Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: GuSTYkfxHq5jsS71KfSJtc66uRYvIZaTGkluGkFXlG0=
Subject key identifier: 89:30:84:C2:4E:3E:0C:46:FD:F0:0C:8C:58:8F:04:67:CB:CD:C5:85
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 0CCD9CB37F0E8B199DD80A664E6BE94F6643F495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 023F
Signing time: Mon 10 Nov 2025 23:09:01 +0000
Manifest this update: Mon 10 Nov 2025 23:04:01 +0000
Manifest next update: Wed 12 Nov 2025 02:40:01 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: cZljSol0nSfA+IU4L7kvUjLYmNT30SQgx0k9vnDOokg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cd:9c:b3:7f:0e:8b:19:9d:d8:0a:66:4e:6b:e9:4f:66:43:f4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: Nov 10 23:04:01 2025 GMT
Not After : Nov 12 02:40:01 2025 GMT
Subject: CN=893084C24E3E0C46FDF00C8C588F0467CBCDC585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:e0:7a:d3:b9:a1:b2:89:d1:43:8f:12:b2:
44:f5:14:0c:59:b4:7e:b8:24:75:70:bf:d1:5e:30:
36:41:c1:1a:5c:75:14:89:7e:56:70:d0:71:50:2b:
29:f0:78:14:3d:d4:c1:e2:9c:95:a5:e0:c9:68:d5:
6c:e2:6a:5c:31:65:4e:b8:d0:62:d3:5a:2e:65:6d:
e1:11:93:2c:64:9e:f1:67:59:83:66:1e:dd:3b:82:
10:3c:d5:d1:5c:90:c7:5c:84:ec:41:d2:29:51:3a:
39:d6:08:0a:1d:09:df:91:f6:34:db:14:30:65:73:
c2:01:71:2e:69:68:58:d0:e2:21:9f:0f:12:b7:ae:
ae:e7:92:c5:ff:f7:98:ed:f1:b0:44:d0:b6:66:1a:
45:20:15:8c:5e:e2:28:bd:07:a1:54:1d:67:da:08:
98:f4:8c:59:47:2f:0b:a3:15:94:19:c6:77:04:ca:
af:d1:0d:9e:4f:bd:36:f2:dc:e9:9b:cb:ff:8f:36:
44:cb:81:d1:f6:93:70:7b:b5:91:2b:b6:ea:21:5e:
91:d1:22:98:85:62:a3:dd:de:3a:10:58:6e:8a:be:
dc:bc:f5:b6:da:11:cd:75:1c:78:5f:b1:8e:e8:b6:
80:75:27:07:b7:2c:6e:e7:b1:0c:ec:9d:48:fa:da:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:84:C2:4E:3E:0C:46:FD:F0:0C:8C:58:8F:04:67:CB:CD:C5:85
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c9:bd:ca:a7:ec:c3:14:7c:99:36:31:6a:b3:12:54:cf:07:
3b:80:b0:1e:0a:6a:ba:1e:88:80:0c:45:e1:51:0e:9c:30:11:
2e:c4:28:bd:29:b1:40:6c:3c:e1:6a:92:2d:93:15:45:1f:26:
10:2a:e8:79:14:27:45:f1:83:40:ce:07:17:53:47:79:b6:e8:
a3:7b:ab:83:f7:24:36:d7:bb:13:4b:06:21:77:03:d3:a1:36:
3f:37:51:af:be:cc:85:02:a6:30:3c:bf:f4:cd:5b:e7:69:53:
c9:7a:37:66:21:0f:27:f1:66:26:85:01:ac:6b:f4:33:b1:6c:
2d:b2:ce:86:ab:77:f3:e7:ae:bb:7a:74:5d:d3:80:e9:91:69:
b5:7b:90:e5:94:db:31:72:aa:af:da:d3:1a:5a:b4:13:0e:77:
de:3c:1d:6a:6d:07:0c:a2:81:22:fd:20:73:2e:ee:8b:1d:b4:
ee:4e:99:5f:13:d3:5c:db:d3:64:9e:87:43:45:30:db:46:26:
14:5f:b1:40:40:da:c6:8d:71:b0:dc:9f:fd:88:0c:45:69:2c:
ad:56:b0:16:ad:24:90:3f:52:89:43:fc:4c:ce:b7:da:34:30:
0c:25:02:d4:5b:2a:61:4a:71:46:09:a8:21:0d:04:35:cf:88:
f1:ab:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:02:04 2025 by rpki-client