6a:df:a3:83:e6:5e:4e:89:5c:1c:35:ca:
48:56:ed:03:ed:a2:32:b7:22:9b:27:97:a3:42:04:53:66:6f:
a9:56:b5:0a:07:e1:97:5e:c1:d7:61:f9:ff:be:58:ac:5c:38:
46:f9:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:40 2025 by rpki-client