Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File: 193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier: ByXSz2IOmg+RMq0dq4RUqUl/Xe29XujH0t8blOFlqqY=
Subject key identifier: 2C:D6:94:C2:D4:61:EC:DA:29:22:3B:CC:EF:0A:4A:EE:FF:B6:CC:66
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer: /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial: 6D262104B10766012D611D0986672343804D1125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number: 026C
Signing time: Tue 11 Nov 2025 07:58:17 +0000
Manifest this update: Tue 11 Nov 2025 07:53:17 +0000
Manifest next update: Wed 12 Nov 2025 09:51:17 +0000
Files and hashes: 1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: +2kUUKrFx6gUXc6tCKq3NbV5j4hToWcuu6z5k6qiZ/8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:26:21:04:b1:07:66:01:2d:61:1d:09:86:67:23:43:80:4d:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
Validity
Not Before: Nov 11 07:53:17 2025 GMT
Not After : Nov 12 09:51:17 2025 GMT
Subject: CN=2CD694C2D461ECDA29223BCCEF0A4AEEFFB6CC66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:e8:7c:56:39:13:e5:dc:df:55:27:00:c3:
0a:11:f9:db:26:0d:c4:e7:d3:1c:27:9f:78:53:f6:
7b:ad:12:bb:82:3f:61:42:e9:a3:35:71:74:2e:8a:
9e:17:cb:e6:a6:88:7b:ad:a6:4a:3f:6d:44:4b:c7:
8f:f4:29:87:84:c2:59:bb:af:10:de:db:04:0f:ba:
67:1b:8d:ac:f8:59:06:83:76:5b:f2:3f:e3:b8:06:
1e:15:e4:08:fe:fc:c1:c1:1c:7a:3c:7f:ca:74:04:
d5:20:75:f2:88:79:9d:3a:63:90:0d:54:b8:f0:55:
6b:63:6e:07:dc:6a:53:46:af:93:18:ff:07:37:b5:
73:8b:50:00:12:90:80:98:80:43:67:94:69:9e:cc:
69:a0:e3:6b:a9:ac:a3:b1:79:c3:cc:c0:f9:6a:f2:
31:f8:31:84:92:94:b7:a0:11:84:f7:1a:96:eb:2b:
c2:94:ec:ce:b1:3f:c2:84:90:51:49:ab:ad:26:6c:
c3:8e:e2:0e:3b:d8:94:db:76:44:42:4c:44:b1:02:
c1:35:50:5b:cc:89:e5:17:0c:5e:f2:3b:c1:d4:8e:
6c:a5:c1:14:43:2b:4b:9c:49:6f:0b:39:be:42:a4:
0c:ae:12:a7:1e:93:08:3c:b7:67:10:21:95:9c:aa:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D6:94:C2:D4:61:EC:DA:29:22:3B:CC:EF:0A:4A:EE:FF:B6:CC:66
X509v3 Authority Key Identifier:
keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5b:d4:dc:70:72:a1:ab:c4:b2:ac:8e:8d:f4:b8:af:b9:f3:
46:f7:54:3d:b6:88:16:d2:f7:48:5e:d8:f8:b8:1f:8f:d8:30:
07:45:da:c3:3b:de:83:0e:e1:8a:9a:60:53:43:12:6a:19:8d:
67:38:f2:6b:9b:9c:fd:8a:6b:f6:f1:c5:16:88:b9:38:b4:72:
45:5e:aa:bb:6e:e8:1c:30:76:9e:3a:15:b0:47:ea:a2:27:3d:
a0:75:d6:dd:e0:35:39:f6:8e:f3:7f:76:09:cb:ae:c8:49:c9:
51:7a:67:a7:5c:b4:24:00:84:45:c1:cf:67:3d:f5:39:7f:b2:
24:dc:d4:85:2e:cb:08:dc:93:5e:dc:c0:00:8a:f0:94:36:11:
ae:92:3a:ce:50:d8:f3:c8:64:68:c5:ce:f8:0e:eb:2c:a4:56:
f2:1f:76:17:64:55:db:37:81:4b:b4:86:6e:c2:23:0e:d7:87:
5b:0a:cd:bd:ce:ca:e9:99:b6:b0:0c:61:c9:8c:df:88:2a:3b:
64:a5:7c:33:c2:95:43:7a:1f:c8:dc:3e:74:84:4c:f7:11:37:
ce:01:ef:75:7c:54:ef:1c:e4:ba:75:cd:64:82:ed:56:4e:1d:
37:56:a2:be:e4:66:8b:bb:a9:37:f4:15:7d:31:cd:00:4a:c0:
64:d1:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:24 2025 by rpki-client