Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: pg2i2WtiJ5xUSXBd2V97yOPh0OKLKFddthGQ4h1JE+Y=
Subject key identifier: 39:23:86:97:51:24:A4:F6:82:77:1E:DD:A2:A0:47:33:6F:BD:02:A7
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 541939BF1EFCEB68592D52E2A4BD3409B4AA7778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 02A6
Signing time: Tue 04 Nov 2025 00:38:08 +0000
Manifest this update: Tue 04 Nov 2025 00:33:08 +0000
Manifest next update: Wed 05 Nov 2025 03:27:08 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: 1eFPY957mrPZAZr0Bvmyn7mI/dSgb4IsOZxWjLu+jBs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:19:39:bf:1e:fc:eb:68:59:2d:52:e2:a4:bd:34:09:b4:aa:77:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Nov 4 00:33:08 2025 GMT
Not After : Nov 5 03:27:08 2025 GMT
Subject: CN=392386975124A4F682771EDDA2A047336FBD02A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:2f:ee:28:4d:72:43:3e:2e:cc:cc:d2:b8:
9c:26:3a:90:5a:f7:98:b9:bb:fa:ab:6f:02:de:1b:
7d:35:a4:4a:27:0e:23:c7:24:c2:c1:c7:3b:95:94:
a7:38:67:7c:0d:7e:26:7e:76:1b:1a:92:4b:82:eb:
3a:99:d6:de:73:6d:84:9f:0f:99:51:8f:ed:2d:4d:
93:0c:3c:01:99:04:71:90:7d:b6:09:bf:29:7b:05:
bf:ff:a9:09:71:fe:d2:66:8f:51:94:f8:6f:f9:ff:
ef:c8:3a:da:88:a0:c7:ec:48:1b:03:2e:4d:08:f0:
05:6b:10:3f:33:74:27:69:a3:f1:9a:e8:52:77:67:
4a:43:49:be:3a:ff:92:a7:ec:c9:6f:06:46:23:cf:
2a:9e:75:53:e6:5b:40:75:62:69:cc:a5:c9:49:6c:
c1:fa:c9:d1:ab:82:97:aa:94:a6:dc:99:b2:89:a6:
4c:94:8d:78:5f:14:3d:53:66:46:32:dc:36:95:2f:
4a:28:bf:81:58:10:e2:ec:44:ee:7e:8b:a4:be:59:
c5:b4:3f:ee:ca:e4:51:63:32:08:cd:2e:6e:a7:b0:
6b:57:d4:41:fc:df:b1:c7:fc:8b:35:0c:67:ce:a2:
b8:cd:4a:bb:f1:f9:88:d3:23:0b:c1:18:81:e1:39:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:86:97:51:24:A4:F6:82:77:1E:DD:A2:A0:47:33:6F:BD:02:A7
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:88:ad:34:7f:68:65:74:a5:0c:f6:22:c5:2d:a7:8a:db:12:
1a:41:4d:67:8b:09:91:07:e0:47:ad:7e:4e:ca:77:a5:ba:20:
96:38:fd:02:f5:ef:f9:d0:00:ef:0d:6f:83:fe:72:06:90:e2:
16:6f:bb:a2:3d:ce:a0:bc:b3:d1:07:f8:b9:ce:71:c1:b4:ec:
cc:0a:0e:2a:65:ab:7a:74:5a:cb:10:85:9f:4e:9f:53:64:26:
ed:4d:88:75:e1:2d:9e:0d:08:49:54:40:0e:23:ba:20:2d:c4:
42:cf:b3:7c:6b:14:c0:9d:a9:1b:2b:ba:8b:20:78:d5:c9:48:
1b:0b:f1:75:03:ac:90:3a:93:22:3a:8b:95:82:6e:1b:f8:cc:
fb:a2:c0:1f:ab:2c:40:d7:20:f3:f0:87:aa:42:2d:19:97:4f:
69:f2:8b:5d:3f:da:4e:dd:67:e8:85:68:2e:1d:5e:ce:e6:9c:
da:d9:be:0c:19:7b:d2:96:c7:b4:e0:ae:92:5f:a7:1e:a2:ea:
f0:f1:63:f8:f7:6b:c7:01:19:ff:56:31:c0:d3:7b:b6:f4:92:
71:c8:07:f3:4a:8d:88:a0:5a:dd:0c:e9:8f:ef:37:bf:c6:bc:
b4:25:05:65:d8:24:53:c3:96:39:9c:6c:48:3f:48:38:64:03:
c4:79:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:01:58 2025 by rpki-client