Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft
File: A93D2179411EB094DADFB0F4142A34F686FC9979.mft (raw, json)
Hash identifier: KT+xDmoZcmNc59bEHouWBlNcQoNcgCxs8hi0AgnKzZM=
Subject key identifier: A6:CD:88:8F:3F:12:78:D2:F7:3F:BB:EC:80:0C:AA:E9:4D:DF:20:0F
Authority key identifier: A9:3D:21:79:41:1E:B0:94:DA:DF:B0:F4:14:2A:34:F6:86:FC:99:79
Certificate issuer: /CN=a93d2179411eb094dadfb0f4142a34f686fc9979
Certificate serial: 5FAE8F989184548EA8A25E679D21E45C32C786A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft
Manifest number: 15
Signing time: Tue 11 Nov 2025 01:04:19 +0000
Manifest this update: Tue 11 Nov 2025 00:59:19 +0000
Manifest next update: Wed 12 Nov 2025 01:20:19 +0000
Files and hashes: 1: A93D2179411EB094DADFB0F4142A34F686FC9979.crl (hash: CcK9fpAW3sOZofDVcmIX7u1SVpRdYoZRqWuA6ky/dXc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.crl
rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ae:8f:98:91:84:54:8e:a8:a2:5e:67:9d:21:e4:5c:32:c7:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93d2179411eb094dadfb0f4142a34f686fc9979
Validity
Not Before: Nov 11 00:59:19 2025 GMT
Not After : Nov 12 01:20:19 2025 GMT
Subject: CN=A6CD888F3F1278D2F73FBBEC800CAAE94DDF200F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:e6:de:6b:00:f1:3a:19:6f:38:17:8a:b9:
84:67:82:74:30:87:15:3e:1a:7b:dc:13:f4:7b:6b:
38:bb:02:8c:71:bd:91:04:be:19:0d:8a:87:c4:c3:
2c:d7:54:68:5c:76:69:05:48:0e:b5:c1:41:c8:d7:
f8:a3:bd:d2:8a:2a:98:f7:5c:7c:e6:73:86:3c:39:
39:60:4a:b0:f0:96:e2:30:e3:9f:d1:61:af:8a:8e:
bb:71:6f:c4:3a:3f:4c:4c:ae:d8:74:ea:fb:6b:b9:
62:df:c9:97:e9:e6:53:f3:c3:ee:36:83:66:5b:18:
1d:80:fd:71:85:76:07:4b:7b:af:bc:57:da:81:a0:
2f:d0:fd:63:f8:53:c4:31:f4:32:fc:26:1b:63:a0:
f3:31:f7:36:67:78:bb:7d:10:20:16:e0:71:90:36:
05:2d:1d:cd:fb:c0:79:e4:47:e6:1d:e4:e8:93:99:
99:7e:e1:ba:6b:26:35:8a:03:7f:6e:c3:b2:8b:bb:
ad:fa:88:d6:a9:6b:80:ee:f2:74:c3:c9:03:7e:3e:
a0:ad:73:5a:c0:0e:19:6c:cb:40:2a:5e:48:3b:d1:
6e:2b:77:61:29:e1:19:c8:10:11:40:a7:a4:97:3f:
ae:bb:d5:30:5c:b5:46:59:a1:a6:93:b5:98:81:c8:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CD:88:8F:3F:12:78:D2:F7:3F:BB:EC:80:0C:AA:E9:4D:DF:20:0F
X509v3 Authority Key Identifier:
keyid:A9:3D:21:79:41:1E:B0:94:DA:DF:B0:F4:14:2A:34:F6:86:FC:99:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:76:2b:79:62:ed:6c:53:72:af:b8:e4:c2:c6:87:80:a7:88:
6a:80:23:93:6c:0e:8d:b9:20:7c:6f:45:44:6c:bf:62:03:b2:
f9:dc:27:65:2f:ef:af:76:94:69:49:a9:f5:0d:ba:8e:a4:99:
9e:a4:00:c5:46:39:3b:10:83:8a:54:17:1d:82:95:00:1b:bd:
d9:ad:dc:17:c7:a6:44:92:1b:5a:10:26:69:cf:54:a8:23:75:
89:d7:88:95:e3:74:7a:5b:89:d0:02:d4:87:4c:b3:39:1d:b0:
d4:b4:bd:c4:6d:33:bd:ed:e5:47:06:ab:98:2e:15:90:ea:8b:
4c:6d:27:aa:8b:7e:af:fa:75:1f:e5:e1:68:63:31:45:95:d4:
da:d7:a7:31:7d:f9:69:2c:37:a1:86:87:43:ae:c5:e2:a6:ea:
e0:8f:a7:23:b7:29:3f:24:0b:5c:3f:54:36:b8:31:bd:1c:98:
1f:ef:7b:79:88:df:9f:69:10:67:79:ad:94:16:da:8a:87:7f:
d2:3e:b9:ad:04:ec:0c:e0:53:59:8e:20:ee:0d:f3:e6:c7:0f:
80:fe:82:b9:e4:d7:ca:54:ae:dc:ed:a8:c6:bc:2c:51:87:31:
8d:83:68:57:87:e7:64:a5:97:8a:2d:79:b8:70:b6:97:05:62:
04:08:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:35 2025 by rpki-client