Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier: SBbFtGp3q3Q88aPQcgKey1V0B72D6fW8ho+px+PPUBI=
Subject key identifier: C8:78:B2:9F:AC:C3:E8:B4:CF:27:CF:83:23:CD:46:ED:FA:9F:3D:E9
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 20B79A9FB3B043C3482077D7097AFCA25E26EA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number: 0298
Signing time: Sat 07 Jun 2025 08:17:33 +0000
Manifest this update: Sat 07 Jun 2025 08:12:33 +0000
Manifest next update: Sun 08 Jun 2025 08:18:33 +0000
Files and hashes: 1: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: ZS3z1I3Sl16PV3st5nM5ztOtfnYEYak54XgNLe6PBoM=)
2: 3138352e33312e3230322e302f32342d3234203d3e2037303138.roa (hash: iL7YLdjFSsy+StKeV2OynMplvfVvVqa5nzn9JGMln1g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b7:9a:9f:b3:b0:43:c3:48:20:77:d7:09:7a:fc:a2:5e:26:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Jun 7 08:12:33 2025 GMT
Not After : Jun 8 08:18:33 2025 GMT
Subject: CN=C878B29FACC3E8B4CF27CF8323CD46EDFA9F3DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:55:7c:18:d8:4c:a6:78:e2:00:d7:82:4d:
b1:b8:b4:f2:06:cd:81:4d:4e:a2:05:c2:4b:4e:6c:
c9:6d:2e:93:cf:fa:cf:e6:62:23:c9:78:34:7b:49:
9a:c5:97:28:45:9f:95:91:20:5a:1a:a1:ea:b1:ec:
28:26:75:82:4b:e9:7c:9a:4c:3b:84:be:c7:7a:17:
6b:53:cf:4d:b7:1e:f1:40:84:58:e5:f7:08:48:d7:
c5:f5:98:98:36:24:4c:c0:3a:46:08:41:09:16:d4:
97:fe:e0:b2:e2:a9:fc:12:2e:f1:2d:46:c9:80:d2:
91:21:3e:f1:f1:85:df:4f:9e:8d:b5:20:01:58:55:
1b:69:3f:64:63:e6:79:a7:b3:5a:cd:ce:c5:15:a9:
58:6e:f8:19:32:e2:04:70:d3:84:fa:ff:3c:ab:e1:
a0:d4:99:d1:fc:a3:fe:69:1b:df:33:bf:47:07:04:
97:3f:94:e7:c7:58:2a:d6:74:9d:67:f0:5f:90:90:
c7:b9:44:e3:ea:d0:49:1c:f9:8f:0f:c1:17:55:1a:
2e:fb:a5:c9:18:73:94:a2:f3:e2:53:6b:d6:1f:ad:
83:51:cc:d1:b6:e6:7c:cc:a0:33:52:8f:90:07:a4:
e3:ea:07:cf:16:69:35:73:8d:61:9d:1c:5f:27:4d:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:78:B2:9F:AC:C3:E8:B4:CF:27:CF:83:23:CD:46:ED:FA:9F:3D:E9
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:23:5b:56:c8:7c:eb:01:8e:d7:3a:ae:43:23:95:8e:98:66:
52:21:2d:ee:12:25:d4:a4:58:b8:80:57:c5:11:9f:b3:59:55:
10:f3:3a:64:be:00:96:60:d7:08:5e:48:28:12:65:c2:95:1b:
a7:0c:a5:82:16:f0:15:1d:b9:c3:9d:3d:d2:9c:d4:45:91:68:
94:01:04:ac:63:17:01:a9:26:dd:97:f8:cf:8a:9c:8e:ee:c3:
