Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier: LBTGrWZhKcYD0Ns3XbXwzl06grnKRq06+XlyaiFDP+E=
Subject key identifier: 72:D2:71:E8:A6:87:0C:2F:5E:5E:1E:ED:09:F4:38:92:0C:09:93:BD
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer: /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial: 38C50577A39D9114EFF1DB1BB3278F20EFC9D8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number: 0197
Signing time: Sat 06 Sep 2025 18:50:50 +0000
Manifest this update: Sat 06 Sep 2025 18:45:50 +0000
Manifest next update: Sun 07 Sep 2025 21:46:50 +0000
Files and hashes: 1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: szYadZvK7VFgDffMEGq8GVEXvJQSQf68alc24RzoOsk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 21:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c5:05:77:a3:9d:91:14:ef:f1:db:1b:b3:27:8f:20:ef:c9:d8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Validity
Not Before: Sep 6 18:45:50 2025 GMT
Not After : Sep 7 21:46:50 2025 GMT
Subject: CN=72D271E8A6870C2F5E5E1EED09F438920C0993BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:1c:cb:28:46:0e:83:2d:60:c7:a1:22:f9:
84:fb:f7:80:b7:30:aa:ec:7a:d4:31:cf:2f:72:a6:
36:50:b3:69:93:50:65:74:6f:9f:51:49:17:c5:d4:
2e:17:a9:50:98:c4:78:06:40:be:8b:06:d4:dd:d0:
61:c3:ce:72:e1:93:26:ed:1d:16:df:a2:71:08:fd:
0b:38:86:fb:94:dc:fc:91:0d:8c:6d:65:00:5e:75:
67:f5:66:4b:05:59:d1:61:6d:e6:24:07:b5:8f:60:
b2:da:71:73:d9:18:26:c4:9f:8d:84:04:88:dd:e2:
8d:aa:1c:4c:d0:1d:fc:03:83:bf:58:1e:b6:65:28:
ca:23:1c:90:b1:24:15:fb:e1:ab:6c:82:80:a9:e8:
42:52:c9:ca:8c:e7:b1:1f:e7:1e:10:56:2c:b0:0a:
01:60:2c:09:9a:25:47:98:dd:32:8b:47:82:52:a6:
63:48:ae:cf:79:dd:e1:8f:86:ae:d2:cc:8b:dc:77:
d0:4c:4a:32:a4:9d:79:e3:c9:0a:94:72:29:cc:d5:
b8:cd:27:51:6a:b8:a3:3e:a0:90:98:d3:4d:af:9b:
09:c8:b4:f7:03:8a:c0:08:e0:23:c6:02:c9:e1:0a:
51:01:2a:b5:ba:13:da:54:f8:66:65:00:bb:88:05:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D2:71:E8:A6:87:0C:2F:5E:5E:1E:ED:09:F4:38:92:0C:09:93:BD
X509v3 Authority Key Identifier:
keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7b:f4:ec:d5:bd:6b:9f:9f:6a:9b:ef:ef:a7:5c:c5:f5:83:
03:c5:77:f7:d8:82:92:db:0f:b7:3b:3d:b5:d5:90:64:02:b9:
66:24:fa:6d:4d:7d:ac:40:d2:74:3c:31:31:fb:52:19:e9:aa:
86:1d:b2:d0:11:25:e7:03:d5:b4:48:be:f1:68:43:70:5f:d4:
79:5c:14:7c:02:9e:15:87:f1:56:be:59:fb:80:2f:5e:a8:ce:
b8:45:e0:73:20:77:03:d5:72:0d:d0:1a:8d:d6:56:e1:ed:d2:
c1:9a:41:4b:ac:24:a6:1b:75:53:af:0f:0c:c3:ff:f2:ad:72:
38:2e:8f:ca:92:46:4f:1d:18:01:b0:7f:5e:db:17:36:3c:9b:
7a:2e:64:1e:0a:6d:1f:25:f5:92:09:e8:02:f1:b2:7c:b6:0e:
71:15:85:55:93:76:8a:9a:f4:c9:dc:83:f2:1a:06:26:87:af:
da:8a:e1:76:a5:1f:f3:9c:ad:bb:e5:74:b9:3a:cf:84:62:c0:
46:f0:a0:53:be:18:6c:5e:78:97:a3:25:c7:54:dd:aa:7f:5c:
66:47:33:c9:fe:83:21:1c:8a:2c:0d:4f:78:5e:fb:d0:ce:80:
ad:a9:d7:47:d4:1b:8f:0d:47:87:9e:ed:a7:5d:62:11:f7:b0:
0b:0a:e3:1b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOMUFd6OdkRTv8dsbsyePIO/J2LQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVkYmQ2ZTc5YzY4OWM1NmE4NGZhNDZjZDdjOWZhMzE1
MWRmZTBiYjAeFw0yNTA5MDYxODQ1NTBaFw0yNTA5MDcyMTQ2NTBaMDMxMTAvBgNV
BAMTKDcyRDI3MUU4QTY4NzBDMkY1RTVFMUVFRDA5RjQzODkyMEMwOTkzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVmBzLKEYOgy1gx6Ei+YT794C3
MKrsetQxzy9ypjZQs2mTUGV0b59RSRfF1C4XqVCYxHgGQL6LBtTd0GHDznLhkybt
HRbfonEI/Qs4hvuU3PyRDYxtZQBedWf1ZksFWdFhbeYkB7WPYLLacXPZGCbEn42E
BIjd4o2qHEzQHfwDg79YHrZlKMojHJCxJBX74atsgoCp6EJSycqM57Ef5x4QViyw
CgFgLAmaJUeY3TKLR4JSpmNIrs953eGPhq7SzIvcd9BMSjKknXnjyQqUcinM1bjN
J1FquKM+oJCY002vmwnItPcDisAI4CPGAsnhClEBKrW6E9pU+GZlALuIBcipAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUctJx6KaHDC9eXh7tCfQ4kgwJk70wHwYDVR0j
BBgwFoAUXtvW55xonFaoT6Rs18n6MVHf4LswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl
ODM3LzAvNUVEQkQ2RTc5QzY4OUM1NkE4NEZBNDZDRDdDOUZBMzE1MURGRTBCQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1h0dlc1NXhvbkZhb1Q2UnMxOG42TVZI
ZjRMcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z
M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMC81RURCRDZFNzlDNjg5QzU2QTg0
RkE0NkNEN0M5RkEzMTUxREZFMEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHv07NW9a5+fapvv76dc
xfWDA8V399iCktsPtzs9tdWQZAK5ZiT6bU19rEDSdDwxMftSGemqhh2y0BEl5wPV
tEi+8WhDcF/UeVwUfAKeFYfxVr5Z+4AvXqjOuEXgcyB3A9VyDdAajdZW4e3SwZpB
S6wkpht1U68PDMP/8q1yOC6PypJGTx0YAbB/XtsXNjybei5kHgptHyX1kgnoAvGy
fLYOcRWFVZN2ipr0ydyD8hoGJoev2orhdqUf85ytu+V0uTrPhGLARvCgU74YbF54
l6Mlx1Tdqn9cZkczyf6DIRyKLA1PeF770M6AranXR9Qbjw1Hh57tp11iEfewCwrj
Gw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client