Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
File: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft (raw, json)
Hash identifier: ytPN8W7Nsy3tJxlEnZBcEer8dBKsu9qu+P34HyOMFT0=
Subject key identifier: AE:A3:4D:86:7B:DE:85:D3:EC:50:8A:F7:1B:72:20:7A:BC:95:33:1A
Authority key identifier: 4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Certificate issuer: /CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Certificate serial: 63AF1205CDCBABACF4E82C59F248C414A6EC9868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
Manifest number: C2
Signing time: Wed 23 Jul 2025 14:45:58 +0000
Manifest this update: Wed 23 Jul 2025 14:40:58 +0000
Manifest next update: Thu 24 Jul 2025 17:37:58 +0000
Files and hashes: 1: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl (hash: MbHkPWap8fCqK5I6rg6yPJjlPHFoRATW0PpfiKAQQDo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:af:12:05:cd:cb:ab:ac:f4:e8:2c:59:f2:48:c4:14:a6:ec:98:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Validity
Not Before: Jul 23 14:40:58 2025 GMT
Not After : Jul 24 17:37:58 2025 GMT
Subject: CN=AEA34D867BDE85D3EC508AF71B72207ABC95331A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:ab:fb:26:aa:f3:f0:33:85:4e:5f:b9:13:
0d:c9:87:aa:a3:0e:a2:da:a6:72:fd:7f:1c:c3:c7:
61:c7:a5:ec:f3:4a:20:ef:d3:57:45:10:05:19:da:
97:4e:6f:fe:4b:aa:ed:2e:30:6b:66:0e:38:42:c1:
72:08:3a:19:f0:11:dd:60:1d:15:3a:16:d9:9a:f8:
7f:cc:ab:44:4a:32:3c:e6:51:16:f3:bf:50:00:8f:
01:28:3d:1b:4e:3c:8a:2f:2b:3e:33:c0:d2:85:81:
54:85:84:08:16:dd:df:5e:b1:f4:28:ed:d0:14:b5:
cb:24:37:60:df:4a:27:2c:47:02:60:d9:db:73:f9:
b0:8c:1d:11:d3:b0:42:12:48:ed:3c:52:28:e0:2e:
79:18:8a:5b:47:e0:e7:fd:a0:75:9a:cb:e0:af:e3:
5d:c0:3f:f6:86:bf:79:c9:db:f1:ad:35:bd:0c:25:
62:c2:a3:ef:f6:70:3a:dc:81:24:d0:b8:b7:a2:83:
33:7d:0c:76:7f:58:d6:63:74:b1:44:95:ea:5e:62:
6d:a1:ec:a6:14:81:fe:a5:f0:84:4c:73:9b:b2:1a:
51:33:7f:4f:e8:9f:71:5a:4b:af:5b:77:f4:83:52:
72:21:80:81:6d:2a:7a:06:20:48:7e:80:3f:15:6a:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:4D:86:7B:DE:85:D3:EC:50:8A:F7:1B:72:20:7A:BC:95:33:1A
X509v3 Authority Key Identifier:
keyid:4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:84:96:e8:a3:80:49:b3:86:d3:30:0d:a0:7d:a8:c6:0b:f2:
d1:23:bc:09:1e:7e:86:b0:06:42:a0:73:3b:60:4e:4d:eb:7b:
1e:6c:bb:71:43:06:d8:2c:f1:11:bb:2f:6e:9f:84:91:b0:0a:
15:85:12:8a:27:8c:bd:c5:8c:89:52:07:1d:e9:94:8f:70:fe:
3c:fb:01:7c:76:50:b4:8d:b2:34:35:86:9e:6e:26:93:16:42:
9f:95:55:78:54:07:11:e0:b3:6d:a3:f9:e0:62:6d:d7:0f:b6:
41:1d:d5:7a:30:dc:30:45:8f:8f:bf:be:07:2d:87:35:f5:d3:
e7:3e:26:cd:0a:42:dc:0a:22:6d:68:4e:3f:d2:72:1e:26:54:
fe:fe:e3:fc:fa:8b:b6:41:20:dd:04:2c:b8:c5:dc:da:bd:78:
27:4e:34:2d:b7:26:4f:25:06:92:fc:b2:62:8c:2d:e2:dd:35:
cb:37:bb:36:87:57:ee:ca:1b:0f:08:91:1c:21:77:23:2c:7a:
22:d6:d8:57:8a:64:ac:3b:a0:7c:b4:c6:15:18:ef:47:79:70:
9d:59:86:fa:d9:f7:6a:94:4e:17:f5:c1:d6:fd:3d:64:15:b1:
54:f8:ad:c1:31:d8:65:f0:42:f1:0e:56:ea:f8:5d:4a:98:84:
5e:a5:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:04:45 2025 by rpki-client