Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: fVLEGazADU0XWOYOhr4wFVRUC+oycp1ckM2dQZb0j6A=
Subject key identifier: D9:04:BB:89:CF:57:A8:B1:E8:FA:76:E1:65:4E:EA:FD:6C:AF:0C:C6
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 7FBABA83700F4E362078687048C3C3A85B34D1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 013B
Signing time: Sun 07 Sep 2025 02:09:17 +0000
Manifest this update: Sun 07 Sep 2025 02:04:17 +0000
Manifest next update: Mon 08 Sep 2025 04:12:17 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: iZ78Irr6+RbK2Me+fdXYdE7FfR7sh2rhl4k+N7P3xpA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ba:ba:83:70:0f:4e:36:20:78:68:70:48:c3:c3:a8:5b:34:d1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Sep 7 02:04:17 2025 GMT
Not After : Sep 8 04:12:17 2025 GMT
Subject: CN=D904BB89CF57A8B1E8FA76E1654EEAFD6CAF0CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:44:3d:4e:40:a3:79:71:28:22:1e:41:dc:
24:28:26:06:a6:d7:ac:4d:f4:4a:8b:2a:36:07:d1:
43:14:28:6f:a3:33:a4:db:76:94:5e:91:55:b1:7f:
87:92:0a:0d:47:89:5e:20:0f:57:e7:2d:c1:a8:e3:
ce:c3:0b:eb:9f:e9:99:bc:cf:c8:c3:fd:05:20:62:
7c:e9:17:81:fb:18:ce:33:bc:fb:23:2a:3d:ad:32:
b0:46:67:15:14:6a:f7:9e:bd:d2:1f:ee:ec:cc:84:
a6:ca:26:1a:45:e7:f2:90:89:6a:21:c7:dd:ae:87:
f7:88:6e:b8:5a:01:30:fe:49:5a:fe:72:a5:cb:75:
f0:f7:23:5d:76:ea:fe:e0:d5:f6:82:8e:b0:38:bf:
22:05:cb:f8:1e:77:e9:0d:cc:9c:1e:c5:07:17:fd:
1f:e7:b8:05:99:94:6b:1e:39:b3:f8:85:a4:c1:2a:
9f:96:4e:98:7e:3f:b3:24:0a:aa:90:ac:f5:91:00:
05:ab:c9:54:1f:e3:d0:3a:73:e4:ce:de:42:f1:a7:
63:6f:8b:a0:10:6a:12:c8:34:90:c7:cb:bd:c5:f0:
8c:59:2e:51:e6:6e:38:58:ba:c8:f4:07:70:32:ea:
a9:18:9e:a4:08:47:5f:d8:03:ad:e8:11:75:16:18:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:BB:89:CF:57:A8:B1:E8:FA:76:E1:65:4E:EA:FD:6C:AF:0C:C6
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c2:61:9a:78:b0:7f:de:63:62:46:08:21:16:6e:c5:57:c2:
14:8c:a9:ba:bb:6c:12:51:9c:9b:83:7b:93:3f:65:86:ad:fd:
56:4f:66:5b:09:c4:fe:91:d4:c4:f4:ab:2f:f4:22:0a:06:81:
d8:72:60:70:76:f2:75:10:58:84:9a:7e:46:7b:25:c3:c6:11:
6e:18:68:36:3c:cc:e8:72:13:97:70:24:40:3e:40:a2:02:4f:
b8:62:0b:13:3c:0d:f1:94:cb:c6:05:ce:7f:d8:99:53:b4:d4:
bf:64:85:27:d3:3b:c6:cb:00:b3:d7:f2:4b:04:08:31:bf:16:
3f:7e:4e:25:21:e0:fc:ed:d0:46:bb:61:56:df:68:97:5d:2c:
07:db:6e:b3:79:dd:bc:84:8c:4f:88:69:82:06:28:0d:fe:50:
96:34:e5:56:14:63:10:42:1d:8b:84:fd:bc:46:37:fd:4d:e1:
99:60:b4:f8:34:1a:fc:22:73:8c:6c:67:4f:8d:c8:fa:2e:3d:
ef:8b:ab:b7:23:62:25:4d:d9:cc:b1:84:b8:8c:14:1d:3a:94:
44:2b:0d:43:28:35:ed:34:4d:d5:16:d9:98:7f:5c:49:92:fa:
e7:50:2c:05:5a:f0:db:5c:4a:ab:83:25:2d:d0:34:0c:b8:b6:
00:ff:62:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:38 2025 by rpki-client