Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier: Lpjdxuh6ny6deqxT7+4Ej7ZGaXZlI1xWGoLBpdaPBlE=
Subject key identifier: AC:90:3E:A0:88:25:DD:A4:FF:90:ED:92:D2:F3:11:48:5E:71:C9:82
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 0A2981A9734B56658120DFFC35BDDE5FDE536145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number: 02D6
Signing time: Wed 23 Jul 2025 00:17:01 +0000
Manifest this update: Wed 23 Jul 2025 00:12:01 +0000
Manifest next update: Thu 24 Jul 2025 00:48:01 +0000
Files and hashes: 1: 3138352e33312e3230322e302f32342d3234203d3e203231383430.roa (hash: Kajayyoa2dzx1Wy8xnY0CxCsWP+YAOcNiSJVzn+7fM4=)
2: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: ecU1ZSrYs8PamYhbcwk9LE2UwVscHm6qmwrHfrdWWaA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 00:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:29:81:a9:73:4b:56:65:81:20:df:fc:35:bd:de:5f:de:53:61:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Jul 23 00:12:01 2025 GMT
Not After : Jul 24 00:48:01 2025 GMT
Subject: CN=AC903EA08825DDA4FF90ED92D2F311485E71C982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:3f:4f:f6:da:33:e1:09:70:bb:0f:10:0d:
09:54:c4:26:a9:25:6d:78:2a:3f:f9:83:88:66:3f:
1e:9b:43:64:95:31:3e:62:9b:b4:09:81:da:48:b0:
a6:64:da:08:78:75:5a:92:d7:aa:8d:f2:f5:ee:0e:
1f:14:62:2a:8a:ed:fa:31:79:a2:ea:5f:1f:49:c6:
c3:0b:50:6b:87:49:7d:38:a8:6c:73:02:14:50:c8:
e7:60:59:5a:b5:92:2d:9a:8f:1e:6f:0a:22:6e:2c:
eb:b2:23:22:3c:48:94:2f:81:84:eb:7e:69:72:aa:
63:a7:62:24:cd:d5:90:cc:79:4c:ee:d4:77:e7:a4:
4a:71:c6:37:84:0d:d6:9f:7b:cb:67:c4:a7:c8:65:
7c:1b:65:88:7d:aa:0b:a0:13:a4:30:bc:56:75:49:
23:f3:8f:7e:f9:41:99:e0:9e:6b:87:29:68:f1:4e:
95:0c:b8:32:4a:af:98:78:e4:95:12:a0:fa:a6:1c:
1a:f5:36:49:d9:9e:36:d1:15:19:ac:35:ba:05:fd:
2b:11:7a:ab:ee:30:8e:c7:78:68:17:4d:96:b9:3a:
87:0b:0a:9d:f1:af:73:98:95:95:98:40:60:75:a3:
2e:c5:5b:49:98:ae:fc:89:ad:33:88:5b:4e:ab:ed:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:90:3E:A0:88:25:DD:A4:FF:90:ED:92:D2:F3:11:48:5E:71:C9:82
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:bf:46:ed:65:b6:25:ed:74:1e:4d:a5:ce:aa:44:c8:db:
7f:c9:c2:a8:b2:39:17:1e:b2:74:ed:45:3b:54:55:cc:e9:6e:
53:fa:86:d8:a3:31:2f:64:cc:a6:d3:79:02:19:2a:40:bf:57:
be:4e:54:24:65:bc:5c:8a:29:e9:40:55:6a:97:eb:56:44:3a:
43:6d:6b:e2:2f:32:61:51:6d:bd:c3:de:b8:f8:09:9d:cf:fa:
73:46:77:5b:83:7b:35:a2:f3:57:46:9b:96:5c:8f:7c:f6:41:
a1:d5:86:6e:1a:d2:47:c9:e8:ad:17:e3:97:23:83:70:81:b0:
93:74:8d:78:1d:d5:ed:31:8c:71:8d:28:cb:0e:84:10:c9:bb:
e4:8f:04:c1:15:5a:81:68:1b:72:35:05:8c:8d:15:26:36:33:
fe:e6:29:9e:60:03:d6:79:cb:4b:7d:e6:bc:fd:c0:71:c9:a6:
21:e6:0f:32:bc:9d:f2:72:0e:c1:53:a8:7f:e3:da:7d:91:8f:
0e:d6:9b:8b:73:c0:28:86:43:4a:e3:96:ba:98:e5:45:42:09:
33:dc:48:c3:91:35:3a:17:d1:e4:5d:7b:53:c7:2e:78:75:f3:
5c:65:d3:9d:3b:18:5a:1b:ca:9c:b1:e2:f5:d4:cf:c6:3c:ae:
34:7a:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:01:11 2025 by rpki-client