Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: OdxsuJI/ZGkeMNUyirqi/42qFeL0i8gnXk1wtTABRF8=
Subject key identifier: 94:D8:A6:A1:E0:B5:AF:7D:60:1F:D2:9B:47:8B:3A:96:85:34:CF:B6
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 1E697AE115A920170058BB1AEAC682599A73CD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 0234
Signing time: Sun 10 Aug 2025 15:35:55 +0000
Manifest this update: Sun 10 Aug 2025 15:30:55 +0000
Manifest next update: Mon 11 Aug 2025 17:52:55 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: dbzXU4WLxS3CCb0CgBe3lrHR9bvlVZlKtEiyPSGwQpI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:69:7a:e1:15:a9:20:17:00:58:bb:1a:ea:c6:82:59:9a:73:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Aug 10 15:30:55 2025 GMT
Not After : Aug 11 17:52:55 2025 GMT
Subject: CN=94D8A6A1E0B5AF7D601FD29B478B3A968534CFB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:85:0e:f0:5c:3b:d5:ad:50:b4:50:f7:68:
96:3e:5e:4b:bf:43:cb:d2:a9:21:b0:fd:0a:80:27:
fb:fe:b3:9b:e0:33:79:42:c9:14:a7:a7:fc:0c:10:
9e:36:61:85:fb:d6:e3:dc:86:73:2f:ca:b2:16:10:
9a:29:0f:b5:43:fc:4f:92:cd:45:9d:0e:7d:0a:ab:
69:f9:39:4e:fa:d8:e0:41:ae:de:a6:5d:97:c8:1b:
1e:11:62:6e:8c:4d:db:9d:0c:be:96:16:b4:67:5f:
44:a8:98:a8:1e:37:34:c6:be:76:1c:53:d1:11:70:
6a:97:d7:18:30:41:ee:97:13:3c:a3:f0:b0:cd:92:
33:a6:e0:cd:fe:90:40:64:24:07:d0:43:d2:37:3b:
39:b4:fe:4d:eb:90:57:3b:8f:8e:b0:22:2f:2c:96:
0f:5e:07:82:cd:2c:f0:52:42:89:05:81:ad:d6:5b:
ca:20:ef:80:37:24:a1:29:05:f8:42:7e:23:bf:02:
38:7c:7e:11:c7:f8:42:6f:53:04:09:33:26:ce:59:
ca:6a:c2:09:c2:41:c7:14:18:c5:ec:27:e0:39:ef:
73:3e:b3:3a:4a:41:73:d7:fb:1c:00:5a:42:c2:73:
28:c3:04:0a:b1:5d:92:88:44:e6:8f:95:7c:c2:85:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:A6:A1:E0:B5:AF:7D:60:1F:D2:9B:47:8B:3A:96:85:34:CF:B6
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:24:2c:f2:f1:8b:d0:46:e5:0d:97:a0:ae:70:a3:de:4e:5d:
13:0d:31:7d:3c:c2:0d:76:80:37:a5:c7:1b:4f:6d:b4:aa:af:
a2:56:a9:75:f0:df:e8:54:18:f4:16:d6:5d:04:c9:be:81:c2:
cd:69:30:c9:94:a8:4b:96:20:88:c3:8e:d7:5e:5e:d1:60:87:
f5:50:39:27:b4:46:72:12:85:04:c0:56:4a:aa:a5:25:81:44:
5d:9a:ed:b8:da:b3:c9:fd:89:ca:29:09:48:76:f3:00:a7:d9:
1b:bd:17:ab:18:88:93:11:b8:85:98:2b:81:4b:62:be:25:48:
a5:0a:fd:f1:4a:ce:e6:74:41:c8:8f:71:54:1d:09:c1:6f:dc:
f5:c7:f8:e5:0f:79:2c:a3:92:15:76:f6:fd:0d:b8:8f:5a:d2:
79:1e:e0:4a:bf:23:c3:82:46:c1:86:73:3e:2b:77:1a:c8:b8:
f8:69:73:a9:b1:ee:7c:61:88:f3:8b:c1:82:11:56:58:a5:da:
81:da:20:af:4c:d8:f6:e3:af:b4:04:66:06:36:ab:33:63:b4:
bc:73:43:a1:ec:5f:55:de:eb:a9:51:b3:ae:8f:3d:9a:28:fc:
52:d4:0c:5e:84:8c:da:59:3f:bb:de:95:84:c0:d7:1b:67:d0:
76:d9:c5:30
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHml64RWpIBcAWLsa6saCWZpzzYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjYWQwZWZjYmUzMDViNDQ5NGVkMjc0N2JiNGY4MmY0
M2FjOGM4MTAeFw0yNTA4MTAxNTMwNTVaFw0yNTA4MTExNzUyNTVaMDMxMTAvBgNV
BAMTKDk0RDhBNkExRTBCNUFGN0Q2MDFGRDI5QjQ3OEIzQTk2ODUzNENGQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQ4UO8Fw71a1QtFD3aJY+Xku/
Q8vSqSGw/QqAJ/v+s5vgM3lCyRSnp/wMEJ42YYX71uPchnMvyrIWEJopD7VD/E+S
zUWdDn0Kq2n5OU762OBBrt6mXZfIGx4RYm6MTdudDL6WFrRnX0SomKgeNzTGvnYc
U9ERcGqX1xgwQe6XEzyj8LDNkjOm4M3+kEBkJAfQQ9I3Ozm0/k3rkFc7j46wIi8s
lg9eB4LNLPBSQokFga3WW8og74A3JKEpBfhCfiO/Ajh8fhHH+EJvUwQJMybOWcpq
wgnCQccUGMXsJ+A573M+szpKQXPX+xwAWkLCcyjDBAqxXZKIROaPlXzChW9LAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUlNimoeC1r31gH9KbR4s6loU0z7YwHwYDVR0j
BBgwFoAUxMrQ78vjBbRJTtJ0e7T4L0OsjIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4
M2U3LzAvQzRDQUQwRUZDQkUzMDVCNDQ5NEVEMjc0N0JCNEY4MkY0M0FDOEM4MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNclE3OHZqQmJSSlR0SjBlN1Q0TDBP
c2pJRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kN2U0NTkyZS0y
M2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvMC9DNENBRDBFRkNCRTMwNUI0NDk0
RUQyNzQ3QkI0RjgyRjQzQUM4QzgxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyQs8vGL0EblDZegrnCj
3k5dEw0xfTzCDXaAN6XHG09ttKqvolapdfDf6FQY9BbWXQTJvoHCzWkwyZSoS5Yg
iMOO115e0WCH9VA5J7RGchKFBMBWSqqlJYFEXZrtuNqzyf2JyikJSHbzAKfZG70X
qxiIkxG4hZgrgUtiviVIpQr98UrO5nRByI9xVB0JwW/c9cf45Q95LKOSFXb2/Q24
j1rSeR7gSr8jw4JGwYZzPit3Gsi4+GlzqbHufGGI84vBghFWWKXagdogr0zY9uOv
tARmBjarM2O0vHNDoexfVd7rqVGzro89mij8UtQMXoSM2lk/u96VhMDXG2fQdtnF
MA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:34 2025 by rpki-client