Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier: TQYoXs2C6Bc+nNus1Y48SsNzHWLE5/HyEbXzcof93Do=
Subject key identifier: 61:17:7D:57:5D:36:B3:2C:7F:EA:05:72:99:99:CD:5B:21:BC:C0:B5
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer: /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial: 25DF898DBD97B6F1FD1CA3993827BE0F4114308E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number: 0332
Signing time: Sat 06 Sep 2025 21:09:37 +0000
Manifest this update: Sat 06 Sep 2025 21:04:37 +0000
Manifest next update: Sun 07 Sep 2025 23:59:37 +0000
Files and hashes: 1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: 9uVDsEudVduIjg4bRZyeKNPIN4fA0lKAvcltIMRCQdg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 23:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:df:89:8d:bd:97:b6:f1:fd:1c:a3:99:38:27:be:0f:41:14:30:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Validity
Not Before: Sep 6 21:04:37 2025 GMT
Not After : Sep 7 23:59:37 2025 GMT
Subject: CN=61177D575D36B32C7FEA05729999CD5B21BCC0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:02:7a:d2:8f:cb:4e:bd:3b:87:b0:36:3b:35:
43:e5:de:d5:a9:1b:7e:91:51:fd:c2:24:c9:f2:72:
1c:30:da:ee:7e:ff:be:64:9d:86:2a:cd:a5:46:df:
72:10:3d:63:7f:ba:41:34:42:4c:98:37:ba:e7:b6:
06:52:16:1b:e0:b6:1c:5b:da:7b:1f:97:c2:ad:ad:
ae:f5:70:d9:17:4d:78:8e:2a:e6:91:25:81:1a:7e:
c9:8a:ce:b5:1c:bc:dd:b7:79:1a:f8:ed:00:52:f1:
4f:5e:88:b8:6d:fb:22:d1:df:d8:21:43:8e:5d:3d:
ea:6a:8a:b3:f7:17:b5:62:6b:6c:b1:e5:08:b3:83:
b4:a3:5c:2c:a8:59:72:09:db:0b:e8:41:3c:c0:a4:
df:4a:1d:8a:23:f8:30:59:3f:bd:bf:50:ab:38:00:
31:69:4e:e6:63:ff:a4:63:c1:14:19:97:3c:c9:a2:
50:e4:24:4d:c8:7d:00:81:c4:6a:88:a8:01:40:e9:
98:11:0b:08:08:fb:2a:40:bf:59:51:4c:a1:fb:b3:
e2:20:11:a2:81:61:72:ef:76:2c:f3:5e:5c:38:c0:
67:0d:8e:ca:87:ca:f6:09:96:e7:3d:ec:ae:6f:49:
4f:f4:d8:a9:bc:a4:af:16:4b:94:35:f7:d5:87:9d:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:17:7D:57:5D:36:B3:2C:7F:EA:05:72:99:99:CD:5B:21:BC:C0:B5
X509v3 Authority Key Identifier:
keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6d:63:f4:26:e1:53:b8:8e:60:99:7a:4c:ad:bf:97:6d:95:
8d:5b:17:08:5d:fc:34:b6:6d:5d:47:e9:82:b1:b1:b7:67:a9:
d1:a2:e2:f2:64:f4:f9:9d:87:cb:cf:bc:4e:29:9d:e1:b1:b8:
a9:67:5d:a5:24:ca:c0:b0:be:0a:16:e6:ab:bc:89:e3:a1:f5:
7b:ea:c2:8d:15:40:90:b8:f1:58:37:d7:4a:11:cb:44:16:cd:
68:e2:7d:0c:15:2d:e0:15:8d:68:84:35:21:f5:cc:95:26:83:
c6:e7:f0:ae:86:e1:89:69:2b:e8:02:66:75:95:0e:27:89:ce:
f5:47:09:d1:93:8a:c1:9c:9d:37:a5:2c:f3:a8:31:f1:16:0d:
4d:23:68:80:f7:74:75:b2:1f:01:ed:5e:26:6b:3d:28:b4:bf:
71:44:d6:49:e9:b9:db:43:92:a3:12:4e:52:91:3d:ff:72:0a:
96:12:7b:4f:00:64:3c:ed:80:65:95:54:ab:e0:76:de:9a:53:
d2:72:66:c9:61:4f:4f:21:8c:03:13:9b:d7:1f:5b:98:66:45:
cf:f6:fa:15:73:64:49:4c:d0:03:17:a6:89:2b:db:49:40:cc:
a4:1a:0a:62:7b:03:0b:da:29:85:05:22:a9:52:66:25:86:4f:
22:a9:67:dd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJd+Jjb2XtvH9HKOZOCe+D0EUMI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxMWUyNWMyMjM0YzFlNWEyYmZjZjdmZGNhYzU0YjAx
YWYzNzNiZDAeFw0yNTA5MDYyMTA0MzdaFw0yNTA5MDcyMzU5MzdaMDMxMTAvBgNV
BAMTKDYxMTc3RDU3NUQzNkIzMkM3RkVBMDU3Mjk5OTlDRDVCMjFCQ0MwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaAnrSj8tOvTuHsDY7NUPl3tWp
G36RUf3CJMnychww2u5+/75knYYqzaVG33IQPWN/ukE0QkyYN7rntgZSFhvgthxb
2nsfl8Ktra71cNkXTXiOKuaRJYEafsmKzrUcvN23eRr47QBS8U9eiLht+yLR39gh
Q45dPepqirP3F7Via2yx5Qizg7SjXCyoWXIJ2wvoQTzApN9KHYoj+DBZP72/UKs4
ADFpTuZj/6RjwRQZlzzJolDkJE3IfQCBxGqIqAFA6ZgRCwgI+ypAv1lRTKH7s+Ig
EaKBYXLvdizzXlw4wGcNjsqHyvYJluc97K5vSU/02Km8pK8WS5Q199WHnQ3bAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUYRd9V102syx/6gVymZnNWyG8wLUwHwYDVR0j
BBgwFoAUIhHiXCI0weWiv89/3KxUsBrzc70wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy
MzUyLzAvMjIxMUUyNUMyMjM0QzFFNUEyQkZDRjdGRENBQzU0QjAxQUYzNzNCRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0loSGlYQ0kwd2VXaXY4OV8zS3hVc0Jy
emM3MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZGE0ZDhiNC1h
MTU3LTQ2MzQtYWIxOC0zZWY5ZDA5ODIzNTIvMC8yMjExRTI1QzIyMzRDMUU1QTJC
RkNGN0ZEQ0FDNTRCMDFBRjM3M0JELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVW1j9CbhU7iOYJl6TK2/
l22VjVsXCF38NLZtXUfpgrGxt2ep0aLi8mT0+Z2Hy8+8Timd4bG4qWddpSTKwLC+
Chbmq7yJ46H1e+rCjRVAkLjxWDfXShHLRBbNaOJ9DBUt4BWNaIQ1IfXMlSaDxufw
robhiWkr6AJmdZUOJ4nO9UcJ0ZOKwZydN6Us86gx8RYNTSNogPd0dbIfAe1eJms9
KLS/cUTWSem520OSoxJOUpE9/3IKlhJ7TwBkPO2AZZVUq+B23ppT0nJmyWFPTyGM
AxOb1x9bmGZFz/b6FXNkSUzQAxemiSvbSUDMpBoKYnsDC9ophQUiqVJmJYZPIqln
3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:08 2025 by rpki-client