Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
File: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft (raw, json)
Hash identifier: nRdw+PczqeeXxUc52G4Bm+jsoelF2Diu0BvhxHeYZk0=
Subject key identifier: DD:2C:15:92:54:9B:19:84:A8:8D:A3:FA:E7:3C:F7:C8:C1:2B:25:DA
Authority key identifier: C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
Certificate issuer: /CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Certificate serial: 19D8E0D84623667CDB2196619D1835EB5A078C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
Manifest number: 39
Signing time: Mon 10 Nov 2025 17:35:40 +0000
Manifest this update: Mon 10 Nov 2025 17:30:40 +0000
Manifest next update: Tue 11 Nov 2025 21:20:40 +0000
Files and hashes: 1: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl (hash: ql6y3z/QtMATQnVnFgh/ube/XkF9+ezQ84aXqIPBOCY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 21:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d8:e0:d8:46:23:66:7c:db:21:96:61:9d:18:35:eb:5a:07:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Validity
Not Before: Nov 10 17:30:40 2025 GMT
Not After : Nov 11 21:20:40 2025 GMT
Subject: CN=DD2C1592549B1984A88DA3FAE73CF7C8C12B25DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:10:bf:b8:6e:19:2f:06:10:74:04:04:b4:
49:cc:9c:ce:b9:50:6f:2b:f9:93:c0:18:ca:b4:d5:
fe:a8:d1:55:d2:52:ca:b5:d4:ee:e7:1c:05:18:98:
6b:af:35:33:67:9e:c3:b8:6e:47:41:0d:f4:7d:86:
23:15:a0:ea:75:c5:1a:35:11:a7:64:54:da:b1:51:
6d:17:1c:a3:f2:c8:20:f2:ed:65:ca:b6:05:ba:a9:
51:09:17:99:cb:09:56:b2:c4:e7:42:67:87:80:da:
bb:35:15:bc:df:bf:fe:03:8c:31:16:aa:91:ca:50:
5f:20:6e:4c:53:bd:f9:e0:8f:5a:4f:9a:63:5a:be:
dc:35:ab:be:05:3c:72:c4:33:39:6b:8e:29:69:e8:
34:a2:51:31:33:92:a2:41:8c:98:3d:31:00:a4:f7:
bb:65:48:a2:82:65:53:c8:48:e7:c9:3f:ef:f7:c7:
fd:d1:47:e6:42:a7:fe:72:a6:63:4a:58:34:d0:1a:
d4:ce:1f:f0:31:4b:e2:2d:21:16:db:38:dd:dc:a9:
ad:61:72:d5:b1:cf:d7:a4:12:b1:2c:91:c8:7c:4e:
3d:29:b7:0a:45:dd:a1:20:02:76:00:8b:7c:55:ba:
d6:52:63:f8:50:9a:15:e6:86:fa:f5:53:4f:4b:a7:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:15:92:54:9B:19:84:A8:8D:A3:FA:E7:3C:F7:C8:C1:2B:25:DA
X509v3 Authority Key Identifier:
keyid:C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:43:8d:14:92:c9:f6:75:3e:1c:21:89:b8:b8:c5:28:ba:fb:
20:a0:aa:ff:4b:9e:ce:35:85:82:22:b9:54:52:d1:49:a5:ad:
ed:ab:62:dd:11:b2:a3:3a:1b:6d:db:32:84:26:59:37:00:d0:
fb:f7:06:dd:c6:5c:7a:10:b9:c1:33:ed:c5:43:8f:79:ec:5c:
b0:2c:4a:86:7e:92:ab:4f:54:8f:ff:fe:9b:a8:a3:0a:45:a5:
e0:dc:ad:90:38:c1:dc:0a:58:60:6b:ab:e1:d3:12:41:84:b9:
fd:2f:9b:8b:bb:12:4c:fb:70:3f:ef:32:25:d2:38:72:11:d4:
c2:fc:8f:d6:74:04:68:93:16:cd:6c:42:92:c7:60:b6:dd:5d:
0f:ca:83:ef:b7:9c:73:ef:a9:ab:ef:34:fa:70:71:2e:cd:08:
1a:54:1f:66:82:99:2e:cf:c4:25:96:c4:f2:55:c6:14:e9:e7:
8b:62:fd:3d:21:3c:2a:78:68:5d:3b:3a:40:23:d9:f8:0f:fa:
9b:6b:20:05:57:45:f7:b9:6a:ad:21:4f:bb:64:22:20:52:0e:
92:2c:3c:b1:ee:89:a0:c3:0c:af:dd:2e:e1:c6:fc:87:04:4b:
0e:a2:dc:fa:e5:ae:0e:8d:79:b1:53:45:aa:fe:f0:df:e9:05:
23:2d:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:06 2025 by rpki-client