Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: nIMQt2co+0fEvGrHGq6PchZav6kflEo642NU3R8pY6I=
Subject key identifier: 63:BF:97:C5:77:E5:90:B5:18:96:08:56:EE:F9:8D:C8:39:23:18:47
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 4A47E208BF777E30A90408A9F73FAF61E2620B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 01CF
Signing time: Tue 22 Jul 2025 18:53:22 +0000
Manifest this update: Tue 22 Jul 2025 18:48:22 +0000
Manifest next update: Wed 23 Jul 2025 19:54:22 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: DoWrBm8YrfA2O1rwJoqNzjEc32zXA8ZuHIugyZTAzU8=)
2: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 19:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:47:e2:08:bf:77:7e:30:a9:04:08:a9:f7:3f:af:61:e2:62:0b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Jul 22 18:48:22 2025 GMT
Not After : Jul 23 19:54:22 2025 GMT
Subject: CN=63BF97C577E590B518960856EEF98DC839231847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:e5:22:e3:ce:c6:f4:f4:50:f2:e1:8b:22:
f1:4b:20:1e:5b:a7:cd:89:61:27:c7:90:2a:60:3f:
a4:ff:df:fe:0d:85:9d:b3:35:b0:c4:1d:59:43:4f:
45:08:00:6a:53:91:b7:1b:2d:03:55:3c:6e:52:68:
ff:78:9c:72:c1:10:a4:da:88:fb:49:5d:ac:fe:81:
7e:d4:36:0d:a2:ee:48:9c:1d:d9:92:10:61:5f:40:
87:65:36:19:2e:5a:46:18:31:b1:12:8c:a4:60:05:
75:dd:29:93:c6:05:81:6a:31:8c:b8:87:27:db:7d:
3e:3c:1b:d4:9a:7a:e8:d8:25:47:b8:65:4a:bf:b6:
03:33:28:b4:9b:a7:3a:0d:26:b4:8c:96:8b:b0:9c:
e5:0b:cd:a7:4e:29:63:38:d0:c9:ef:12:81:e6:c5:
22:8e:a6:71:0b:94:b7:9d:9f:da:fb:23:c0:87:99:
2b:fd:53:59:9b:5b:be:8d:6c:5b:83:44:2d:c0:50:
f0:22:a5:2d:db:00:cf:1f:3d:72:a8:51:73:c5:1d:
84:c6:b0:90:d6:1b:9e:34:58:6f:c4:05:47:08:9e:
90:cc:73:2d:5b:87:a5:f6:3c:bb:1b:fb:06:64:39:
b2:a7:cc:59:58:a1:b0:1e:21:61:1e:98:f2:9f:9c:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:97:C5:77:E5:90:B5:18:96:08:56:EE:F9:8D:C8:39:23:18:47
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c8:1c:8a:54:bc:c9:4a:7f:30:72:35:ae:6f:87:0f:b1:1c:
ac:bb:86:aa:62:8d:99:22:33:1c:36:ae:5a:93:69:d4:63:9b:
56:ad:f4:ae:45:16:48:f6:99:e4:40:56:77:c9:73:85:9b:73:
55:af:d3:20:9d:fa:72:8a:f1:97:34:64:03:1f:32:f0:94:9f:
15:1e:8c:ce:e9:c0:31:d5:0e:09:69:d2:cf:45:84:2a:28:bd:
f2:b5:99:90:cd:19:8e:b9:68:44:13:ff:44:78:aa:c8:e0:31:
5c:42:bb:12:11:d8:2c:eb:31:d1:59:05:12:c6:5b:d6:3c:58:
fc:46:12:45:c9:fd:5c:1b:95:37:30:83:72:9a:b8:ac:d7:e2:
1f:19:60:67:c3:01:f6:56:23:13:f4:2d:85:61:4d:c3:7d:83:
d6:a6:f3:e8:40:f5:d8:24:74:29:11:7b:9f:64:78:9f:8e:11:
19:81:4d:2e:ce:c2:87:f5:82:8a:00:27:7e:b6:d2:a7:d6:41:
4d:24:53:8b:c0:4b:a5:55:11:cc:03:ba:ec:e3:99:d3:14:95:
39:a2:3c:36:5b:fb:61:b4:68:42:5c:0f:a7:ea:85:bb:12:f0:
4b:18:44:61:69:f4:51:e8:d9:4b:b2:82:1b:c1:d3:81:bf:d4:
97:ce:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:56:46 2025 by rpki-client