Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier: AkvsnkcUjl2sNEFYm6jsvqIdJpnUr/VKpkI2FreJeIg=
Subject key identifier: 21:64:5B:AA:10:2C:25:D5:20:12:F7:1B:E2:DE:00:09:42:41:08:1C
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer: /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial: 4343771C6288C9EB8404C9C4099432CCC368B56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number: 023F
Signing time: Tue 11 Nov 2025 07:22:16 +0000
Manifest this update: Tue 11 Nov 2025 07:17:16 +0000
Manifest next update: Wed 12 Nov 2025 10:26:16 +0000
Files and hashes: 1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: V7Z/ubExgken4mwpAG77TEUAN97DAxZjotkyy6Cw5IE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:43:77:1c:62:88:c9:eb:84:04:c9:c4:09:94:32:cc:c3:68:b5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Validity
Not Before: Nov 11 07:17:16 2025 GMT
Not After : Nov 12 10:26:16 2025 GMT
Subject: CN=21645BAA102C25D52012F71BE2DE00094241081C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:af:a1:06:40:28:63:cf:d5:f3:2d:06:aa:
84:3a:1b:19:40:20:03:3c:97:3f:af:44:6f:fc:55:
1a:ec:1e:a5:64:3f:08:3a:4b:27:7b:29:6e:cc:6c:
c3:f7:b7:41:c3:c2:00:b8:54:bc:f8:ca:29:80:1a:
e0:10:58:c2:3d:de:16:a6:f0:82:d1:69:91:c0:fa:
e3:64:6f:84:79:81:58:5c:1c:af:06:b6:60:a3:a2:
2c:ff:6b:de:66:c6:5c:4e:22:a0:36:b5:c2:0f:32:
dc:a1:6b:be:5d:88:0e:95:54:b7:55:c0:44:12:bc:
29:ef:87:b1:4a:34:1c:2e:68:22:c0:52:28:89:fe:
be:bb:d7:ca:e4:f3:a8:2b:e5:81:55:5b:12:b0:78:
28:86:02:08:de:a2:6c:9a:8c:ff:d5:b2:d6:44:c3:
65:ff:b2:32:48:d1:91:1b:85:0b:27:5c:92:3f:fb:
fc:28:6f:88:8f:17:aa:b1:b6:af:61:04:c5:fa:08:
80:4c:51:64:0d:0e:61:2f:28:04:14:7b:ec:11:d9:
9c:18:86:3d:f7:5d:04:a1:5b:af:94:0b:b4:bc:6a:
1b:82:16:27:73:66:8f:e2:89:25:44:2c:1c:d2:39:
1f:66:bf:4a:b7:18:74:05:0e:a1:48:58:8d:cb:8b:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:5B:AA:10:2C:25:D5:20:12:F7:1B:E2:DE:00:09:42:41:08:1C
X509v3 Authority Key Identifier:
keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2e:00:70:c2:8f:dc:36:bd:fc:69:47:74:1c:a4:71:fa:9b:
15:8d:f7:2f:75:2d:71:3d:a1:be:53:8e:1e:ee:73:82:b1:ac:
eb:2d:da:d2:2d:17:31:9d:a1:d7:2a:ff:a7:7c:78:aa:d6:73:
e7:d8:a5:2e:60:e0:6e:0c:f9:12:90:64:8b:1e:a8:3f:bd:ba:
35:11:7c:1b:fc:d8:32:52:02:5d:e5:d2:3c:6f:70:da:b9:5f:
30:ca:30:f9:c7:bb:e1:1b:73:28:ab:c4:18:78:56:2f:28:30:
58:11:01:25:85:79:26:3e:11:5b:7f:59:d5:d1:88:c4:8b:57:
0d:50:f5:a5:f9:49:6b:a7:34:42:a9:3d:f8:1e:12:11:7c:3c:
18:7b:6e:3a:e2:75:10:d9:78:45:60:32:27:3f:bd:d2:40:c7:
d4:67:43:4f:ca:ef:7d:2b:a6:24:18:ac:69:a8:a5:ec:42:14:
d6:fd:7c:79:44:c1:ad:44:2b:1f:e5:4f:e6:e0:b4:f9:ce:cd:
80:c5:ee:fd:a9:99:03:0a:e8:c2:99:0c:b9:e5:ed:aa:06:59:
c6:0e:d7:00:e2:1d:b1:df:bf:e7:ba:14:e0:b0:46:a8:ff:57:
07:e3:29:14:c4:36:4b:86:3d:42:5f:ff:30:c0:f2:b2:b9:d4:
40:4e:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:21 2025 by rpki-client