Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
File: 1A715D4CFA1F15075FC610EDBB0905220D66929D.mft (raw, json)
Hash identifier: nSOCf4nYnL298cUaJl8/eQCYQlIdz843Bi7FdWctmpg=
Subject key identifier: 7D:BF:D0:97:2E:A1:64:A8:61:53:65:0F:28:67:58:F0:8A:20:C4:FD
Authority key identifier: 1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
Certificate issuer: /CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Certificate serial: 48231C2DDCC0F89F147AAD0C71F337DC7EA680CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
Manifest number: 14
Signing time: Sat 06 Sep 2025 19:15:48 +0000
Manifest this update: Sat 06 Sep 2025 19:10:48 +0000
Manifest next update: Sun 07 Sep 2025 19:34:48 +0000
Files and hashes: 1: 1A715D4CFA1F15075FC610EDBB0905220D66929D.crl (hash: 7RO3gH8BTq6lywKzEXGyTMhHeNIZee/QDzEOeGKD7vM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl
rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 19:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:23:1c:2d:dc:c0:f8:9f:14:7a:ad:0c:71:f3:37:dc:7e:a6:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Validity
Not Before: Sep 6 19:10:48 2025 GMT
Not After : Sep 7 19:34:48 2025 GMT
Subject: CN=7DBFD0972EA164A86153650F286758F08A20C4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:1f:b1:11:fc:6f:a7:dc:12:cf:9b:77:d0:
94:05:bb:6c:38:79:6b:c8:c1:f7:3a:da:f1:64:f2:
2b:13:32:4a:cf:7a:ba:81:15:8c:1b:88:d6:c3:b7:
bc:47:48:b0:4d:45:0a:f0:79:ea:31:43:67:cd:b3:
2c:dd:24:97:2e:d0:e8:e6:66:9d:58:72:4d:5d:fa:
c6:d3:55:4b:a6:f9:8d:ee:f7:24:82:28:28:45:e3:
c5:30:78:03:dd:93:c6:e0:25:4a:1c:54:e5:2d:1d:
27:4a:96:82:8d:44:ce:d4:cd:75:1c:2d:ab:10:4e:
61:25:1a:92:a0:3e:bc:de:e7:d5:83:ba:78:31:4c:
38:61:ec:f7:b3:d5:05:b9:1f:fd:d0:65:f3:cd:46:
55:f2:16:06:2a:bb:d7:47:42:e0:db:39:37:c6:9f:
45:b3:49:ab:f2:36:67:4b:45:eb:f9:e3:dd:e8:a4:
95:a4:e1:41:bd:d0:e4:63:35:ff:a4:52:40:18:bb:
0e:1e:81:a2:1d:19:97:17:de:91:80:12:c8:24:cf:
5d:f2:cb:8a:d2:21:66:ba:b6:8b:f3:89:6e:0d:d3:
c1:e2:4f:d4:5b:50:c2:1f:58:ff:32:0c:3d:5f:97:
cb:7b:b7:d9:ce:f0:ec:64:c2:d3:06:53:4e:b6:f7:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:D0:97:2E:A1:64:A8:61:53:65:0F:28:67:58:F0:8A:20:C4:FD
X509v3 Authority Key Identifier:
keyid:1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d9:0d:26:80:39:f1:f3:37:60:59:da:14:53:f9:07:3b:92:
cb:f9:78:8f:6d:52:c7:c9:ec:d9:3e:82:ae:89:1a:57:eb:b7:
6d:35:3c:92:ab:dc:4e:01:23:99:68:72:e7:c8:cf:a0:56:07:
47:25:1f:1b:01:59:79:27:1f:4b:cf:97:e0:ed:8b:59:d0:c9:
64:5c:32:5d:f5:e8:ef:4e:a5:76:71:5e:c3:4c:bc:a7:d3:f2:
e5:bf:2e:33:79:9e:45:19:ff:ad:56:6d:bf:8a:be:61:21:9c:
33:78:17:cc:19:4a:19:77:f9:fe:ea:25:01:20:57:4e:dd:d1:
3d:2d:73:21:bf:65:dd:7f:f9:c7:73:d7:fa:ea:7f:13:2b:9d:
a9:bb:c7:37:9d:8c:50:4f:ad:0a:66:58:ee:78:ec:56:0d:55:
dc:0c:24:3d:88:36:4c:29:fa:d0:ee:89:b5:04:cd:70:be:6f:
e8:29:28:4b:46:d4:ed:00:83:2c:f7:0c:ba:fe:f3:67:cf:fb:
c1:46:79:89:fb:a8:b4:da:94:d6:1e:6b:9c:57:9f:1d:9d:9a:
3c:64:bd:67:bc:86:21:5c:16:c3:67:c0:6a:4e:c2:d1:6e:d8:
a9:d8:31:db:be:90:04:34:36:71:cb:9f:4f:77:e0:2d:ea:39:
d1:99:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:16 2025 by rpki-client