Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
File: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft (raw, json)
Hash identifier: IoMnkekg7VcGE9tx71Oso0r5uG7wFikvFCena+T6qMQ=
Subject key identifier: DD:21:59:CB:95:11:44:B3:16:1E:9C:04:A7:A4:C3:19:35:40:E6:1B
Authority key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Certificate issuer: /CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Certificate serial: 2C65B2FDF68CFB2AD47E115407CB8C290ACC3BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
Manifest number: 0200
Signing time: Thu 04 Sep 2025 13:13:46 +0000
Manifest this update: Thu 04 Sep 2025 13:08:46 +0000
Manifest next update: Fri 05 Sep 2025 15:36:46 +0000
Files and hashes: 1: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl (hash: ng/9wKK4B/L8qNfyVyqFtged/u34ot/P4BtF+wT7JkY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 15:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:65:b2:fd:f6:8c:fb:2a:d4:7e:11:54:07:cb:8c:29:0a:cc:3b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Validity
Not Before: Sep 4 13:08:46 2025 GMT
Not After : Sep 5 15:36:46 2025 GMT
Subject: CN=DD2159CB951144B3161E9C04A7A4C3193540E61B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:bb:9f:9a:cc:bc:54:6f:d7:f8:33:0d:98:
74:e5:84:31:c3:86:39:9a:47:10:8c:f3:7e:a4:a4:
9e:59:61:b3:7a:a3:53:09:a2:a8:ed:e3:8d:fb:aa:
2b:1f:ae:53:e8:41:fd:e6:6d:dd:7e:50:14:f3:7e:
be:12:7a:46:2b:d4:77:b7:0c:07:f9:ae:c7:3c:37:
11:23:71:87:0e:9d:c7:67:b9:09:d2:0f:74:54:c6:
50:7b:89:f3:7f:2d:be:5f:45:01:8c:0e:28:ff:24:
cc:f5:5e:a3:06:6d:ee:e7:e7:74:42:82:94:23:24:
9d:c6:86:d3:db:fb:ea:a5:98:f4:81:8c:f3:9a:41:
a5:94:f3:8b:aa:0f:5d:45:0b:30:50:bf:6c:31:6d:
20:df:d2:6b:ae:fe:c0:89:29:78:86:32:50:76:45:
36:a2:d0:aa:9e:42:6c:e5:5a:a9:56:eb:aa:49:2b:
7c:92:3b:50:80:a3:0f:17:53:50:4b:fb:8c:41:a4:
e4:bd:4e:81:ab:57:6f:8b:e1:82:1a:99:a6:26:5d:
b5:48:96:56:68:e9:29:b1:41:d0:f4:ba:d2:f2:1b:
24:0f:a6:fc:87:f6:5f:b9:13:6e:ef:7e:a2:24:fc:
ba:fc:5a:5e:a2:ef:5f:85:76:d2:15:a8:00:18:4c:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:21:59:CB:95:11:44:B3:16:1E:9C:04:A7:A4:C3:19:35:40:E6:1B
X509v3 Authority Key Identifier:
keyid:FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:9f:6a:db:89:b9:1d:e5:21:da:89:e9:ba:ae:b6:50:5f:
a9:4f:fc:e8:bb:19:69:e2:7b:a7:a9:6b:f4:c0:05:cc:08:3c:
c4:5d:21:97:42:b5:4b:28:9c:38:ee:47:91:f5:69:79:64:52:
02:00:ff:79:80:2c:66:e1:2e:0a:9d:6e:33:14:74:bf:fc:93:
15:14:e7:26:9c:7d:5b:4e:78:d5:92:81:04:a2:b9:dc:02:f6:
94:1e:24:f7:a8:92:e0:0f:f5:05:3d:9a:2f:92:cf:3f:ed:81:
23:fb:48:30:a1:6b:70:51:c8:fd:76:6a:dc:e9:71:9f:ae:4c:
19:c9:8b:fc:77:32:ff:fd:e5:36:27:86:44:22:f4:c4:2b:ad:
ec:57:2d:10:f7:14:93:d5:8c:75:a2:69:61:e0:31:18:ae:7d:
ed:de:06:1f:a1:e6:40:3d:ee:b1:79:a6:97:05:2e:89:2e:76:
24:8a:46:fc:74:ae:8b:50:34:40:33:5e:08:3e:22:a7:22:5f:
af:5d:c8:52:ae:ec:b5:6b:32:58:15:67:7b:e7:21:71:9d:1b:
86:fa:61:10:d0:bf:41:75:f1:e2:8f:4a:ec:d1:3c:fb:a4:5e:
b1:43:42:e9:e6:d1:d9:d6:32:19:03:54:b4:e5:f4:3a:b6:a2:
17:66:9d:36
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULGWy/faM+yrUfhFUB8uMKQrMO/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0ZjBiMzU4Y2JkNmM1NGVjY2JlYmYyNmY2ZDFhMDVm
MWQ1MzdlODAeFw0yNTA5MDQxMzA4NDZaFw0yNTA5MDUxNTM2NDZaMDMxMTAvBgNV
BAMTKEREMjE1OUNCOTUxMTQ0QjMxNjFFOUMwNEE3QTRDMzE5MzU0MEU2MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSbufmsy8VG/X+DMNmHTlhDHD
hjmaRxCM836kpJ5ZYbN6o1MJoqjt4437qisfrlPoQf3mbd1+UBTzfr4SekYr1He3
DAf5rsc8NxEjcYcOncdnuQnSD3RUxlB7ifN/Lb5fRQGMDij/JMz1XqMGbe7n53RC
gpQjJJ3GhtPb++qlmPSBjPOaQaWU84uqD11FCzBQv2wxbSDf0muu/sCJKXiGMlB2
RTai0KqeQmzlWqlW66pJK3ySO1CAow8XU1BL+4xBpOS9ToGrV2+L4YIamaYmXbVI
llZo6SmxQdD0utLyGyQPpvyH9l+5E27vfqIk/Lr8Wl6i71+FdtIVqAAYTIlDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3SFZy5URRLMWHpwEp6TDGTVA5hswHwYDVR0j
BBgwFoAU/08LNYy9bFTsy+vyb20aBfHVN+gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTU2NjQ0M2ItZGZmNC00ZDEzLWJiODEtNzJjODYzMGQ2
ZGY2LzAvRkY0RjBCMzU4Q0JENkM1NEVDQ0JFQkYyNkY2RDFBMDVGMUQ1MzdFOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wOExOWXk5YkZUc3ktdnliMjBhQmZI
Vk4tZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NTY2NDQzYi1k
ZmY0LTRkMTMtYmI4MS03MmM4NjMwZDZkZjYvMC9GRjRGMEIzNThDQkQ2QzU0RUND
QkVCRjI2RjZEMUEwNUYxRDUzN0U4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4ufatuJuR3lIdqJ6bqu
tlBfqU/86LsZaeJ7p6lr9MAFzAg8xF0hl0K1SyicOO5HkfVpeWRSAgD/eYAsZuEu
Cp1uMxR0v/yTFRTnJpx9W0541ZKBBKK53AL2lB4k96iS4A/1BT2aL5LPP+2BI/tI
MKFrcFHI/XZq3Olxn65MGcmL/Hcy//3lNieGRCL0xCut7FctEPcUk9WMdaJpYeAx
GK597d4GH6HmQD3usXmmlwUuiS52JIpG/HSui1A0QDNeCD4ipyJfr13IUq7stWsy
WBVne+chcZ0bhvphENC/QXXx4o9K7NE8+6ResUNC6ebR2dYyGQNUtOX0OraiF2ad
Ng==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:32 2025 by rpki-client