Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.mft
File: 4116FB807A3363A47402C507A15B8182FA00544C.mft (raw, json)
Hash identifier: SNO7ANWVzMuf1i/k/5rIbTOWIzX5xupkneOQg8Tdt7c=
Subject key identifier: C5:D3:EC:00:FB:6D:0A:68:27:78:0D:61:8E:39:06:4B:56:2C:74:34
Authority key identifier: 41:16:FB:80:7A:33:63:A4:74:02:C5:07:A1:5B:81:82:FA:00:54:4C
Certificate issuer: /CN=4116fb807a3363a47402c507a15b8182fa00544c
Certificate serial: 15754674BD56FED24A8F3C402EC209EBD49DE5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRb7gHozY6R0AsUHoVuBgvoAVEw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.mft
Manifest number: 07
Signing time: Sun 07 Sep 2025 10:27:00 +0000
Manifest this update: Sun 07 Sep 2025 10:22:00 +0000
Manifest next update: Mon 08 Sep 2025 12:58:00 +0000
Files and hashes: 1: 4116FB807A3363A47402C507A15B8182FA00544C.crl (hash: p2HYlxvQXwvKkm0mpPrfLD8h1Smxf8FNPqfUquB5Vmk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.crl
rsync://rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRb7gHozY6R0AsUHoVuBgvoAVEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:75:46:74:bd:56:fe:d2:4a:8f:3c:40:2e:c2:09:eb:d4:9d:e5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116fb807a3363a47402c507a15b8182fa00544c
Validity
Not Before: Sep 7 10:22:00 2025 GMT
Not After : Sep 8 12:58:00 2025 GMT
Subject: CN=C5D3EC00FB6D0A6827780D618E39064B562C7434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:d6:54:4c:94:09:13:14:74:66:b7:39:aa:
91:00:6d:f5:8d:4b:7b:50:f8:d5:97:3a:ad:b7:5d:
83:c9:ce:86:36:57:8d:ee:a8:b5:75:5c:9e:8c:e7:
a1:e3:bb:a0:1f:cb:42:c1:be:4c:75:eb:74:6c:36:
f0:03:12:69:c6:e9:7a:15:6d:1c:cc:10:9a:04:be:
df:ad:a9:e5:20:4f:81:7a:22:1b:14:d7:fe:3b:dd:
8d:77:f6:5f:93:b3:ba:c6:19:9e:5b:79:dc:21:f6:
cc:43:b6:fb:46:d6:09:2d:f3:d7:e9:86:c6:24:b6:
31:f6:58:e9:3a:5b:ba:c2:1b:0b:ec:f1:23:40:d5:
d0:9f:3c:93:cf:6e:2c:e6:0b:83:91:ae:10:a4:44:
a2:8e:c8:46:eb:5f:d0:34:fe:3c:91:31:30:c3:34:
25:4a:30:35:ea:7b:80:1c:af:68:fa:8d:03:47:54:
d9:5d:ba:db:e5:a1:a6:b8:dd:40:5b:d6:48:e1:bc:
28:f7:cb:11:da:0d:68:19:f0:a0:bb:99:75:77:31:
93:a4:3b:8c:ae:2a:fa:27:74:79:d2:ee:24:c5:96:
18:17:56:6b:7c:99:83:bf:d5:29:3b:8a:b8:ac:24:
8d:e8:af:89:97:5d:b2:27:f9:5d:44:c4:3d:ad:48:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D3:EC:00:FB:6D:0A:68:27:78:0D:61:8E:39:06:4B:56:2C:74:34
X509v3 Authority Key Identifier:
keyid:41:16:FB:80:7A:33:63:A4:74:02:C5:07:A1:5B:81:82:FA:00:54:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRb7gHozY6R0AsUHoVuBgvoAVEw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9a:a2:a3:19:3f:15:38:aa:1a:b1:ec:cc:e0:7a:91:b1:22:
9f:e2:b3:8e:f1:7a:d6:fe:3c:39:bb:dd:1d:85:3f:b6:47:40:
8c:ed:d0:df:3d:04:8f:04:1c:2a:f7:8c:5d:b6:d7:26:1f:88:
64:04:e2:0d:78:76:2d:fd:91:4e:b1:ba:46:c3:63:4c:2a:4c:
c4:4f:be:ff:cf:bb:87:82:e5:34:25:dc:31:a2:92:cf:00:b5:
ad:72:8c:02:6a:0c:bb:69:37:b5:91:49:47:76:93:68:de:11:
ae:74:c0:ca:17:ba:f8:08:49:6b:ad:26:90:75:52:52:2c:b5:
cb:e1:39:5e:e0:fe:fd:e9:9a:e8:c7:9b:be:ed:86:31:93:c6:
c2:92:f5:14:4c:e2:28:30:82:df:19:31:de:92:93:be:46:1f:
ff:d8:9a:8b:b3:b3:83:56:29:e9:36:4e:b6:82:8d:66:70:94:
cc:7f:a1:53:62:19:0e:67:1f:bd:df:4e:11:c6:4b:59:71:8b:
28:99:e2:f5:1f:37:ba:76:b9:f7:b7:4c:ba:e1:9e:4e:01:ae:
02:86:5b:a7:44:87:0b:75:be:08:c0:3b:65:ac:8d:aa:1b:f4:
bb:2d:52:ff:0f:e2:56:ab:74:75:38:d7:e0:1f:0e:c0:b6:1f:
b4:ef:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:54:14 2025 by rpki-client