Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
File: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft (raw, json)
Hash identifier: T5wNwSb2k7/B3jBa/39RiVmZXmsoc+XnGY4S4g7nJl0=
Subject key identifier: 2D:AA:F5:30:CA:09:6A:5F:92:38:27:7E:07:79:6C:6C:87:91:C0:0C
Authority key identifier: C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
Certificate issuer: /CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Certificate serial: 0F59F95CF529FE410A8B780693374222631BA65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
Manifest number: 5C
Signing time: Sun 07 Sep 2025 08:28:29 +0000
Manifest this update: Sun 07 Sep 2025 08:23:29 +0000
Manifest next update: Mon 08 Sep 2025 11:32:29 +0000
Files and hashes: 1: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl (hash: 36Er50c8dDTLcXCEjxgeI6LuAsgQUphRvd+PoKqYQ4M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:59:f9:5c:f5:29:fe:41:0a:8b:78:06:93:37:42:22:63:1b:a6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Validity
Not Before: Sep 7 08:23:29 2025 GMT
Not After : Sep 8 11:32:29 2025 GMT
Subject: CN=2DAAF530CA096A5F9238277E07796C6C8791C00C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:a0:41:8e:0b:dc:d6:ad:00:74:7c:57:29:
11:2d:69:c5:8b:ca:d1:55:81:1d:cd:56:1c:18:39:
87:65:7c:e2:79:98:6d:11:e8:6c:11:b6:f0:e6:7a:
57:f4:ee:48:bf:a4:47:87:ae:c8:ee:31:83:11:49:
72:7b:58:e5:ab:ef:6a:8b:1d:e0:fb:2c:05:29:12:
d6:69:02:e9:05:66:f8:bb:18:83:f1:e6:81:e6:64:
d0:be:92:b3:12:06:cd:ad:ba:69:b8:cc:f6:17:d4:
40:9b:2c:1d:71:bd:fb:f3:29:c5:65:bf:56:e5:16:
77:7b:38:eb:85:7c:e5:c1:01:3b:28:bd:c2:8b:b7:
42:d4:11:c6:22:45:c5:2a:bc:d1:d7:8b:df:dd:d2:
76:a1:21:7d:9a:59:55:69:86:59:51:d2:20:59:f9:
f8:c5:ae:d5:01:d3:51:b9:af:24:be:a3:fd:2e:78:
1b:5d:7a:37:f4:53:d0:15:81:59:37:24:55:63:02:
ed:63:c3:b5:f8:eb:46:b9:d0:4c:af:da:6c:ee:1a:
d5:84:b7:41:63:99:8e:ed:55:df:a0:09:e8:fa:21:
9b:0a:40:40:e7:fb:69:32:0a:9e:8b:87:70:a0:42:
6f:e6:5b:a3:8d:6d:f7:18:e4:5d:76:18:83:9d:27:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:F5:30:CA:09:6A:5F:92:38:27:7E:07:79:6C:6C:87:91:C0:0C
X509v3 Authority Key Identifier:
keyid:C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b6:d1:d7:3b:3a:af:39:90:4a:3f:80:e8:26:56:27:36:12:
d0:a7:01:a0:17:f5:ae:56:3c:68:b7:8b:0c:a6:e5:a1:9f:b4:
e6:a0:fc:d6:1e:f3:b9:bf:83:07:aa:86:c4:2f:27:0d:46:44:
e2:43:bb:8f:b3:53:38:60:2b:fe:5c:f8:84:00:16:b2:7a:d7:
9f:ce:f1:8e:88:94:8f:8c:ff:4e:22:d1:9f:ef:b4:c4:e4:85:
9c:3f:5f:07:5d:5d:a5:ca:cd:f1:e2:7e:f6:db:d1:3d:13:fb:
92:75:99:4c:be:1b:e6:7b:03:99:3d:fd:20:24:da:b7:eb:84:
44:c1:e7:ec:28:5f:20:6f:97:2d:c2:47:e2:95:5e:dc:ed:8d:
b6:f3:ab:9c:d4:7e:bb:a0:3b:62:62:7b:b8:d3:3f:97:f3:0d:
ec:bd:5f:db:c9:90:5e:82:75:6f:ef:86:0d:00:a7:94:6f:de:
8e:94:bd:97:53:f8:c1:09:17:f7:d1:74:4d:89:f4:9d:07:e9:
e3:44:a7:36:1f:f1:a9:7f:b2:74:1b:7c:9e:ea:d2:44:95:ff:
d4:55:f0:11:81:e4:da:1c:e0:48:f7:c2:4e:7d:f7:74:cb:a6:
8b:33:b7:2a:f5:ed:4d:f4:67:c1:ae:c1:01:25:18:d8:ba:3f:
c8:96:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:18 2025 by rpki-client