Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File: 2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier: O3t4wloi6MKCQLo4MIVj5CfYo1omfLMNXQJXY95Gymw=
Subject key identifier: A5:DC:78:B6:FF:EF:29:2D:78:AA:D8:16:C5:A4:D3:C5:EB:5C:4B:DE
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer: /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial: 5EFC00BB358B483859B9EC692A32897568F6A0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number: 59
Signing time: Tue 11 Nov 2025 06:54:06 +0000
Manifest this update: Tue 11 Nov 2025 06:49:06 +0000
Manifest next update: Wed 12 Nov 2025 07:35:06 +0000
Files and hashes: 1: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: CEAPW1kAwS3zGltQX8+BYaIJ8AGv+kppF5+6VhGhEs4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fc:00:bb:35:8b:48:38:59:b9:ec:69:2a:32:89:75:68:f6:a0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
Validity
Not Before: Nov 11 06:49:06 2025 GMT
Not After : Nov 12 07:35:06 2025 GMT
Subject: CN=A5DC78B6FFEF292D78AAD816C5A4D3C5EB5C4BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:87:5c:3b:c7:b2:2d:4b:8c:6c:96:29:e7:
6b:48:37:04:d4:60:8a:c0:84:d3:16:46:8b:5b:d2:
7b:73:2b:6b:35:2a:9c:4e:7b:78:a6:31:d3:7e:6d:
ff:61:de:aa:5a:89:92:0b:b1:78:ee:46:d4:3c:41:
05:90:8f:d1:da:c7:ba:45:89:5d:65:f5:11:be:b3:
a7:0c:43:1b:25:45:f1:16:76:b3:1a:a7:30:22:99:
5c:03:43:ab:cf:8d:e5:24:94:7d:12:eb:81:e3:a5:
d4:49:5d:38:fa:22:f9:8c:55:95:32:00:2d:a9:2e:
77:bc:5b:bf:24:3e:5f:86:2a:0d:5a:68:a1:6d:b6:
de:f6:09:d3:4b:de:23:bf:b7:74:37:e3:96:51:53:
af:29:a4:e3:2d:81:e2:56:98:c2:d9:ac:7a:50:47:
97:3f:d6:b3:da:4c:9f:79:7a:19:66:d2:de:04:10:
de:d6:3b:38:70:62:d4:99:b4:0e:2c:62:c9:77:a1:
77:48:0d:68:a1:fc:d2:13:6c:4a:34:35:8e:f3:d3:
93:2c:9b:07:8e:ad:71:76:da:58:25:d0:29:90:d1:
24:4b:1a:7c:70:04:b3:68:d7:e5:f9:32:86:a8:62:
c6:bf:5b:4e:09:03:a0:05:6d:9b:10:60:1b:40:28:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DC:78:B6:FF:EF:29:2D:78:AA:D8:16:C5:A4:D3:C5:EB:5C:4B:DE
X509v3 Authority Key Identifier:
keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8a:7a:e6:49:a7:7f:6f:51:e9:7e:5c:77:c0:a3:72:89:47:
23:5d:27:82:81:b9:67:5a:88:e5:30:37:fa:f5:b7:ec:71:32:
02:cf:73:37:51:d4:be:2f:84:03:29:5d:bc:66:f8:86:f0:d6:
d3:8f:0a:2b:fd:20:5d:f9:6f:19:a3:8a:a2:ba:40:85:ca:36:
83:f1:8d:1e:69:5b:1c:64:48:c3:d4:30:ca:76:7c:cc:9d:ba:
57:8f:54:5b:db:b5:72:2a:28:a3:2a:ab:88:d3:55:56:f1:4d:
b2:8d:3f:0d:c8:79:5c:35:e6:88:9a:be:01:39:61:53:37:24:
2e:46:9b:ed:04:33:46:0d:0b:e8:f4:79:fa:9d:5c:a2:6b:c5:
81:a1:bf:60:f5:0e:19:c5:eb:88:32:ac:0c:b3:d3:5a:3c:32:
f7:95:80:b6:4f:03:bd:95:c2:8a:6e:10:41:28:42:ba:7d:1e:
e2:67:26:4f:55:54:94:45:8f:93:0a:21:8e:70:81:fd:c9:f8:
49:b6:f6:42:c7:af:a6:01:7b:22:ce:1e:41:98:40:46:4a:0d:
9b:40:19:5f:cb:c5:88:91:30:ba:c1:f7:09:81:4b:7f:f2:5e:
5e:6c:0f:d9:df:9b:65:ce:19:6a:20:85:62:89:e9:11:ea:ba:
4b:94:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client