Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: 4O1Nt6LHiITopDNL3Q+03k2TyMB3j/0b8lpf67/tjA4=
Subject key identifier: FC:22:D9:80:0D:76:E8:92:EF:8C:79:15:F5:1B:C6:48:79:1F:F7:D7
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 73D4F7322454C0AC6DE907D6D478D1B78CF9D32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 019D
Signing time: Fri 06 Jun 2025 17:11:33 +0000
Manifest this update: Fri 06 Jun 2025 17:06:33 +0000
Manifest next update: Sat 07 Jun 2025 18:20:33 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: DCKC4MgY5M87AFfJ2lTxV/HOoP0/ZufG9nar61dYnww=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d4:f7:32:24:54:c0:ac:6d:e9:07:d6:d4:78:d1:b7:8c:f9:d3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: Jun 6 17:06:33 2025 GMT
Not After : Jun 7 18:20:33 2025 GMT
Subject: CN=FC22D9800D76E892EF8C7915F51BC648791FF7D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:21:f2:0c:8f:09:a6:03:ad:82:3d:cd:1e:
f1:01:44:f0:fe:cc:61:08:e0:2a:65:9a:a9:f0:55:
3f:65:1f:08:6f:15:09:18:cb:d5:15:f1:a5:0b:81:
81:65:0f:b6:53:85:a6:fc:0e:b6:80:fd:65:33:6a:
22:cc:de:74:85:2b:93:92:56:c9:ad:72:d1:49:c0:
08:52:70:a7:fc:6c:15:dd:87:c4:62:5a:32:40:ee:
ab:fe:7a:cf:3a:70:1f:5f:eb:93:94:76:ee:80:bf:
00:cb:90:ec:62:aa:63:d5:25:8b:5f:fc:47:32:89:
67:d4:b1:4c:39:e4:f7:88:d5:49:7f:d1:c3:a7:38:
ce:7e:4c:38:55:26:e2:25:9e:9a:36:b2:3c:9b:7f:
56:9e:7b:c2:cb:ec:6e:6f:ee:e6:01:c5:51:de:1e:
4e:01:4a:3d:eb:0e:3b:47:91:09:4a:3f:6e:2e:9a:
ce:1c:54:01:57:0c:37:ba:f0:55:c3:ce:b4:6d:35:
27:76:39:23:74:e1:56:0f:d4:90:8a:aa:23:2c:06:
22:0b:75:94:f6:98:87:59:bb:e0:d0:b1:16:51:f5:
2f:4e:c5:3f:a7:55:01:3f:99:b5:50:b7:83:2b:21:
ee:da:ab:c2:64:7b:e5:42:39:6b:5e:a7:ca:96:24:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:D9:80:0D:76:E8:92:EF:8C:79:15:F5:1B:C6:48:79:1F:F7:D7
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:05:94:78:24:a5:ed:2d:92:e7:d3:71:30:ee:2a:75:a3:
10:52:62:6c:41:81:62:0a:c0:44:1a:59:11:4d:a0:9e:5e:2f:
be:1e:3c:13:d1:8d:db:ca:5e:87:c0:42:a4:09:8d:2a:ab:71:
88:23:20:a8:51:a4:94:1f:52:b7:22:fd:c9:55:11:95:95:82:
1b:cd:39:6c:bf:46:d2:d0:90:22:d0:b6:70:bb:5c:f4:7b:43:
1c:fe:17:78:f8:3b:1e:e3:f8:1d:64:d2:24:17:6f:d9:f3:33:
4d:97:84:c6:3c:f2:b5:b9:44:d5:b9:7d:79:3a:de:ff:7e:b3:
f2:76:73:d3:3a:6a:5d:2d:08:e8:79:28:ab:0a:27:08:6b:8f:
68:a6:e1:bb:d0:3b:7a:64:28:cd:a2:a5:70:d2:1b:92:d2:89:
e2:ed:46:e2:c0:03:ee:6d:cc:34:e5:f5:2c:c4:48:bd:04:ef:
05:29:20:3e:f9:0d:f9:9f:3a:35:79:93:d3:48:7d:cf:6e:41:
23:1f:e9:e2:e3:2b:5c:13:25:6a:48:dd:62:c7:68:02:89:f3:
4a:3c:80:fd:c7:d4:02:34:68:00:60:f9:f7:50:f8:b1:f3:62:
e5:c9:3f:0f:f8:f2:ef:b9:2f:39:41:22:43:17:24:0e:07:a5:
9d:24:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:52:38 2025 by rpki-client