Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier: o8qHRn2Um+g7O4jAIo29Qj5x5OAcIEe4Eh6UEy4iQEk=
Subject key identifier: 1A:B5:32:97:1E:82:3D:EC:CD:0D:53:CB:BE:BB:22:FD:58:8E:28:50
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 7EF9E1AD5BCEB90DDB2FD446EC16FC9CB26792B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number: 0315
Signing time: Sun 07 Sep 2025 13:58:57 +0000
Manifest this update: Sun 07 Sep 2025 13:53:57 +0000
Manifest next update: Mon 08 Sep 2025 17:51:57 +0000
Files and hashes: 1: 3138352e33312e3230322e302f32342d3234203d3e20323038373635.roa (hash: AYXBM6Gs7ye6sJ6OSz0wwrESd1N1gaJYldRKbiReV2s=)
2: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: KY2BRQzFGAHvYjeZX/JH0rch3MBkm4iA0JQanJs5sQE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 17:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f9:e1:ad:5b:ce:b9:0d:db:2f:d4:46:ec:16:fc:9c:b2:67:92:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Sep 7 13:53:57 2025 GMT
Not After : Sep 8 17:51:57 2025 GMT
Subject: CN=1AB532971E823DECCD0D53CBBEBB22FD588E2850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:1f:07:e6:99:17:3c:c8:25:0d:b9:68:15:
a0:3f:5b:b9:75:92:80:ca:a0:00:d4:76:c0:c5:8c:
68:75:56:55:10:74:5d:26:3c:7b:a5:a3:e3:5b:15:
86:4c:60:5d:ad:c3:26:c0:b7:11:e1:e8:2e:5e:7d:
f2:3d:59:01:33:81:ba:9f:b7:4f:2d:18:37:76:3e:
75:d4:13:2d:c4:25:77:bf:83:72:9d:4b:d0:9f:d3:
14:69:ab:94:0c:b8:3a:85:5d:4a:52:4b:68:f3:38:
95:95:57:47:0d:23:56:ba:19:08:8c:f9:9c:91:a1:
fc:15:5a:6d:5d:db:0d:bb:08:e3:c4:2d:9e:ba:4f:
17:72:78:97:b0:f5:29:46:48:4b:c8:28:14:b5:e0:
22:3f:bb:7b:44:ed:c2:52:12:13:c3:46:53:b3:7c:
9f:06:f9:67:27:96:16:95:02:4f:7d:43:c9:b0:ae:
57:eb:5e:b9:88:0d:79:26:98:a0:d4:31:ab:4d:84:
0f:e3:fa:df:68:50:5e:14:4c:97:d1:9d:6c:c4:16:
68:ba:44:5d:42:c4:a8:a0:2c:26:7b:26:e8:8b:10:
bd:ba:3f:43:a8:44:38:da:5a:1c:6b:39:35:a3:95:
92:2c:f9:7d:3b:5c:4b:f4:10:bf:25:69:0e:a9:8f:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:32:97:1E:82:3D:EC:CD:0D:53:CB:BE:BB:22:FD:58:8E:28:50
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:a8:b1:c3:26:13:7d:80:70:67:33:cf:15:57:df:ec:ae:
ae:be:b3:1d:c8:1f:51:1f:54:24:b8:e8:b9:48:83:20:c7:4d:
b7:fe:ae:7a:ef:7f:57:7e:c8:f9:9d:a3:0e:22:9d:24:aa:b0:
43:d1:28:7f:d6:91:43:e0:7e:9d:79:81:0a:dd:8e:62:9e:ec:
f6:6f:ae:d9:83:3c:cc:63:55:a6:97:a1:26:5b:8f:34:7f:ad:
dc:6d:e4:0f:1b:ef:ae:55:96:35:1a:8c:3a:62:d6:b5:22:03:
b2:a0:54:72:5f:f4:ae:16:3a:72:cb:e9:8c:7c:41:70:e5:84:
03:a0:9e:54:8f:ae:34:8d:ee:75:c8:8f:26:3f:8c:fd:9e:8e:
5a:f9:9c:dd:b1:2f:a3:0c:04:d0:fd:97:6c:34:cc:90:f8:63:
a0:f2:a4:d4:8d:6b:d5:6e:33:52:65:eb:9e:4d:bd:a7:e4:b2:
29:09:11:61:e3:43:f6:da:1e:a0:13:bf:43:1f:c0:e7:b3:fd:
49:b1:8a:10:86:aa:a5:ae:75:97:d1:a4:e5:c6:82:b7:79:db:
ea:2a:a3:01:6d:d1:3c:f4:ee:4a:3d:1d:a8:76:58:79:46:0f:
70:92:9b:44:da:54:00:d8:d2:06:0f:3a:dc:bb:97:e6:58:8f:
43:8c:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:52:08 2025 by rpki-client