1e:32:52:25:00:43:ab:45:a6:f4:53:ee:31:cb:09:31:da:63:
f0:e5:93:ce:c3:39:c3:18:fa:b3:ee:0d:a1:e2:89:03:33:8e:
30:eb:7f:5f:bf:a9:b2:08:8a:76:fe:51:d1:a3:18:ff:1e:bf:
f2:c8:c4:46:ed:ac:3e:47:17:f8:2f:aa:5a:00:d2:2e:42:1f:
60:9d:c5:f2:a7:6a:f5:68:ae:1e:27:34:98:f6:85:a4:22:7e:
6b:09:26:41:9b:bd:eb:7a:b0:1e:ca:33:dd:13:d9:9c:73:e6:
6f:1e:00:bd:f2:e1:a3:c7:2e:4c:d4:65:02:9c:40:cb:2a:5e:
9a:8a:c4:c6:12:62:11:fa:68:af:f5:a7:b4:c1:9c:4e:82:a5:
f9:03:ea:10:f3:8c:2f:3a:2d:d6:a6:93:4d:28:1a:ec:62:81:
f1:c0:4a:cc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUILean7OwQ8NIIHfXCXr8ol4m6oAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ2NDA0NWRhNWJlZDA2ODdkMTVjYmRhNjdhMDRlYjg3
YThmYjAzZTAeFw0yNTA2MDcwODEyMzNaFw0yNTA2MDgwODE4MzNaMDMxMTAvBgNV
BAMTKEM4NzhCMjlGQUNDM0U4QjRDRjI3Q0Y4MzIzQ0Q0NkVERkE5RjNERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtU1V8GNhMpnjiANeCTbG4tPIG
zYFNTqIFwktObMltLpPP+s/mYiPJeDR7SZrFlyhFn5WRIFoaoeqx7CgmdYJL6Xya
TDuEvsd6F2tTz023HvFAhFjl9whI18X1mJg2JEzAOkYIQQkW1Jf+4LLiqfwSLvEt
RsmA0pEhPvHxhd9Pno21IAFYVRtpP2Rj5nmns1rNzsUVqVhu+Bky4gRw04T6/zyr
4aDUmdH8o/5pG98zv0cHBJc/lOfHWCrWdJ1n8F+QkMe5ROPq0Ekc+Y8PwRdVGi77
pckYc5Si8+JTa9YfrYNRzNG25nzMoDNSj5AHpOPqB88WaTVzjWGdHF8nTTqZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUyHiyn6zD6LTPJ8+DI81G7fqfPekwHwYDVR0j
BBgwFoAUZGQEXaW+0Gh9FcvaZ6BOuHqPsD4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ViYzUzM2YtN2YzMS00YmQ2LTg3NGQtZTczNmU5ZmRl
NWJkLzAvNjQ2NDA0NURBNUJFRDA2ODdEMTVDQkRBNjdBMDRFQjg3QThGQjAzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pHUUVYYVctMEdoOUZjdmFaNkJPdUhx
UHNENC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83ZWJjNTMzZi03
ZjMxLTRiZDYtODc0ZC1lNzM2ZTlmZGU1YmQvMC82NDY0MDQ1REE1QkVEMDY4N0Qx
NUNCREE2N0EwNEVCODdBOEZCMDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyNbVsh86wGO1zquQyOV
jphmUiEt7hIl1KRYuIBXxRGfs1lVEPM6ZL4AlmDXCF5IKBJlwpUbpwylghbwFR25
w5090pzURZFolAEErGMXAakm3Zf4z4qcju7DHjJSJQBDq0Wm9FPuMcsJMdpj8OWT
zsM5wxj6s+4NoeKJAzOOMOt/X7+psgiKdv5R0aMY/x6/8sjERu2sPkcX+C+qWgDS
LkIfYJ3F8qdq9WiuHic0mPaFpCJ+awkmQZu963qwHsoz3RPZnHPmbx4AvfLho8cu
TNRlApxAyypemorExhJiEfpor/WntMGcToKl+QPqEPOMLzot1qaTTSga7GKB8cBK
zA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:16:28 2025 by rpki-client