Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: Fd/BQ9Tkn7oO3gfZxp0G2FasnH2nUJJqKIlpee7cxv4=
Subject key identifier: 38:FB:94:33:C2:F6:5E:D1:56:3B:E7:8E:F0:6F:5E:2A:5C:ED:0D:3D
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 53F33288C538C7AB12BD63FC146BDE0BF2F09F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 0392
Signing time: Fri 06 Jun 2025 08:08:44 +0000
Manifest this update: Fri 06 Jun 2025 08:03:44 +0000
Manifest next update: Sat 07 Jun 2025 10:41:44 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: 0052I3i95uUSYTJRnNni+QBRgYUROjadovRQnSWTW9M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f3:32:88:c5:38:c7:ab:12:bd:63:fc:14:6b:de:0b:f2:f0:9f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Jun 6 08:03:44 2025 GMT
Not After : Jun 7 10:41:44 2025 GMT
Subject: CN=38FB9433C2F65ED1563BE78EF06F5E2A5CED0D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:47:93:91:8d:c7:6e:de:cf:f1:8e:af:25:
cd:14:2e:29:ff:10:3b:ba:e8:61:78:c6:2d:4b:61:
87:af:1a:14:37:e2:d5:6a:fd:25:a6:6f:5c:c4:3f:
01:7e:e6:73:a7:6d:6a:6c:b0:6c:5e:48:cb:c0:eb:
99:1e:54:11:5f:0f:de:c8:8d:34:7e:11:a6:71:8f:
4e:f2:07:3e:9c:c0:3a:16:87:00:66:82:aa:b3:1f:
bc:fa:43:1d:1c:75:96:67:8d:13:35:f4:a2:13:c3:
42:67:b2:e5:53:12:ef:c9:30:6a:6a:a4:d8:fc:7a:
c0:d9:28:84:fe:3b:74:b3:0b:30:ab:0b:01:41:e1:
bc:74:ab:59:4c:a4:ef:6d:cc:0f:8c:f1:32:1e:ba:
a9:a3:c6:2b:b7:36:55:78:82:fd:53:d9:83:6c:0f:
30:6b:91:2d:4c:c7:66:1c:fd:bb:4b:0f:91:d4:72:
ed:c8:40:59:6f:16:fa:27:e7:2d:af:32:f9:02:8b:
fc:fc:ac:0a:03:df:eb:0c:68:9d:81:ec:c5:d1:e0:
3b:6c:80:fe:c6:94:ba:26:cb:02:30:e5:ba:d9:7d:
5e:3d:1b:27:6f:18:cf:ea:55:58:ea:3a:04:8d:3a:
fc:18:6c:12:70:90:9e:04:cb:2e:15:02:a9:9f:2c:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:94:33:C2:F6:5E:D1:56:3B:E7:8E:F0:6F:5E:2A:5C:ED:0D:3D
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:09:dd:79:52:b8:f6:cf:18:03:8e:67:b0:4a:4c:9e:cd:57:
9d:7c:ce:03:b2:f5:3e:06:6c:88:16:b5:7a:6e:bb:bd:40:b0:
de:2e:ff:b5:18:68:01:a6:07:ad:7d:a4:64:31:ed:1e:9a:4b:
3e:09:6b:2a:3d:0d:b3:1b:a4:b1:27:fd:91:46:d8:14:cf:c8:
e9:96:e1:9e:96:e7:8c:3f:62:50:48:17:bc:5e:15:57:6b:cc:
1e:4d:1e:7a:16:bc:e3:c1:56:af:7d:a3:8e:ee:aa:9f:59:09:
75:e2:92:97:5b:3a:64:76:2c:00:01:72:9a:0d:3c:ed:1c:11:
a9:bd:48:ac:83:fd:e3:36:2f:d7:9a:07:7e:c1:ac:9f:f8:5d:
ab:62:0e:04:52:1b:69:1f:a0:01:73:50:d4:af:db:d9:f0:0e:
93:65:1a:87:7b:f8:2b:67:bf:ed:bb:f8:18:b2:96:cf:a3:a8:
ac:13:66:71:63:15:66:f8:ae:ab:de:6d:1a:fb:99:fd:84:2f:
c8:de:a5:91:c8:71:96:d0:a1:5e:c9:0c:75:4f:1b:2c:0c:2a:
e5:59:70:60:27:af:ea:61:b2:e5:48:a0:bf:17:75:0c:03:2c:
f4:75:aa:a5:eb:84:46:9f:db:a4:db:f5:7f:a5:6b:b0:ac:2f:
90:ba:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:10:09 2025 by rpki-client