Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier: SIJ1qBtIjUuvEtAMwx/hmWg40cDBl7fTCJX7+HgBb9I=
Subject key identifier: FB:F7:13:A6:CC:2D:C6:4D:6B:DE:98:10:9E:5E:AE:3F:15:66:88:91
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer: /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial: 573F7EEF53EA9AEC43F2602D62C115BB1B6C1AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number: 0271
Signing time: Fri 05 Sep 2025 04:10:57 +0000
Manifest this update: Fri 05 Sep 2025 04:05:57 +0000
Manifest next update: Sat 06 Sep 2025 06:39:57 +0000
Files and hashes: 1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: aWkoqQ0gXSD8JDsxuVR1tuaSvjmOwHHSwdFEupF7VUo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3f:7e:ef:53:ea:9a:ec:43:f2:60:2d:62:c1:15:bb:1b:6c:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Validity
Not Before: Sep 5 04:05:57 2025 GMT
Not After : Sep 6 06:39:57 2025 GMT
Subject: CN=FBF713A6CC2DC64D6BDE98109E5EAE3F15668891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:97:aa:93:3f:ac:0d:28:c2:f2:95:8e:01:
c4:ed:1d:63:c5:15:7a:ba:9a:32:9c:43:b0:8e:21:
e2:61:6e:33:80:6f:1b:ca:49:2c:db:21:31:32:f1:
4d:87:ab:dc:2c:6f:f0:69:fc:78:e8:79:d6:af:ec:
bf:a7:31:d3:70:eb:4a:91:dd:7e:67:28:87:a6:08:
91:ae:d7:96:f0:23:71:7a:75:f0:75:b6:ad:b8:68:
ec:a0:6f:e7:c8:62:6c:b8:6e:78:56:87:c3:a6:8e:
c3:3f:8b:2b:22:4f:ae:33:e2:3e:77:cd:ce:2b:59:
46:4f:75:1e:79:f6:97:4f:a4:dd:9c:51:bb:03:e9:
62:db:a7:8d:c4:06:0e:11:3c:ec:e1:72:29:cc:03:
68:12:fc:df:15:04:98:3f:9d:d9:ad:48:b8:2d:cc:
14:0f:bc:87:a3:b2:3c:60:37:ad:88:20:6d:d8:56:
fa:94:6f:2c:d9:46:f9:f3:91:69:6a:e6:a0:61:28:
4e:c6:1d:29:04:5b:e7:36:cb:d4:57:a5:68:f5:d9:
98:cd:9a:0a:59:63:5a:46:34:02:43:0a:3d:49:16:
b0:c7:cc:b3:98:c0:38:9f:0a:33:d2:38:2e:d3:b1:
c2:96:fe:2c:fd:16:d5:41:2f:2f:e6:3f:b0:f3:95:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:13:A6:CC:2D:C6:4D:6B:DE:98:10:9E:5E:AE:3F:15:66:88:91
X509v3 Authority Key Identifier:
keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:bf:7b:ca:79:a3:3e:9e:48:07:ac:b2:bb:f4:77:4f:cd:
64:1f:f0:a2:58:3a:c1:d0:42:1a:3a:e5:2a:2f:5e:f1:cf:2b:
cd:b2:c0:a3:9c:47:3c:d9:7b:fc:94:57:70:3f:9c:9c:dc:ed:
71:bd:a0:b4:3a:21:ef:1b:fe:12:2d:0e:0c:e5:28:01:1a:f8:
0c:5a:95:1b:9c:ce:bb:db:6c:6f:54:11:6a:34:aa:7a:02:a2:
99:25:65:c3:9a:8b:37:ee:13:56:89:34:f9:5f:ce:68:9f:8c:
92:79:72:8d:95:9e:31:4c:0f:8e:da:2a:80:d2:33:b9:66:8d:
34:d7:6f:b4:af:d6:0e:46:a9:19:2a:d5:1d:67:05:ab:8b:08:
0e:fc:02:68:80:42:c6:8e:e6:7e:7c:d0:5c:0b:55:52:2c:d1:
86:e2:e4:d9:dd:c8:58:d8:36:64:8b:aa:14:0d:2a:42:12:28:
5c:a8:97:d8:61:d0:03:42:7c:07:d7:ed:47:ef:a7:9e:f8:4a:
7c:b2:6a:be:6d:28:36:37:a5:40:e8:a0:e5:b8:b6:91:1e:22:
6e:68:6e:79:51:a2:05:d1:a8:d6:96:c3:c0:22:7b:c7:71:48:
34:dc:86:fd:13:db:33:8b:64:fa:c6:dd:24:cd:7a:17:a8:ac:
58:14:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:24:48 2025 by rpki-client