Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier: DLXZE3OUoiA9a1TEYCRyBZlA+9SyfggXwr8vEk18KM4=
Subject key identifier: 89:33:BD:BE:79:82:81:A5:5E:D0:50:C0:8E:40:7F:51:FC:3B:5D:4F
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial: 2DF3F47A66805A5EDC979967341B77C8D89B8387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number: 0340
Signing time: Tue 04 Nov 2025 11:57:06 +0000
Manifest this update: Tue 04 Nov 2025 11:52:06 +0000
Manifest next update: Wed 05 Nov 2025 15:51:06 +0000
Files and hashes: 1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: czvkXou6Bt0Hx1Bvc9Lzn85+RthIhw2mLTSOoFEApFM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f3:f4:7a:66:80:5a:5e:dc:97:99:67:34:1b:77:c8:d8:9b:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Validity
Not Before: Nov 4 11:52:06 2025 GMT
Not After : Nov 5 15:51:06 2025 GMT
Subject: CN=8933BDBE798281A55ED050C08E407F51FC3B5D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:32:ae:b8:ce:62:4f:52:be:74:69:f3:a2:
39:d9:69:5a:41:2f:3a:2e:30:61:61:44:4e:2e:ca:
55:14:ef:53:52:62:34:78:eb:a0:2e:39:fe:37:a3:
54:d4:89:2d:6d:7d:f2:d3:29:3a:7b:42:de:59:d8:
47:c7:0f:f7:51:9e:0b:cb:7d:84:2d:de:2a:bb:4d:
45:68:78:7d:1e:3b:9a:62:08:49:1f:bb:e1:5f:92:
0a:c5:76:02:a6:c9:0e:18:22:c7:cd:4c:6f:97:b3:
2e:15:2c:b5:68:bb:84:d4:d1:82:18:a2:b4:d7:61:
a8:58:bb:1f:78:a9:52:38:b1:a8:70:c8:1a:73:eb:
ed:25:32:e3:bf:44:ec:0a:f6:4d:8c:61:2a:eb:79:
4f:22:f3:bc:fb:cc:d3:95:46:47:c8:6f:40:99:85:
ec:bb:c5:79:ed:e4:15:aa:30:28:7f:4c:e2:01:20:
c2:a8:e5:b1:a0:f4:42:8c:ea:fc:98:60:bb:1c:10:
61:04:6a:96:df:e9:ff:3e:f4:b5:95:9a:6e:a2:e0:
08:4d:99:c5:6b:5a:5f:e5:6c:eb:47:10:af:01:f0:
06:5e:d8:9b:65:3a:16:20:af:d6:07:bf:53:0c:dc:
f4:70:0a:df:7f:43:b8:22:59:22:75:51:2e:cc:78:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:BD:BE:79:82:81:A5:5E:D0:50:C0:8E:40:7F:51:FC:3B:5D:4F
X509v3 Authority Key Identifier:
keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:df:59:66:fe:01:41:c9:12:a3:f5:82:41:37:a3:bf:e2:46:
f5:91:76:a5:3a:cc:81:b2:ff:c4:6e:e0:f0:40:df:70:d7:56:
1d:a4:97:d1:b4:20:ae:95:dc:a7:53:fe:48:32:90:c0:8d:d5:
65:3d:40:0a:d8:6e:97:4b:30:d9:8f:92:0d:37:1e:6a:66:a8:
44:4d:41:51:3a:e5:d8:36:6c:f3:e5:68:36:3a:05:29:65:39:
1d:33:91:8e:54:19:24:2a:46:b6:30:3f:b4:f4:15:76:cf:44:
ae:86:62:13:b2:db:35:99:dd:b2:0b:d4:58:04:d4:a8:43:7f:
9d:c1:9c:d8:40:17:44:f5:bf:40:cf:bd:d6:d1:a5:df:a7:f8:
e1:96:56:80:5e:c0:83:85:7b:27:83:ad:08:e1:75:c3:e6:07:
58:1b:8a:26:a8:ed:b1:70:7e:82:77:4b:fb:c2:98:3d:81:4e:
c5:da:8e:e9:cf:47:a6:08:80:61:27:fd:59:63:89:d4:77:92:
48:ca:f9:82:bb:22:d7:2d:25:db:bd:fb:a5:50:b9:d6:93:b8:
8b:84:f3:15:61:d2:40:91:23:e3:fa:ef:ff:5d:69:6c:34:cb:
42:37:f7:fb:36:60:d5:84:80:bb:78:20:e6:66:6d:d3:62:29:
ab:75:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:17 2025 by rpki-client