Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: HfwMvq7692rx5uKU2Bojs5Vtud4yxMX/zAtgzFk0Vd0=
Subject key identifier: 40:16:44:EE:93:F4:A3:96:01:D3:5E:47:5F:B5:A1:75:BD:81:00:32
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 6A9FE84D45E10553C4F5B7BD7443EE35D32A1A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 04D5
Signing time: Mon 10 Nov 2025 23:00:43 +0000
Manifest this update: Mon 10 Nov 2025 22:55:43 +0000
Manifest next update: Wed 12 Nov 2025 01:54:43 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: M/XIAaTl4sVIqxZF5WjRoRmtTXSexk+qVSYQU4zyHns=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9f:e8:4d:45:e1:05:53:c4:f5:b7:bd:74:43:ee:35:d3:2a:1a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Nov 10 22:55:43 2025 GMT
Not After : Nov 12 01:54:43 2025 GMT
Subject: CN=401644EE93F4A39601D35E475FB5A175BD810032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:2f:c3:94:6b:5c:63:6c:00:1b:f2:64:ea:
0c:23:ed:2d:0c:5d:bd:16:bc:52:b1:1b:fd:dc:9f:
6f:63:67:f8:f1:ff:f5:76:9e:d1:48:d1:36:70:1a:
0b:bd:6d:9c:8d:9b:5e:4d:76:79:b9:9d:af:dd:be:
26:05:49:d8:68:47:22:82:40:04:55:89:9a:43:69:
8d:fd:f3:ce:db:77:e0:fc:c6:ad:f5:66:7f:31:25:
14:db:ba:b0:b1:86:15:20:0d:9f:b8:31:94:15:00:
76:41:35:0e:5f:a7:1e:ba:b0:b4:ab:fa:aa:0d:7f:
3e:cd:b5:d7:67:50:6a:d5:77:eb:b0:a5:49:3a:17:
c9:77:04:4a:13:80:86:22:ae:61:28:e9:c9:13:19:
b0:9b:a3:d9:55:fc:60:d0:d0:ba:36:a2:37:e2:ca:
09:24:22:48:9d:e6:38:da:74:9f:0d:45:a0:50:ab:
57:e7:89:a4:36:9e:13:52:95:bd:6d:d3:e1:20:f3:
8b:8c:9f:ad:fd:b7:90:c4:ee:13:77:fd:e1:72:a6:
48:b0:ee:76:ab:12:2f:2a:0d:31:4b:41:b6:5b:80:
ee:49:28:9d:fb:22:3c:e5:d1:ef:d1:40:87:e8:9c:
5f:9a:f3:8a:a9:1d:fe:96:ca:0a:af:8b:f7:0f:32:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:44:EE:93:F4:A3:96:01:D3:5E:47:5F:B5:A1:75:BD:81:00:32
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4a:b4:22:4f:f3:ae:b5:df:31:77:c9:92:2f:f4:5b:21:ad:
ae:e0:d1:a4:64:f3:55:77:67:2d:41:4d:fb:b3:5b:d6:3e:6c:
2b:f6:ca:d2:b5:96:19:3d:6b:80:d8:df:a6:8c:f9:3e:d4:de:
e6:3a:17:16:d0:5b:c2:1a:4f:af:a0:92:a8:a2:3c:16:98:67:
f3:ba:df:3c:34:44:f6:df:7a:97:9b:0c:8b:a8:0d:46:8c:bb:
95:df:fe:d0:e9:eb:e0:95:4c:e0:66:4f:b7:af:b8:ad:06:3f:
8c:3f:c7:dd:0e:6c:11:ef:51:22:52:54:35:08:fa:e2:48:88:
1a:07:02:66:96:0a:d2:23:0a:b4:6e:76:98:0e:ab:a4:c3:05:
1c:88:98:80:1d:8f:d9:bb:6a:12:9c:38:72:e8:31:d0:97:66:
66:9d:c9:e8:97:45:b7:bd:49:03:2c:8c:63:77:2f:d5:68:30:
23:89:85:bb:0d:3e:bf:84:14:6c:c5:76:cb:aa:db:40:c4:ad:
47:fd:ea:48:ff:db:5d:5a:38:7a:21:ec:46:14:10:27:22:c3:
e6:04:e9:fa:82:72:51:34:1d:1a:7b:d3:eb:b2:18:50:f3:96:
36:22:0b:56:1f:2f:cb:90:74:63:9f:d1:1b:1d:a8:35:62:21:
f7:91:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:32 2025 by rpki-client