Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
File: 1A715D4CFA1F15075FC610EDBB0905220D66929D.mft (raw, json)
Hash identifier: KqbCf9SxiWBThDFlSNh5HRxwWRmCePGaswFAFD2Dkbs=
Subject key identifier: 78:CA:21:37:66:93:6D:67:24:70:DA:80:2F:3E:BB:E6:AD:96:D7:52
Authority key identifier: 1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
Certificate issuer: /CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Certificate serial: 7B7FC916CAC97850A13F6A17539BAEF3DDE0E608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
Manifest number: 6C
Signing time: Tue 11 Nov 2025 08:26:14 +0000
Manifest this update: Tue 11 Nov 2025 08:21:14 +0000
Manifest next update: Wed 12 Nov 2025 12:23:14 +0000
Files and hashes: 1: 1A715D4CFA1F15075FC610EDBB0905220D66929D.crl (hash: ns9cuDzuU9lsKIEOUdBjyw2h1uOyJO/EER9fA6xli6k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl
rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7f:c9:16:ca:c9:78:50:a1:3f:6a:17:53:9b:ae:f3:dd:e0:e6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Validity
Not Before: Nov 11 08:21:14 2025 GMT
Not After : Nov 12 12:23:14 2025 GMT
Subject: CN=78CA213766936D672470DA802F3EBBE6AD96D752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:35:33:31:b6:14:ac:0a:23:9d:ab:54:43:
5d:ae:31:87:6b:15:2b:97:02:50:75:24:ef:16:ed:
73:5e:bc:5b:41:46:3e:3e:4f:b2:27:10:89:a3:1c:
0e:4e:01:2e:c2:b5:c5:53:c1:1b:f5:d8:d9:30:7a:
c2:1f:fa:2a:aa:61:aa:c5:3c:99:ae:5e:93:b9:57:
fc:63:8d:28:65:97:d2:9b:ef:75:25:bf:f7:a9:64:
aa:11:e5:7f:60:7f:47:19:98:ca:92:55:2c:90:0c:
7e:50:c7:41:7a:4b:e5:87:2f:ba:0b:d2:28:9e:11:
83:f2:ff:e8:4e:8d:67:46:7c:7c:4b:fb:6b:3b:8e:
69:ba:6c:e2:43:ee:9b:62:d0:c2:75:6b:e9:bd:b8:
f7:f6:66:bc:13:2a:eb:2a:13:04:7a:b3:80:7b:ca:
c6:13:69:99:32:ad:7b:d0:11:a3:36:d2:8e:ba:46:
3c:79:f9:49:65:bb:4b:ef:80:2c:bb:32:5d:e2:f7:
2e:b4:00:22:06:3d:e9:5a:59:ce:4e:1e:2d:e7:61:
81:55:f0:f7:51:7f:a1:e6:b1:dd:c3:9a:6e:ee:a4:
7c:2d:ad:68:ea:8a:2b:72:e0:9c:43:ae:de:87:63:
82:2a:b3:ff:6c:02:fc:be:c5:c1:8b:cc:e3:f5:cc:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CA:21:37:66:93:6D:67:24:70:DA:80:2F:3E:BB:E6:AD:96:D7:52
X509v3 Authority Key Identifier:
keyid:1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:af:b0:1a:ef:a2:35:42:18:9b:f2:4f:7a:a2:2f:a4:4e:bc:
c0:e8:95:87:1e:71:26:b8:20:5b:f6:6f:ff:60:57:20:ef:a9:
ff:dc:61:c7:c6:58:6e:f0:46:06:88:87:9b:f3:55:a5:f2:cb:
38:88:05:c1:5f:a9:55:f6:8f:33:6c:54:48:20:a5:2f:70:d7:
10:eb:0e:c7:17:83:c9:aa:4b:14:63:75:8a:f8:14:64:2d:11:
97:f2:4b:cf:ae:90:f8:03:c0:03:07:76:6c:6f:5c:37:7c:d2:
0f:a0:cf:04:90:1f:ad:af:e2:c9:71:ff:e1:11:52:17:6c:c7:
65:0c:8c:be:72:d8:14:e1:3e:77:62:23:75:9f:7b:22:df:84:
af:18:78:b2:10:56:f8:46:6f:b4:bf:9e:14:ab:b8:ac:3f:03:
19:e3:bd:6e:58:a5:29:cd:1c:03:c4:cd:8c:29:b6:9a:2d:61:
b1:24:9f:30:8b:39:91:94:88:0f:67:18:cd:e2:9e:a6:a3:76:
ea:94:29:db:c3:c7:2d:59:3c:cf:87:75:ea:ac:76:e4:28:26:
60:ca:7a:76:1a:03:88:96:1b:13:c8:8d:6b:0d:63:86:4a:02:
a7:ac:0d:3a:c9:34:8f:1e:ad:43:ed:10:ec:c9:2b:f2:2e:c0:
c4:0c:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:55 2025 by rpki-client