Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier: L7f6RpwpYIstcijgn3tWwk37uPrIHTXF17thL2ytHeE=
Subject key identifier: 17:3E:AA:0F:B5:B3:0A:A8:53:A0:4F:0F:E4:2B:93:10:17:CA:57:7C
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 3D3EE30F3A6B2671E9272B1853B157CF7AFAB95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number: 038B
Signing time: Tue 22 Jul 2025 02:36:54 +0000
Manifest this update: Tue 22 Jul 2025 02:31:54 +0000
Manifest next update: Wed 23 Jul 2025 05:20:54 +0000
Files and hashes: 1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: 7kuJJXgS/9mFPMmYsuWRVjDAcMCT1zAoGh9h6xfmj8c=)
2: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: huwsUB31uBfbleT8W3liIVEEjjwoWiPQyT4oqqDXvCQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3e:e3:0f:3a:6b:26:71:e9:27:2b:18:53:b1:57:cf:7a:fa:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Jul 22 02:31:54 2025 GMT
Not After : Jul 23 05:20:54 2025 GMT
Subject: CN=173EAA0FB5B30AA853A04F0FE42B931017CA577C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:31:72:3d:af:c9:3f:da:46:78:3c:1f:81:
17:be:f7:7e:c5:f0:06:54:e4:b6:28:c5:6a:41:29:
26:e7:63:94:11:26:29:26:15:d2:11:d3:cb:41:46:
35:f5:05:fc:e4:23:0b:1e:f9:8a:14:6e:4b:fc:1e:
a9:29:ea:ec:6f:57:ab:5a:57:6d:f4:26:8c:3a:f6:
ab:c9:82:99:32:6e:e2:00:b0:85:e7:b5:03:80:94:
81:e5:46:93:e9:b7:22:63:11:a5:43:ee:33:e5:45:
ff:52:ec:9b:4f:c3:81:7c:da:f6:60:27:b2:6c:59:
dd:ba:88:bd:30:59:7a:58:12:53:43:6a:8f:61:f5:
ce:1e:15:75:d4:9d:ec:c4:81:7c:3f:b8:b7:7d:ee:
4b:1d:14:52:3f:27:8d:57:8f:db:11:37:d2:4f:09:
a4:c3:a6:68:91:26:50:ac:bd:72:82:bd:15:dd:cb:
9d:24:d1:21:b7:49:b5:32:f4:35:7a:d5:9c:e4:1d:
d1:0c:7a:56:d3:b2:c7:93:66:3d:00:e4:16:f6:8a:
7f:f0:68:a2:c8:93:c9:4c:af:5a:fc:e6:b7:3f:1b:
96:06:f4:c9:12:14:b1:23:64:33:3b:66:e9:ca:6a:
55:b8:8f:0b:09:9e:1d:46:17:c1:d8:f2:c1:20:03:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:AA:0F:B5:B3:0A:A8:53:A0:4F:0F:E4:2B:93:10:17:CA:57:7C
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:05:b8:e5:fc:0b:3d:70:4a:45:9d:90:20:89:02:f0:4c:73:
c4:99:2e:8a:da:77:ce:3b:50:e2:e1:77:2a:65:9e:8a:8b:8e:
c6:6a:e9:45:61:d8:44:78:10:8d:d8:ca:38:d1:96:b6:07:af:
05:59:d7:4e:fe:c8:b9:bc:69:74:20:4e:a2:18:ae:e1:85:14:
40:c4:74:2e:86:d1:d3:96:79:89:99:05:22:87:85:64:87:86:
8f:b6:88:bd:df:d9:45:0a:02:a3:c9:7a:bd:70:c1:58:97:1f:
87:bc:97:25:0e:3b:a7:62:57:6b:7d:89:23:ad:10:29:d0:ca:
5f:29:94:0f:04:03:04:70:ac:fa:77:6b:29:9b:a3:46:7d:74:
61:a9:a2:3d:aa:d4:f8:d3:28:2d:78:53:d4:e5:a0:29:08:ed:
8a:fd:5c:e3:6b:1b:36:88:27:b9:8c:7b:11:1f:84:e2:1f:70:
6f:e9:2e:f1:be:dc:3f:4c:84:86:c3:d1:09:bb:59:7c:97:4e:
50:40:03:79:a3:fe:64:6f:eb:ef:d3:e4:76:a8:62:82:5c:70:
e3:3d:2c:57:64:e9:76:fc:ee:dc:08:40:1c:c6:56:d0:dc:14:
72:69:96:ba:6f:5c:27:32:9b:f8:34:37:b6:d0:f3:6a:66:ae:
80:7c:c6:3e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPT7jDzprJnHpJysYU7FXz3r6uVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWRiOWYzZTZkOGU0YjU3YzQ5MzAxYWE2MjFlZjFmOTAz
ODllMDU3YTAeFw0yNTA3MjIwMjMxNTRaFw0yNTA3MjMwNTIwNTRaMDMxMTAvBgNV
BAMTKDE3M0VBQTBGQjVCMzBBQTg1M0EwNEYwRkU0MkI5MzEwMTdDQTU3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ9DFyPa/JP9pGeDwfgRe+937F
8AZU5LYoxWpBKSbnY5QRJikmFdIR08tBRjX1BfzkIwse+YoUbkv8Hqkp6uxvV6ta
V230Jow69qvJgpkybuIAsIXntQOAlIHlRpPptyJjEaVD7jPlRf9S7JtPw4F82vZg
J7JsWd26iL0wWXpYElNDao9h9c4eFXXUnezEgXw/uLd97ksdFFI/J41Xj9sRN9JP
CaTDpmiRJlCsvXKCvRXdy50k0SG3SbUy9DV61ZzkHdEMelbTsseTZj0A5Bb2in/w
aKLIk8lMr1r85rc/G5YG9MkSFLEjZDM7ZunKalW4jwsJnh1GF8HY8sEgA40DAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFz6qD7WzCqhToE8P5CuTEBfKV3wwHwYDVR0j
BBgwFoAU7bnz5tjktXxJMBqmIe8fkDieBXowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNmYTRhMmMtZTE0NS00MTRkLWE2MmYtMDlhM2Y5YjU3
NWZkLzAvRURCOUYzRTZEOEU0QjU3QzQ5MzAxQUE2MjFFRjFGOTAzODlFMDU3QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdibno1dGprdFh4Sk1CcW1JZThma0Rp
ZUJYby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZhNGEyYy1l
MTQ1LTQxNGQtYTYyZi0wOWEzZjliNTc1ZmQvMC9FREI5RjNFNkQ4RTRCNTdDNDkz
MDFBQTYyMUVGMUY5MDM4OUUwNTdBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgW45fwLPXBKRZ2QIIkC
8ExzxJkuitp3zjtQ4uF3KmWeiouOxmrpRWHYRHgQjdjKONGWtgevBVnXTv7Iubxp
dCBOohiu4YUUQMR0LobR05Z5iZkFIoeFZIeGj7aIvd/ZRQoCo8l6vXDBWJcfh7yX
JQ47p2JXa32JI60QKdDKXymUDwQDBHCs+ndrKZujRn10YamiParU+NMoLXhT1OWg
KQjtiv1c42sbNognuYx7ER+E4h9wb+ku8b7cP0yEhsPRCbtZfJdOUEADeaP+ZG/r
79Pkdqhiglxw4z0sV2Tpdvzu3AhAHMZW0NwUcmmWum9cJzKb+DQ3ttDzamaugHzG
Pg==
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:14:43 2025 by rpki-client