Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier: TrvwlPGntLWx9BHPf1WbApds99Ivxel9gaayj8jGw48=
Subject key identifier: 4C:58:4F:46:F2:94:D1:02:75:5F:FA:55:1D:B5:2E:B2:62:3F:D7:8F
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer: /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial: 0B071AC6603728AB883EF10A4C1377798B57B5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number: 02CB
Signing time: Tue 11 Nov 2025 06:51:24 +0000
Manifest this update: Tue 11 Nov 2025 06:46:24 +0000
Manifest next update: Wed 12 Nov 2025 07:25:24 +0000
Files and hashes: 1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: F5poogtI73m5PbKcWAA0zQDwP71L6mqwM9df16sFmv8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:07:1a:c6:60:37:28:ab:88:3e:f1:0a:4c:13:77:79:8b:57:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Validity
Not Before: Nov 11 06:46:24 2025 GMT
Not After : Nov 12 07:25:24 2025 GMT
Subject: CN=4C584F46F294D102755FFA551DB52EB2623FD78F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:95:ce:28:63:7a:7b:78:bb:35:e4:7e:96:
1d:a5:88:50:00:f6:de:89:51:10:05:c1:41:55:4b:
9c:6d:06:14:96:95:e9:99:f9:81:e2:bf:20:78:46:
83:f4:70:9b:06:3b:86:03:be:cc:19:18:2e:84:04:
4f:c8:7d:b8:48:e7:95:4a:e9:86:99:f1:af:9e:36:
cf:7c:86:65:13:7a:e4:85:49:be:04:b7:c5:2e:17:
7c:17:24:76:7d:ed:ea:17:4c:0e:67:42:24:6e:6c:
17:7c:e1:07:fb:a1:f9:2a:27:3c:fc:40:4b:27:f9:
25:85:db:9a:9f:ac:12:dd:c0:42:a9:4d:8a:40:b4:
21:96:f9:6c:8c:ce:16:a0:d2:46:f9:7b:4f:8b:75:
1d:93:fc:10:b7:ad:af:d7:ab:95:f7:32:e6:72:88:
c5:4f:50:d8:22:8a:b9:2d:b6:71:af:3f:83:da:e2:
df:33:ea:d9:a7:67:32:21:39:9c:3b:77:11:d2:3d:
df:07:39:08:94:fc:c4:ba:b6:98:65:2f:ad:eb:49:
c7:66:4a:08:5b:92:05:86:5a:8a:6f:17:3e:d1:f9:
de:c8:dd:cd:97:44:26:b1:96:9f:6d:64:b1:1a:0f:
33:bd:b1:a5:63:11:b7:d0:e5:ec:80:f5:c7:59:28:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:4F:46:F2:94:D1:02:75:5F:FA:55:1D:B5:2E:B2:62:3F:D7:8F
X509v3 Authority Key Identifier:
keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c1:75:f7:2d:2a:ed:61:b0:09:6e:f6:13:62:2c:eb:21:e6:
8e:19:ad:3c:d5:02:08:7a:7f:7f:09:57:58:4d:12:89:7b:ba:
a9:42:f1:68:99:8e:3c:b6:3a:5f:22:a5:dd:2b:ec:1c:66:1d:
75:0e:45:d1:89:98:cb:52:2b:78:0f:18:74:ff:4e:96:0a:a8:
fc:b8:16:81:ee:73:8e:83:93:c6:77:0a:06:f6:0c:b6:71:47:
39:b7:82:9d:a4:1c:01:a4:22:19:32:e5:5a:83:ec:0b:fe:d2:
70:99:35:b5:b2:58:b9:d4:f4:2c:da:f3:bd:f5:a8:ec:25:d7:
09:8e:7e:e5:e8:4a:d6:85:6b:c8:31:05:4f:23:21:6a:d7:42:
f2:8a:b5:93:d9:d0:48:21:ad:48:e0:87:ff:44:cd:6a:4e:c0:
3b:80:51:3d:62:99:ee:b3:57:e4:d7:8a:9a:66:c9:cd:8f:bd:
9e:a1:30:a6:ab:e8:94:3d:3d:17:63:0d:6b:8e:38:23:95:40:
87:64:8f:0e:1f:86:b0:f0:ac:8a:b8:3c:d8:d5:28:c8:e8:92:
a0:52:2b:86:c0:79:30:00:a7:e5:6a:d3:13:83:0c:3c:a6:47:
89:78:a9:b1:cd:d0:24:c6:9c:99:fd:f3:c0:76:d5:ef:20:3a:
ea:cc:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:13:47 2025 by rpki-client