Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
File: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft (raw, json)
Hash identifier: 1myHjKp8fxovg1B7bzJl41NswHvGijkqcUlJ1DJUKBQ=
Subject key identifier: 48:F4:74:D5:69:3C:0E:1A:7E:0F:4F:F1:45:47:2B:07:6B:28:97:C9
Authority key identifier: 4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Certificate issuer: /CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Certificate serial: 6A1CD50C752D061158F853957542B4E9A68F234C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
Manifest number: C3
Signing time: Thu 24 Jul 2025 09:40:58 +0000
Manifest this update: Thu 24 Jul 2025 09:35:58 +0000
Manifest next update: Fri 25 Jul 2025 10:40:58 +0000
Files and hashes: 1: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl (hash: A/gmm63yCjPGgpjDUhNuJGR8EHVcuWs28hmNffrsHNw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1c:d5:0c:75:2d:06:11:58:f8:53:95:75:42:b4:e9:a6:8f:23:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Validity
Not Before: Jul 24 09:35:58 2025 GMT
Not After : Jul 25 10:40:58 2025 GMT
Subject: CN=48F474D5693C0E1A7E0F4FF145472B076B2897C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:9c:62:f8:d1:6c:a2:5a:0a:9f:15:7a:b0:
f1:46:c5:65:46:03:80:64:2d:c9:9b:b3:a7:da:ed:
1f:44:a3:18:0d:69:11:ce:51:36:92:ff:43:58:5d:
4c:86:5d:69:4b:52:bf:f3:a3:52:c2:c6:b1:08:d5:
cd:11:2b:de:a0:23:1d:b5:06:0b:97:a5:cf:0b:6e:
7e:80:0f:88:63:13:fd:ca:66:3f:c1:1e:a2:06:8f:
de:ac:ab:bb:39:b1:6f:a2:f1:89:7e:1f:1f:ea:6b:
68:79:51:56:f5:dc:d5:08:eb:bd:0f:c0:c5:d1:89:
60:91:c6:fd:04:3b:66:2d:9e:2a:5b:50:57:ae:e6:
2e:52:7c:b6:18:22:62:a1:7d:1d:3f:ea:33:40:f1:
92:0f:b0:56:90:ef:f7:2f:cc:c8:15:e3:da:c8:ff:
67:47:3b:1d:c3:e0:b4:cd:4d:12:4b:6c:6f:73:19:
d0:8b:83:ab:32:6a:9a:34:0e:26:71:48:cc:bb:11:
8d:2c:0e:85:b1:d9:60:b3:4f:81:fe:46:f4:09:ec:
a1:46:f9:08:e1:91:92:69:1c:12:4b:3a:39:35:0f:
d1:c8:3a:e2:eb:dd:9e:fa:2a:d0:2a:04:b1:6b:d8:
76:39:f4:84:f2:50:ac:97:4d:d5:44:1b:a9:46:5a:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:74:D5:69:3C:0E:1A:7E:0F:4F:F1:45:47:2B:07:6B:28:97:C9
X509v3 Authority Key Identifier:
keyid:4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:11:80:80:0a:6c:a3:36:62:ed:5e:34:89:2d:2e:63:49:00:
60:8e:e8:74:da:c9:7c:6f:01:d5:00:b9:d0:f7:b0:a5:01:68:
00:b9:71:d3:65:a7:2d:4e:90:7e:53:cc:21:a1:52:51:d6:43:
