Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: aUGNUbJtJrgkoo0cUSb4dnyU1YS/mk3oPM2+rMLTLak=
Subject key identifier: 29:82:45:02:F9:9A:DF:2F:7F:00:5F:BC:9C:22:F9:B0:84:67:D8:B0
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 035272225A24DEB2B8E94562343AA0F0356193B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 02BB
Signing time: Tue 11 Nov 2025 06:00:18 +0000
Manifest this update: Tue 11 Nov 2025 05:55:18 +0000
Manifest next update: Wed 12 Nov 2025 08:13:18 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: fgmNCuT6ymY4afBT28LGo3+UIn6jc/ou0ykmKBeAGPE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:52:72:22:5a:24:de:b2:b8:e9:45:62:34:3a:a0:f0:35:61:93:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Nov 11 05:55:18 2025 GMT
Not After : Nov 12 08:13:18 2025 GMT
Subject: CN=29824502F99ADF2F7F005FBC9C22F9B08467D8B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:a2:8c:27:86:f2:ef:9b:3a:43:41:3e:0e:
3c:55:cd:5b:e7:22:b8:23:89:d1:df:d1:6e:5c:28:
a5:f7:68:96:34:77:52:f3:c5:c8:7c:98:b5:d9:89:
39:ef:d7:95:b3:8d:cd:aa:16:57:b4:14:7e:03:46:
77:46:d8:7a:b3:5b:20:0b:4e:70:b7:04:56:75:df:
b0:0b:a8:6b:b2:78:d2:54:c8:e5:58:ec:e6:47:80:
fd:d4:38:77:e7:7a:c9:22:2b:3a:15:3b:2e:69:a7:
e9:07:80:d3:06:2c:fd:2a:5b:f4:30:a0:0e:98:2f:
de:6f:ab:19:e7:ab:2b:c5:24:66:6c:1f:f7:11:7e:
3f:d5:ca:ef:52:f4:5e:3d:4d:66:53:18:ff:ff:3c:
0a:bf:8b:67:3a:d8:ce:fc:b6:71:6c:da:c4:fa:04:
e7:ae:ce:11:6a:9e:34:40:ba:e0:46:c4:ce:8b:c3:
a6:af:95:43:83:3d:f2:37:ea:25:22:9e:a1:9b:86:
87:cc:15:fe:15:b1:ef:28:a8:72:b9:1c:d2:24:35:
15:8b:7d:eb:0a:2c:0f:7e:d2:57:9e:7d:7c:e3:a2:
c9:1d:fc:e6:ea:94:ed:c6:02:9b:17:e1:de:73:07:
06:fb:e3:18:31:86:a9:cf:74:f8:54:de:33:87:e1:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:82:45:02:F9:9A:DF:2F:7F:00:5F:BC:9C:22:F9:B0:84:67:D8:B0
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:06:5b:6e:d1:86:82:ea:aa:2f:ad:60:7c:3b:2a:da:16:6a:
aa:a7:74:92:f7:cf:f2:e0:c0:02:c0:4c:c0:e6:e3:80:6b:17:
05:44:dc:3a:c4:fd:c8:ff:ac:a7:61:bd:d1:50:dd:cf:ee:19:
b3:90:d3:f5:ca:8c:48:27:a0:4a:77:fd:32:ab:d3:c2:77:61:
9e:08:ee:d3:20:ab:16:70:5b:8d:39:d0:86:60:66:74:85:0b:
50:1a:9a:b4:e7:14:2f:cf:b1:e0:e2:94:e0:4f:5c:ed:6b:82:
4a:30:03:a1:a8:e9:0a:13:89:d6:22:2c:0d:b9:35:29:6a:f7:
bf:da:54:72:59:bc:5d:97:60:c9:00:86:21:e0:9f:ba:2d:a6:
30:51:51:2e:f1:71:92:c2:4c:cf:65:fd:01:36:c3:1e:6f:be:
2c:61:db:d2:bb:70:eb:f5:8f:db:b2:aa:0c:d8:f2:fb:64:50:
72:b9:da:c4:b7:18:5f:6a:00:ca:8e:7c:db:77:b1:aa:a6:c0:
86:1b:cb:fb:7d:25:cc:5a:f2:93:d7:3b:9e:17:05:83:aa:07:
ff:8b:66:0c:bb:6b:7f:ed:70:fa:f0:0d:81:b1:0e:f5:99:c2:
05:f9:e6:23:0c:6a:9f:5f:32:35:2c:f4:80:47:d4:b0:03:3e:
f2:7f:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:54 2025 by rpki-client