Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: zpBRY9MCff10A7MtL9KFp79CHreG/bpWM8aeEoTEUTo=
Subject key identifier: D1:2C:A4:2E:52:33:DC:DD:13:00:E9:7B:B9:95:B5:08:34:1F:32:87
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 52C2CE9F3538DA6477606BF3245C3BF87862363B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 040D
Signing time: Sun 07 Sep 2025 04:26:04 +0000
Manifest this update: Sun 07 Sep 2025 04:21:04 +0000
Manifest next update: Mon 08 Sep 2025 05:46:04 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: d5rbC0HXWk05TQVSisxuThPmcDM6Y6tW6YJI0NOHkvs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c2:ce:9f:35:38:da:64:77:60:6b:f3:24:5c:3b:f8:78:62:36:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Sep 7 04:21:04 2025 GMT
Not After : Sep 8 05:46:04 2025 GMT
Subject: CN=D12CA42E5233DCDD1300E97BB995B508341F3287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:83:7d:1e:35:d2:dd:58:2e:52:3e:d0:80:
dc:27:43:00:ca:e8:58:55:c0:03:c3:36:2d:61:73:
ee:b6:9d:22:35:ae:15:eb:cf:7b:87:ff:86:f3:61:
a6:b3:a3:b5:ba:62:35:a6:e8:b4:08:49:e1:db:e1:
b5:8c:cf:3c:97:00:55:37:d5:dc:56:d9:75:fc:55:
43:7e:b9:b8:97:c1:c4:31:da:f0:f0:81:b6:96:45:
43:a0:3f:f3:38:c6:6a:72:d2:81:58:9c:c6:24:ec:
a7:ec:18:90:39:da:5a:20:34:da:c4:68:5d:5d:a5:
df:65:bf:e8:a4:78:9a:c2:c3:61:16:2f:35:60:59:
1a:55:e2:ab:9b:51:57:b6:73:9c:88:9d:14:62:88:
d6:ff:47:c7:6f:5e:83:55:89:98:be:dd:ec:9b:69:
72:5f:2c:fc:96:38:35:49:a7:f1:1d:5e:cd:a7:46:
91:80:30:cf:c1:16:64:60:84:b2:a7:b6:e7:6f:94:
da:01:1d:b5:2c:dc:40:7f:49:e0:5e:c8:68:26:e0:
01:34:19:76:91:d8:2f:07:ef:21:17:0f:0d:86:d8:
c4:cd:87:ac:f5:88:3b:59:a9:ca:6d:74:d6:eb:40:
fd:61:40:dc:cf:43:dd:e6:59:db:1b:43:e4:f4:7c:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:A4:2E:52:33:DC:DD:13:00:E9:7B:B9:95:B5:08:34:1F:32:87
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d7:81:4e:eb:1a:39:50:c2:87:67:26:a4:f8:62:47:ae:c3:
f8:10:89:fc:7c:03:a0:c0:ff:39:05:72:cd:92:7d:ff:dd:4f:
85:9f:3b:c2:39:e0:05:73:52:19:a3:94:e0:d7:3c:2f:64:e2:
d3:d0:d5:82:70:85:c3:9e:24:1c:f7:20:87:51:3a:fc:ee:bf:
ab:58:9e:60:af:a5:47:d2:e0:07:5f:f3:c0:64:f6:06:75:08:
d4:7d:d7:90:48:3b:63:74:ec:0e:40:eb:f6:8f:46:54:b4:99:
74:c0:7a:21:63:29:de:89:47:4c:8d:e9:da:d9:b4:05:2d:8b:
da:d3:89:45:bc:5a:bd:81:d3:bf:9c:7d:76:de:48:64:e0:81:
77:cb:73:98:e8:1d:94:95:81:d1:4f:ce:42:0e:d1:60:9f:5b:
34:eb:d9:96:33:26:b1:46:4e:93:22:ff:e6:a6:5b:41:2c:b0:
53:c2:02:1c:e5:17:75:c9:ac:76:3f:33:7c:40:17:c2:15:29:
3a:dc:95:9f:39:0f:d4:24:a6:5d:c2:94:b2:cd:1b:6b:bd:af:
19:cc:cf:b5:69:b6:e4:fe:9b:73:4e:01:99:22:70:b1:d9:1d:
a6:e7:59:b5:5d:56:5c:32:9e:90:09:6a:fc:95:22:93:07:18:
fc:30:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:38 2025 by rpki-client