88:fb:f1:ec:19:13:dd:8e:62:b2:da:46:05:80:c5:57:6a:d0:
b4:2d:7d:43:19:19:da:60:e1:08:14:46:18:83:ce:0e:df:4e:
b9:cd:d5:ec:0b:f6:42:2a:a2:6b:3a:ac:52:5c:a5:d2:fb:0a:
c2:af:e9:e8:f7:98:17:c6:58:0f:a3:d5:fd:18:f9:81:da:b3:
43:1c:38:cc:74:6e:3b:ae:8b:c2:32:e7:06:09:2c:0f:ab:3e:
8e:26:86:82:c1:df:5a:2f:e7:89:0d:ce:37:c9:c1:9f:37:fb:
81:8d:d0:ee:e4:39:5f:c9:bd:f9:1a:23:45:df:59:ee:69:e5:
08:b4:6f:9d:ae:f9:fb:98:0a:8e:20:e4:af:5a:6c:62:49:39:
21:4d:4e:ef:55:0b:4b:07:ee:94:de:e3:09:7a:d2:23:19:52:
5a:5c:e2:38:69:1b:a3:c0:27:ce:bd:06:9a:24:f2:3c:be:a3:
a1:51:89:81:f4:62:29:98:59:0e:0f:f4:8e:a4:be:5b:15:41:
83:59:07:47
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUahzVDHUtBhFY+FOVdUK06aaPI0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGM2ZWE1YTNjNTNiZWYyZTY1MTcwYzAzN2M0NDUxY2Zh
NzhlZjQ1ODAeFw0yNTA3MjQwOTM1NThaFw0yNTA3MjUxMDQwNThaMDMxMTAvBgNV
BAMTKDQ4RjQ3NEQ1NjkzQzBFMUE3RTBGNEZGMTQ1NDcyQjA3NkIyODk3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gJxi+NFsoloKnxV6sPFGxWVG
A4BkLcmbs6fa7R9EoxgNaRHOUTaS/0NYXUyGXWlLUr/zo1LCxrEI1c0RK96gIx21
BguXpc8Lbn6AD4hjE/3KZj/BHqIGj96sq7s5sW+i8Yl+Hx/qa2h5UVb13NUI670P
wMXRiWCRxv0EO2YtnipbUFeu5i5SfLYYImKhfR0/6jNA8ZIPsFaQ7/cvzMgV49rI
/2dHOx3D4LTNTRJLbG9zGdCLg6syapo0DiZxSMy7EY0sDoWx2WCzT4H+RvQJ7KFG
+QjhkZJpHBJLOjk1D9HIOuLr3Z76KtAqBLFr2HY59ITyUKyXTdVEG6lGWvqpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUSPR01Wk8Dhp+D0/xRUcrB2sol8kwHwYDVR0j
BBgwFoAUTG6lo8U77y5lFwwDfERRz6eO9FgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjY3NDY5MDEtMjNkMy00MzAxLWIyOGQtOGIwOTgyYjA2
YzA4LzAvNEM2RUE1QTNDNTNCRUYyRTY1MTcwQzAzN0M0NDUxQ0ZBNzhFRjQ1OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RHNmxvOFU3N3k1bEZ3d0RmRVJSejZl
TzlGZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iNjc0NjkwMS0y
M2QzLTQzMDEtYjI4ZC04YjA5ODJiMDZjMDgvMC80QzZFQTVBM0M1M0JFRjJFNjUx
NzBDMDM3QzQ0NTFDRkE3OEVGNDU4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRGAgApsozZi7V40iS0u
Y0kAYI7odNrJfG8B1QC50PewpQFoALlx02WnLU6QflPMIaFSUdZDiPvx7BkT3Y5i
stpGBYDFV2rQtC19QxkZ2mDhCBRGGIPODt9Ouc3V7Av2QiqiazqsUlyl0vsKwq/p
6PeYF8ZYD6PV/Rj5gdqzQxw4zHRuO66LwjLnBgksD6s+jiaGgsHfWi/niQ3ON8nB
nzf7gY3Q7uQ5X8m9+RojRd9Z7mnlCLRvna75+5gKjiDkr1psYkk5IU1O71ULSwfu
lN7jCXrSIxlSWlziOGkbo8Anzr0GmiTyPL6joVGJgfRiKZhZDg/0jqS+WxVBg1kH
Rw==
-----END CERTIFICATE-----
Generated at Thu Jul 24 11:53:45 2025 by rpki-client