Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: xUxKOL6JlzZVxm1tcGJ/6D8d/jZlxzHgAshZ7Z/uwhU=
Subject key identifier: 7B:76:CB:39:A5:6F:3D:CF:EA:A8:5C:F3:DD:EF:F1:66:5B:03:D0:A3
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 5D47E8AB2AD2BB92C2216EC02BDD4F15A4139F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 0208
Signing time: Mon 10 Nov 2025 20:30:58 +0000
Manifest this update: Mon 10 Nov 2025 20:25:58 +0000
Manifest next update: Tue 11 Nov 2025 23:37:58 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: X7qkvgBzsXOHpQ2Lq+5wat6wPN04/BEXFkmFm34gk+I=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 23:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:47:e8:ab:2a:d2:bb:92:c2:21:6e:c0:2b:dd:4f:15:a4:13:9f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Nov 10 20:25:58 2025 GMT
Not After : Nov 11 23:37:58 2025 GMT
Subject: CN=7B76CB39A56F3DCFEAA85CF3DDEFF1665B03D0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:e8:97:ef:67:92:f5:5a:5c:01:24:97:f7:
e6:a5:5d:43:87:42:9b:9e:42:fe:b4:b9:5b:6e:ae:
9f:10:be:07:c2:af:00:e3:5e:bd:38:6e:a4:36:da:
21:a3:1b:57:95:39:72:3d:66:bb:6f:e7:14:3e:bd:
fb:8c:d5:f1:5c:28:98:35:cc:6a:64:bb:d1:64:46:
41:d9:3c:0d:ec:e6:b7:62:0e:14:4c:30:ff:ca:ef:
c6:a7:9d:f9:a9:06:32:1b:28:e0:fe:8b:ca:ab:06:
52:5d:7d:db:1c:5a:9e:6c:bf:24:9b:2d:8b:0e:06:
a2:ad:a0:fc:f8:9f:e2:48:a4:ac:ee:cb:d6:88:d4:
d3:6a:9c:97:25:15:0e:c7:a9:ec:1d:6d:56:18:20:
e6:75:1d:7d:2f:fa:62:8a:bc:b1:1c:a3:28:78:3c:
78:4d:df:25:99:90:80:de:c0:c8:23:14:d0:64:a4:
22:a7:14:f8:ac:66:ea:52:9e:c8:a1:fb:8b:20:63:
95:cc:f1:25:75:cc:b3:b0:bb:f9:78:46:c6:ee:4d:
5d:23:bf:0e:39:26:6e:62:7b:1a:f8:25:87:7b:85:
1b:41:8c:c4:36:0e:0c:89:6d:3b:15:80:4b:52:31:
b2:1f:2b:ef:de:aa:3c:9d:71:6c:3d:5d:76:0a:2a:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:76:CB:39:A5:6F:3D:CF:EA:A8:5C:F3:DD:EF:F1:66:5B:03:D0:A3
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:dd:d7:e2:1d:65:98:48:47:31:76:a4:b6:81:85:4e:aa:
64:15:d4:7f:e2:01:30:b0:54:52:dc:86:5d:45:ed:01:fd:03:
c5:24:34:f8:81:90:11:df:af:4c:49:da:cd:7d:58:fa:a7:89:
c5:19:e0:5f:c4:62:a2:cb:53:65:02:46:df:df:9f:ef:4a:a1:
77:ff:f9:5a:84:e3:b6:23:8f:53:d9:8d:5f:bb:84:f1:00:9a:
6e:90:24:d0:98:4d:3c:6a:52:05:15:8f:eb:af:ef:92:34:d1:
50:35:ea:c8:18:0d:ec:02:0c:ba:66:4d:56:5f:b4:16:d5:f6:
d3:1a:00:4c:24:9b:28:a8:e2:c3:c4:e5:3f:c2:24:2c:92:11:
13:69:7b:b7:60:e2:a4:f6:e1:6e:fc:73:10:4c:80:ed:43:97:
1e:13:76:71:f1:2d:a2:f6:7c:e8:40:4e:dd:dd:35:23:14:b4:
b9:d3:df:c2:b7:1d:b2:5b:ec:48:00:3f:dd:6b:3f:7f:61:63:
e8:29:b9:b2:cd:6c:b4:bc:5a:80:8f:db:68:66:6b:c7:b4:72:
16:4c:4d:3f:47:55:9d:af:c5:41:f7:fc:fb:fb:d6:53:ae:57:
9f:7d:7b:bd:7d:56:0b:08:94:0b:4e:b1:a6:a1:49:fe:90:94:
e6:21:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:23 2025 by rpki-client