Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
File: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft (raw, json)
Hash identifier: dbObpYiKeTm7UIrkWNdnTTe7S0fLzFKodyvMZziCybQ=
Subject key identifier: 51:3B:09:15:2B:7B:2B:2D:48:B9:B6:3A:C8:7A:FB:BD:EA:65:65:07
Authority key identifier: 2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66
Certificate issuer: /CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666
Certificate serial: 1049114335C6FD97A2C8A2794DF86723D5F338B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
Manifest number: 15
Signing time: Mon 10 Nov 2025 20:29:18 +0000
Manifest this update: Mon 10 Nov 2025 20:24:18 +0000
Manifest next update: Tue 11 Nov 2025 22:34:18 +0000
Files and hashes: 1: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl (hash: gbV0zSredfTEDKgdmyq3o/q61ODwbmdVPTDxAmtnJC0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl
rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 22:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:49:11:43:35:c6:fd:97:a2:c8:a2:79:4d:f8:67:23:d5:f3:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666
Validity
Not Before: Nov 10 20:24:18 2025 GMT
Not After : Nov 11 22:34:18 2025 GMT
Subject: CN=513B09152B7B2B2D48B9B63AC87AFBBDEA656507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:55:02:d7:e7:42:c8:83:67:92:89:64:6d:
cf:8c:a5:46:9e:1c:7e:12:15:3a:f8:12:8c:d8:dc:
a6:dd:80:52:4e:05:27:67:61:8c:51:61:b1:d7:9c:
10:52:90:ef:33:5e:a8:d6:33:a7:06:20:72:22:1a:
fc:87:a9:4c:a5:bd:6b:73:df:72:34:cd:2d:05:a9:
f0:96:e3:4a:22:a0:f3:9c:2d:24:cb:a3:d1:8f:31:
d1:ec:e5:33:bf:c4:2a:65:e3:01:bf:cc:56:42:55:
24:9f:2d:a9:44:05:70:f6:ff:7d:dc:fc:c3:dc:5a:
30:5a:9e:4b:1e:8b:57:dc:b0:67:07:cc:38:5d:a2:
80:91:46:2d:a0:98:2c:66:d4:5b:a8:35:af:01:ab:
2e:e6:b9:58:a0:bb:c3:79:4b:ec:37:cf:7f:f8:74:
43:37:51:92:87:82:67:75:a0:6a:66:ef:cc:86:29:
af:9d:02:c2:ad:7e:63:f8:f7:cd:b2:11:19:27:43:
1b:b6:18:45:2c:e3:b1:d3:95:8d:cb:52:33:e5:90:
87:bd:17:bc:a2:ba:e6:ee:29:91:a8:25:a7:cb:4c:
4a:f2:2e:aa:23:f7:3e:23:9e:c2:31:9c:17:e5:30:
d0:e3:af:a4:b5:77:a9:eb:33:75:c1:3c:b1:b8:af:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:09:15:2B:7B:2B:2D:48:B9:B6:3A:C8:7A:FB:BD:EA:65:65:07
X509v3 Authority Key Identifier:
keyid:2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9d:81:bd:96:47:87:a2:9a:10:ec:e7:b9:42:1c:4b:ac:25:
40:b9:05:95:21:1a:2c:75:ad:3f:c8:47:a0:45:a4:b1:6d:09:
38:31:d0:ec:55:81:fb:12:dd:c4:00:52:3b:ce:a5:5a:ad:56:
a3:3c:cb:1c:2b:a7:36:12:83:84:50:7b:12:9e:4a:89:03:f4:
c3:23:1d:5d:1a:48:7d:b8:50:48:f4:46:50:e8:cc:2a:88:c9:
e7:e4:d2:76:9d:1f:7d:73:d4:0f:e8:ec:29:d2:30:12:c1:8a:
90:2e:50:42:01:40:1e:df:4d:a5:35:ad:f0:4d:2e:70:2c:91:
c7:a8:9f:e2:bf:e7:96:95:24:96:dd:d7:ec:ea:df:1e:92:c4:
44:0d:78:40:92:41:a0:47:54:cf:23:e3:c6:b1:dc:5d:da:65:
1c:6d:91:42:86:20:6d:82:61:df:99:0c:5f:01:de:e7:03:32:
c3:06:94:16:6e:71:2f:5f:f4:5c:3f:15:db:90:ce:55:48:8d:
93:87:4e:25:21:b4:b1:93:d7:aa:d5:2c:f8:dc:67:35:86:66:
d8:db:32:fe:67:7b:db:3d:11:e7:d1:4f:7c:b0:1e:05:3a:48:
32:85:00:b2:a0:3b:e0:d2:0c:da:c7:0a:40:ba:06:5d:7d:c4:
ce:39:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:31 2025 by rpki-client