Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: tpLhZk4kxsfFits2mwKw58TfALujZo8A9MbkcA8ZZc8=
Subject key identifier: EE:34:7F:9A:9C:30:D3:39:59:D6:4D:7D:20:DD:5F:B0:66:A1:A3:CF
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 330501FC3530F451B84C7BD3D6CD5A723A8ED578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 72
Signing time: Tue 11 Nov 2025 00:39:43 +0000
Manifest this update: Tue 11 Nov 2025 00:34:43 +0000
Manifest next update: Wed 12 Nov 2025 04:11:43 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: GJ/X12M8cBPTIQbTESfdQ6TSNndQj60zeAnk2lENwNc=)
2: AS214955.asa (hash: pJ7+xLkRqPDuQTZ4CjdQziRCbw0R4LvxfMvSG4sXOdg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:05:01:fc:35:30:f4:51:b8:4c:7b:d3:d6:cd:5a:72:3a:8e:d5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Nov 11 00:34:43 2025 GMT
Not After : Nov 12 04:11:43 2025 GMT
Subject: CN=EE347F9A9C30D33959D64D7D20DD5FB066A1A3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:48:eb:0f:ed:4c:dc:88:1f:e4:5e:82:52:
62:af:3b:03:db:2b:38:05:da:80:be:ef:ee:37:59:
6b:8a:75:57:38:76:a7:40:2f:6a:3a:a8:86:13:34:
0f:1b:04:27:55:da:87:33:8b:8e:f5:f7:6f:23:25:
32:25:9e:48:7a:47:c1:0d:ee:a9:dc:5b:cf:f0:4b:
9b:81:0c:a8:8c:54:49:08:1b:eb:81:42:1c:4b:05:
17:04:0a:88:a8:9c:af:1c:5e:50:40:5c:62:4f:78:
d0:fd:ef:d0:38:09:cf:8c:df:06:d0:4a:9d:44:05:
2a:40:d0:2b:78:3b:06:35:8a:7d:38:4e:27:84:64:
8a:84:95:2f:24:07:1b:6a:be:8e:bb:f0:9f:a2:57:
f9:7b:2e:47:e7:28:30:cf:d0:69:20:76:87:3f:1b:
de:87:95:0b:90:01:c2:7a:b5:ed:a4:d6:e5:18:9a:
78:18:81:5a:80:0f:fd:d8:f1:c6:06:93:25:06:4f:
c7:0a:bc:98:9f:39:60:63:1c:77:40:ff:18:7f:9d:
91:8a:7a:5c:c7:b7:fe:c2:4b:ee:de:5f:86:fa:f6:
b6:e7:cf:d6:79:f3:bd:fd:f7:fa:3f:3d:f1:e7:70:
ca:80:1b:85:ac:21:3b:11:c7:7e:c6:e2:a5:90:fd:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:7F:9A:9C:30:D3:39:59:D6:4D:7D:20:DD:5F:B0:66:A1:A3:CF
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:da:92:32:ce:fd:84:76:5a:d7:ba:3d:8a:a6:49:56:1c:c1:
fb:32:7e:18:24:21:05:e9:3b:b9:ca:1b:17:a7:6b:3c:63:8b:
02:05:7c:19:5a:0d:57:70:69:10:d6:2c:34:01:05:a6:c3:1f:
e8:34:95:5a:80:f3:68:e3:39:53:95:ac:cf:0b:d9:c6:93:2e:
fb:41:0f:2b:c2:a6:29:e3:61:2f:f2:99:ee:e4:4a:9f:a4:bf:
b9:a9:b6:17:c5:ed:0a:56:e0:8d:d3:54:92:73:5f:ae:83:58:
b4:d3:12:f0:9d:96:e7:14:79:1d:f2:7c:8f:2c:3b:29:cf:2e:
66:89:ef:f0:83:5a:4e:61:e8:bc:c4:d6:44:2c:0c:97:fd:40:
56:04:59:80:85:b7:04:e5:45:b0:50:c3:13:71:7d:d5:f8:bd:
f9:0d:e5:d6:71:6c:1d:16:46:99:0d:ed:e7:8a:60:e9:10:26:
b1:93:ec:19:0f:79:f0:42:59:cb:d2:67:2c:ce:f2:90:2f:84:
5b:0e:af:66:19:ed:3c:e1:28:68:ad:67:3b:65:62:8c:78:b3:
0a:d8:8e:93:4e:dd:12:8a:82:95:5e:91:04:d5:cd:b3:db:3f:
82:fc:61:6f:7f:3e:ca:d7:d1:8b:c6:8b:40:d4:22:08:1f:81:
c3:b1:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:08 2025 by rpki-client