Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json)
Hash identifier: yu6Zk8mUj2dGFVoiWDam7NbuEX5Qvrf3RgoSvgpvh2U=
Subject key identifier: 6A:8A:82:D9:1A:75:7B:41:47:37:33:79:0C:F6:26:AB:2B:5C:87:15
Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Certificate serial: 38F8318FDC0BF7F2999F1FEEDC4CA2509AE74037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
Manifest number: 05
Signing time: Sat 19 Jul 2025 23:57:49 +0000
Manifest this update: Sat 19 Jul 2025 23:52:49 +0000
Manifest next update: Mon 21 Jul 2025 00:57:49 +0000
Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: RZXaK5FcE+KWQ9boWqbsRVHEXcNBFmNh6w/YYxCwp9c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 00:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f8:31:8f:dc:0b:f7:f2:99:9f:1f:ee:dc:4c:a2:50:9a:e7:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Validity
Not Before: Jul 19 23:52:49 2025 GMT
Not After : Jul 21 00:57:49 2025 GMT
Subject: CN=6A8A82D91A757B41473733790CF626AB2B5C8715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:e0:7f:55:70:43:95:25:1c:1e:1a:28:90:
3c:1e:55:2c:28:f1:d4:b9:f6:8a:bc:a0:fc:26:fc:
49:37:01:b8:4e:72:eb:42:98:15:02:74:c5:73:df:
3c:d4:32:c4:10:29:23:94:e3:12:02:bb:06:e6:da:
0b:56:9f:b9:89:e3:90:1c:e4:4d:c5:f0:96:1d:72:
d1:aa:ae:d0:f3:57:5b:3e:3f:e9:e4:87:85:ac:51:
50:71:3b:b9:c1:ed:49:34:9d:0f:51:16:7d:c8:24:
6a:0a:d7:0e:cc:76:49:89:4c:73:c0:5c:d9:8d:71:
b9:b8:73:82:6c:ec:a1:f9:ca:49:51:0d:52:85:67:
b7:e2:8e:34:a8:16:58:fd:fe:30:f0:42:99:52:d1:
62:f4:e3:ca:3a:00:40:d1:c3:a9:3a:1a:12:38:65:
f5:b2:d8:83:ab:52:dc:18:77:70:53:41:89:5a:73:
fb:e0:0a:87:fb:e2:1d:d9:37:53:02:60:e9:53:c0:
f9:99:c8:de:87:79:71:1d:14:fe:b3:87:b4:40:49:
f1:d4:86:94:f4:0b:93:e3:0d:14:44:ec:34:a0:8b:
d3:0a:57:dc:2a:ca:fb:89:dd:a1:8e:5c:f0:6b:d7:
32:7b:a2:5a:e3:d5:12:86:57:0c:cd:1f:d2:54:f0:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:82:D9:1A:75:7B:41:47:37:33:79:0C:F6:26:AB:2B:5C:87:15
X509v3 Authority Key Identifier:
keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:21:55:44:e9:6f:f7:c3:79:04:d3:8d:7e:a2:d0:ed:ac:39:
d9:0f:b0:21:ca:5b:12:9e:f3:1e:01:b6:6a:70:46:52:9e:68:
fa:aa:2c:72:ad:6c:19:f9:6b:d2:54:ff:59:55:39:a5:8c:e0:
0c:f8:7c:75:cd:a4:aa:98:ee:43:c3:1d:ab:0e:18:83:1f:56:
f8:82:ad:64:50:06:91:0d:04:35:36:87:79:46:21:6f:db:f8:
35:e1:ca:55:81:67:6c:da:c6:77:70:d6:5e:f6:76:d7:47:81:
73:64:d7:17:e4:ac:92:b1:d7:17:e5:5f:d2:01:20:24:ea:89:
ae:c8:1f:6b:67:e5:c7:91:85:08:33:f2:a4:41:b9:6a:29:28:
82:40:15:50:39:34:ce:e9:fd:64:2d:81:4d:0c:13:72:23:54:
e3:e7:6d:63:35:96:44:53:90:01:8c:18:39:34:4f:f2:4d:ca:
89:6f:d1:a3:3c:cd:cb:58:fb:ea:c3:57:a2:d5:c3:06:5b:2a:
e3:34:1e:2b:97:85:f8:0e:db:f8:37:81:ed:89:ef:6b:15:ff:
07:de:23:c9:f9:aa:32:0e:21:14:39:33:e6:3c:ae:d2:a9:ea:
e5:3b:e6:62:08:30:e7:15:b0:99:2a:a0:be:f7:8a:80:81:64:
cf:53:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:38 2025 by rpki-client