Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json)
Hash identifier: YkyIHHz4xffZJEb58X309Klsdmp3tACYP9DufwlXB8Y=
Subject key identifier: D3:2B:27:5A:40:50:25:06:AC:9B:DE:05:6D:7A:F4:0F:AC:B3:B1:74
Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Certificate serial: 6DDB33B6B6F255B43FD59BCD1673CEEAE972129B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
Manifest number: 03
Signing time: Tue 11 Nov 2025 01:16:41 +0000
Manifest this update: Tue 11 Nov 2025 01:11:41 +0000
Manifest next update: Wed 12 Nov 2025 01:38:41 +0000
Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: aGxbNo5a8UG8E0+lnW8jY6KACNOx2SAyIDHfesM3tlc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:db:33:b6:b6:f2:55:b4:3f:d5:9b:cd:16:73:ce:ea:e9:72:12:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Validity
Not Before: Nov 11 01:11:41 2025 GMT
Not After : Nov 12 01:38:41 2025 GMT
Subject: CN=D32B275A40502506AC9BDE056D7AF40FACB3B174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:cc:66:7a:64:13:f5:59:1d:2b:94:b4:46:
47:bc:d9:2c:3e:df:af:b3:07:5a:c0:84:77:33:82:
b3:15:26:66:a1:58:94:81:5d:11:e2:45:e8:b7:e2:
4c:da:be:a1:08:7e:4b:5d:7d:a2:ff:c3:8b:74:ad:
58:13:a2:aa:1a:5a:16:cd:6f:bc:3e:90:4b:24:10:
db:cf:67:11:b4:0c:45:8d:00:22:92:be:b0:87:88:
3d:be:90:af:c8:92:58:ff:05:ca:07:1b:da:96:76:
b5:2c:b9:a7:6d:36:ea:c4:63:b0:63:ec:e7:68:0c:
2b:c4:2f:8e:9e:99:b6:07:b4:7c:3e:aa:b2:6d:c0:
fb:a0:1a:9f:d8:a6:e6:f5:89:45:05:85:55:a4:2b:
7b:d4:78:ce:e1:8e:75:47:87:48:5c:2d:f0:ad:42:
20:2f:07:ce:9e:10:29:5b:1b:78:6c:b5:dd:eb:d9:
ce:9f:9b:cd:f7:0b:32:1e:2f:ee:bb:cb:77:bf:ba:
9a:12:17:56:71:3a:1e:91:9c:ba:48:3c:d2:75:b8:
2e:cd:72:1a:dd:a6:08:3c:04:c0:b2:91:c3:a6:ae:
be:c5:70:8d:b3:79:a6:fc:25:2a:24:1e:71:39:ae:
b1:d2:f0:b9:75:42:db:51:f6:29:e9:b4:0a:9b:2b:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2B:27:5A:40:50:25:06:AC:9B:DE:05:6D:7A:F4:0F:AC:B3:B1:74
X509v3 Authority Key Identifier:
keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a0:ee:b4:d7:f3:d5:03:7e:58:4d:0e:d1:1a:8d:fb:d4:5c:
54:6c:4a:b6:c8:e0:fb:24:1a:f1:2c:17:51:0c:7d:50:42:6d:
a0:38:43:b8:72:2c:60:93:a0:42:08:b5:9a:33:47:e4:d7:4d:
72:e7:12:cf:f3:3a:65:f4:d1:83:b2:33:ef:f3:5d:b4:c5:33:
2c:27:a9:33:04:d1:aa:d9:9b:e3:76:39:d7:66:22:ca:57:18:
b1:c3:f6:cc:cc:da:d8:95:3d:a1:f0:33:2f:5c:ff:c7:fc:4e:
af:a1:b5:d5:bf:ff:4b:81:3c:9d:95:1a:68:9c:42:80:84:d0:
19:52:14:3d:43:b3:b8:c2:0c:53:e8:76:e8:01:0b:f6:91:fa:
77:fa:a5:77:68:bf:ad:f2:10:58:a9:75:ed:25:92:88:47:3f:
2f:49:16:14:0a:91:99:1a:0b:e5:f4:82:64:01:af:5c:73:b5:
ea:0d:89:52:72:78:71:e2:b2:5b:e7:4a:e6:8a:14:0a:11:f0:
84:7a:c7:6c:be:ff:27:3b:a7:d9:95:13:67:d2:75:36:1d:9d:
b9:b0:ce:b8:d4:be:36:61:11:f5:45:aa:97:ed:86:95:a5:be:
b5:f3:cd:9f:8b:65:5e:3d:b8:96:3e:53:a4:59:da:a3:25:cb:
d4:b8:cc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:37 2025 by rpki-client