Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: IDNWQR0TrdVBAfXP2Ol1MmhWYGdsm2EPYmH/mBsGd20=
Subject key identifier: 16:F6:7E:71:15:6B:98:4F:9A:F2:07:D0:C8:D0:06:EC:E8:CD:13:A9
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 38A4974AFC2132F1FB5F0C01E1A2C114877BF744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 0192
Signing time: Tue 11 Nov 2025 06:29:27 +0000
Manifest this update: Tue 11 Nov 2025 06:24:27 +0000
Manifest next update: Wed 12 Nov 2025 07:59:27 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: Aoq+KXPnZo+/htisr3e08EWo1ruiHVGD5dPFubVHFpQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a4:97:4a:fc:21:32:f1:fb:5f:0c:01:e1:a2:c1:14:87:7b:f7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Nov 11 06:24:27 2025 GMT
Not After : Nov 12 07:59:27 2025 GMT
Subject: CN=16F67E71156B984F9AF207D0C8D006ECE8CD13A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:84:ea:7b:8c:39:ce:5d:cf:68:ec:c9:ba:
d4:f9:0f:7a:49:c1:28:8c:6e:e4:ca:60:fa:cc:25:
59:5f:78:c6:54:0b:11:53:1c:32:99:db:2b:e2:09:
8d:c1:bd:de:9e:29:67:75:9e:84:67:66:5f:2b:f4:
91:97:3a:c3:67:bf:50:90:d7:cb:68:6f:c4:70:e3:
6e:05:0f:86:e8:bd:00:12:12:ce:dd:49:61:de:c8:
59:0d:12:4b:ee:75:84:96:f6:3e:26:86:40:dc:4a:
e7:20:54:35:46:35:70:40:cd:1f:1a:67:a2:32:43:
9a:77:2f:ad:27:ec:ec:de:9a:3c:02:9e:ea:98:f0:
54:03:e3:57:3d:84:89:a9:89:94:ae:e0:44:85:0b:
ce:45:34:84:7b:c5:2f:6f:33:08:45:11:9d:83:bf:
5f:d1:e6:cd:d6:34:7b:4f:fb:18:f2:95:64:da:d5:
10:30:3e:04:f7:1d:1b:39:5b:cb:d5:0e:72:4c:0b:
90:41:a2:a8:c9:6b:92:11:07:15:a0:05:51:ec:3d:
ad:82:0b:9b:9f:f0:7a:c2:45:40:15:34:b2:51:94:
18:08:3f:76:cb:a5:53:46:63:ad:e8:4f:27:58:db:
df:7c:13:06:6d:04:a3:31:8c:c4:06:94:e9:ff:43:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:7E:71:15:6B:98:4F:9A:F2:07:D0:C8:D0:06:EC:E8:CD:13:A9
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:64:6c:aa:23:b5:a5:a3:cf:bc:b0:68:69:60:e0:6d:63:6a:
23:9f:34:d8:62:a5:9e:02:d7:2c:ba:f6:d5:23:d5:d9:7b:89:
82:e7:06:09:30:67:c9:7b:99:35:e1:40:ca:eb:26:00:10:14:
c1:7e:42:b6:6e:26:f2:9e:e0:c7:58:2e:6b:62:4c:d5:fd:e3:
da:d5:89:21:bb:e0:a1:05:25:02:0e:66:16:3a:98:8a:96:c9:
cf:e3:d0:6c:66:66:f2:2c:a2:30:20:56:0c:39:d6:73:3c:c5:
64:85:4b:f6:37:7f:73:b8:7b:5f:54:86:09:02:66:1b:7d:55:
f4:f8:70:3e:a5:0d:9a:1f:ec:a2:60:35:dd:4a:40:32:51:16:
78:55:10:9c:4e:0d:ab:e4:d2:be:6a:67:1e:02:1a:d9:4a:ff:
00:d8:f5:26:f1:f1:a1:ab:e9:e7:64:69:0d:5f:b6:9a:d6:54:
bb:32:54:b4:40:6e:10:b1:c1:4f:b5:42:ab:9d:49:92:34:97:
81:b7:aa:69:09:ee:c0:6e:54:36:b4:4e:b5:8c:c0:c6:e5:ce:
da:1e:da:d6:37:bc:99:20:3d:ad:0c:39:94:0e:83:e0:4b:d4:
93:f8:10:96:15:89:42:d6:c6:0d:41:16:50:d2:d2:53:8d:e7:
f1:cb:b1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:10:44 2025 by rpki-client