Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
File: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft (raw, json)
Hash identifier: Pyhgi8e1Vyc03+oRgLEXFzve4AFHLI+k6uSVi3+WWyQ=
Subject key identifier: 80:B4:4C:17:B2:E2:A1:60:38:98:97:24:90:5F:FE:B5:0B:70:3C:D1
Authority key identifier: 59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4
Certificate issuer: /CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4
Certificate serial: 0D0EED9AED4994E2DCB639102D2FC0568657114C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
Manifest number: 10
Signing time: Tue 11 Nov 2025 06:29:22 +0000
Manifest this update: Tue 11 Nov 2025 06:24:22 +0000
Manifest next update: Wed 12 Nov 2025 07:51:22 +0000
Files and hashes: 1: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl (hash: 5hU5HH848lY1c6d8Fqea13xtOIctjJ3e9qXpBy6v08U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0e:ed:9a:ed:49:94:e2:dc:b6:39:10:2d:2f:c0:56:86:57:11:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4
Validity
Not Before: Nov 11 06:24:22 2025 GMT
Not After : Nov 12 07:51:22 2025 GMT
Subject: CN=80B44C17B2E2A16038989724905FFEB50B703CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:0c:be:0c:64:b5:93:34:78:f8:d0:b4:ef:
38:79:14:38:7b:61:0e:a2:dd:e6:05:d9:b0:b2:4b:
f7:1e:24:bb:d5:27:e4:61:3d:15:0c:2b:70:eb:94:
a9:73:11:37:49:1d:26:c9:aa:e8:74:68:a3:56:b7:
b8:6d:af:7e:9d:a5:a9:f7:43:7b:cd:db:50:96:bc:
54:61:7e:88:80:71:7f:8a:23:59:54:ab:69:da:6d:
f1:3c:22:44:74:da:17:09:88:c5:bf:73:e4:b5:3b:
0b:1d:15:c0:93:74:5c:50:ac:51:61:ff:2f:ff:84:
3a:c9:11:c6:ef:c3:f3:f8:a1:f7:6e:18:25:35:84:
25:ab:08:e3:9f:39:71:fc:04:59:a3:3e:17:90:c0:
85:c1:f6:b6:4c:43:ee:c7:ec:14:17:26:f6:b1:66:
b2:e8:d1:5c:e7:5a:5d:93:1d:8d:f8:03:fb:ef:d7:
62:71:ba:cc:c3:05:ee:da:e1:fd:ea:52:33:e6:6a:
ef:df:38:b8:3c:f9:67:ad:b4:0e:d7:48:10:1b:63:
8b:ed:b4:3d:49:63:d1:20:80:93:5b:63:ed:e1:9b:
75:e1:44:02:72:b0:7d:e6:b1:26:b5:9c:1e:c7:0b:
3c:86:18:cf:4d:8b:a1:f9:75:a3:01:7a:b8:cf:9a:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:4C:17:B2:E2:A1:60:38:98:97:24:90:5F:FE:B5:0B:70:3C:D1
X509v3 Authority Key Identifier:
keyid:59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:98:da:e1:a4:5e:18:ee:bc:39:d0:75:77:ac:82:13:68:5d:
4b:96:3f:02:04:38:6a:59:26:b7:92:bc:4f:cb:86:ba:8c:3d:
95:87:7c:61:c5:b9:78:7b:24:84:33:48:03:88:4e:70:70:8d:
ee:d4:03:f1:ab:49:37:93:e5:67:6f:7c:2a:9a:8f:45:29:95:
ae:32:bf:df:3e:13:09:d4:c0:54:ba:63:ba:92:e9:d4:c7:b3:
83:80:c5:5e:ae:c2:39:ba:2b:a1:77:df:57:e5:aa:5c:23:b1:
b2:85:03:36:f9:2b:f5:3b:26:8e:e0:e6:6c:53:0f:d1:b7:01:
8e:68:67:f4:78:eb:c4:80:66:6e:b3:bf:e3:94:90:84:eb:44:
b4:55:68:c6:3f:9a:e4:c3:72:c0:6b:8f:ef:6c:7f:3a:aa:01:
1d:03:d5:0b:2b:43:2a:75:05:86:fc:31:fc:a2:d0:02:cc:4b:
6c:77:d4:33:23:2c:27:53:0a:d6:7a:cf:bb:a8:76:03:c5:04:
17:d1:24:71:4e:cb:e3:28:31:f5:d2:ce:22:ec:0b:50:6b:49:
16:e2:57:b6:4b:fe:9f:9e:7a:a8:df:bb:bc:92:97:90:e7:c9:
40:1a:d6:93:61:2c:04:2d:ae:bd:16:7b:7f:a1:ad:fa:dc:0f:
62:31:25:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:23 2025 by rpki-client