Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: X6PynJbg2KUcPI4+h6zy1Qpw10NvEIetB13RHmS7AcA=
Subject key identifier: DE:D6:76:80:10:0C:B6:44:4C:50:FD:D5:BE:CB:EC:C0:E7:49:AE:1D
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 08AA278CD0948E847586C93E02A6205BFE056FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 01B4
Signing time: Sun 07 Sep 2025 08:47:36 +0000
Manifest this update: Sun 07 Sep 2025 08:42:36 +0000
Manifest next update: Mon 08 Sep 2025 12:19:36 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: BdsZ9XJSM3LHJqdplaQyvDgq7+U515CXqUtCyWuzQq0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:aa:27:8c:d0:94:8e:84:75:86:c9:3e:02:a6:20:5b:fe:05:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Sep 7 08:42:36 2025 GMT
Not After : Sep 8 12:19:36 2025 GMT
Subject: CN=DED67680100CB6444C50FDD5BECBECC0E749AE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:30:27:fb:b3:51:aa:3a:63:65:67:03:0c:
da:1e:ea:a3:4a:36:1d:bf:3c:f2:fb:34:28:bd:39:
ad:3b:c3:56:19:68:5c:c8:9f:28:6b:d2:a2:77:d5:
a6:22:e1:b1:a2:14:76:94:47:d4:36:e5:cb:f7:a3:
d3:2f:8d:c6:91:83:6a:0b:23:ce:f8:1d:de:90:19:
b2:98:02:84:1e:40:d3:10:22:40:b5:83:24:ac:07:
38:b1:a7:62:94:72:2c:81:29:ef:03:d9:22:30:50:
4e:33:d0:2f:bd:7f:62:32:c8:08:3a:f5:ea:2c:69:
1f:d4:7e:f4:2f:f2:54:46:d3:30:c9:c2:81:46:5e:
6d:bd:22:2f:e1:66:2c:a9:63:5d:31:bd:55:a2:72:
cb:08:44:6a:24:5a:ee:a0:3c:05:a2:55:bf:af:b3:
50:d1:49:93:bb:c1:58:ad:ae:39:01:3e:d4:a7:cf:
79:bc:ff:cf:c7:0d:ed:59:13:b3:5c:4c:25:45:72:
fc:c3:65:45:52:cc:bd:4e:d0:00:e6:23:b6:ce:df:
5b:6d:50:7e:85:97:1d:24:5b:db:d6:09:7a:d2:79:
81:2f:2d:3e:48:1d:7c:db:c9:8f:8e:f4:c0:f1:c8:
27:f0:e3:2f:f7:08:e8:99:c1:47:28:a5:eb:99:e4:
76:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:76:80:10:0C:B6:44:4C:50:FD:D5:BE:CB:EC:C0:E7:49:AE:1D
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1d:73:df:8b:3d:cf:cf:32:47:26:02:25:65:b3:54:45:22:
73:47:68:a9:5b:0f:18:3b:40:21:fc:1a:c5:3a:db:44:1b:72:
df:7d:dc:4a:5d:a7:3e:b0:b5:8b:f0:cc:6d:b4:7b:d7:f6:c1:
ea:e3:39:47:f9:2b:0f:50:9e:58:d2:e6:7b:fc:ce:e8:1c:63:
32:f8:24:45:a4:53:ad:cb:d8:4b:0a:6d:96:c5:d3:7d:09:37:
bb:5b:9b:28:5f:ad:b3:e8:fd:0a:0e:68:77:dc:93:d4:fc:7f:
3c:ac:d4:6b:b8:93:a7:51:36:f9:c0:f6:58:3f:ab:e0:f9:c7:
39:ef:56:a5:e7:68:e1:6d:00:8b:07:27:a8:de:a8:24:54:36:
e4:13:e6:ba:11:77:5b:50:18:0c:15:51:ab:31:f2:61:ed:e1:
f2:02:8e:77:22:11:51:b0:17:1e:09:79:ca:0e:6b:51:31:c9:
7d:d9:71:be:85:b4:6e:a9:09:d5:42:4d:c0:c6:25:55:58:bb:
7b:da:64:22:6a:80:c0:88:56:a9:ae:1f:64:ef:4a:bb:38:5e:
8b:66:72:b5:75:db:94:3e:c6:65:d8:d7:c6:47:4e:b0:97:cf:
a2:0b:75:dd:f4:d2:e0:aa:3e:5e:56:21:22:b9:f6:52:35:10:
c8:1f:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:47 2025 by rpki-client