Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File: DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier: aXpZzyg32f/z+AaPZdGT1Eaq4VBipBKMNcLFgxVf0mk=
Subject key identifier: 47:51:1B:8A:5F:39:BD:C6:5D:D7:C9:F8:EC:05:B4:F2:EF:CD:31:5F
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer: /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial: 68AADC2A3A0E46DA39838F7FEEE6CDF5BE4BB138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number: 03BE
Signing time: Mon 10 Nov 2025 21:08:57 +0000
Manifest this update: Mon 10 Nov 2025 21:03:57 +0000
Manifest next update: Wed 12 Nov 2025 00:42:57 +0000
Files and hashes: 1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: lRVU7vPbGfzshEcaoxiQZZpWl16Ge6lsHFyOorPupfA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:aa:dc:2a:3a:0e:46:da:39:83:8f:7f:ee:e6:cd:f5:be:4b:b1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Validity
Not Before: Nov 10 21:03:57 2025 GMT
Not After : Nov 12 00:42:57 2025 GMT
Subject: CN=47511B8A5F39BDC65DD7C9F8EC05B4F2EFCD315F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:e3:43:ef:c8:cd:99:c6:10:ca:8d:49:6e:
dc:fd:3c:ce:90:5a:ef:1f:30:d6:80:c1:25:48:04:
0b:26:2a:58:9d:f4:85:ec:9f:e1:72:47:74:e7:e0:
36:31:d0:72:00:27:a7:d4:fc:b2:15:ec:42:3f:e3:
be:8f:5c:92:7b:fb:55:0e:42:01:13:57:b8:44:35:
7f:53:bc:34:09:76:00:2f:c7:62:f8:cf:5f:b4:62:
5d:38:af:f4:fe:de:02:01:d1:45:93:ed:3c:13:64:
51:2d:88:f3:f3:34:b8:91:8c:16:7b:26:54:f9:6f:
4b:b6:be:d2:42:df:6b:f9:8e:ca:12:4f:3d:a3:fb:
75:aa:f9:d3:c7:63:d3:42:84:30:d6:87:a4:ce:db:
58:27:f1:fe:bb:52:cf:db:31:cc:d3:fc:8b:30:3c:
31:44:60:28:3c:58:72:60:6d:83:54:dc:13:bb:aa:
34:a1:3a:04:6b:19:a3:c1:a3:74:84:d6:a3:e3:2f:
bd:24:b1:a2:79:87:52:6c:bb:d9:e0:70:66:54:c3:
9f:e1:a2:db:1c:cf:98:1b:d0:c1:52:9e:02:e7:d3:
73:46:45:c3:6a:6b:b0:ae:64:ff:9d:00:d0:a4:15:
64:04:5a:4c:70:91:44:42:7c:a5:9a:3d:fb:c3:99:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:1B:8A:5F:39:BD:C6:5D:D7:C9:F8:EC:05:B4:F2:EF:CD:31:5F
X509v3 Authority Key Identifier:
keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:55:1c:d5:27:66:66:8c:c8:4c:6b:63:17:95:cf:40:35:a1:
dc:e4:bd:19:4d:48:c5:2f:cc:1d:46:77:68:22:19:69:da:d6:
9a:b9:c5:6b:dd:7d:a6:5c:f6:f5:4e:fb:63:68:44:ed:38:74:
97:ce:f5:46:31:96:84:69:34:ea:d7:5c:36:1e:53:55:0c:2e:
7c:6e:47:6c:fd:71:62:f9:ea:9b:dc:4a:36:a8:23:bb:cf:ab:
fe:3f:47:ac:3c:8a:fa:f7:c8:b9:9c:9a:8f:44:26:04:df:2d:
e0:f4:cd:6a:3d:29:b7:ba:d9:f4:67:d2:6d:6e:ca:1b:50:99:
78:01:ad:5e:e9:09:db:32:aa:cb:87:ac:ec:11:f9:a2:31:9a:
0d:e1:64:86:02:5a:8d:76:c9:29:b8:72:f0:d1:3d:b8:db:95:
b4:64:45:5e:68:cb:3a:37:5d:04:bf:02:5b:56:70:15:76:f3:
e0:7f:2e:23:11:b0:d0:7a:ea:68:21:82:6b:23:8a:80:f6:f3:
a4:ad:60:59:bb:e6:25:60:14:64:04:e7:9f:26:e0:90:ed:18:
ab:61:1a:e2:a0:32:9b:d3:93:87:8d:e6:26:5f:c8:bc:61:5b:
0e:02:1d:fd:79:ea:6f:9e:ee:4e:8b:62:fa:b4:1b:82:99:3d:
64:de:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:49 2025 by rpki-client