Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: UTZnd2PykD8AtiWKOUQl4aDj3ODga4G/QhnpE55BHUA=
Subject key identifier: 55:0C:3E:27:7C:12:C5:77:8B:F9:F2:2C:A7:DA:B5:5B:FC:71:CB:4E
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 480C66B716A8740F96A0184C930FE1321ECF93BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: DF
Signing time: Sun 07 Sep 2025 02:50:01 +0000
Manifest this update: Sun 07 Sep 2025 02:45:01 +0000
Manifest next update: Mon 08 Sep 2025 03:59:01 +0000
Files and hashes: 1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: PTgNev+x0/+jzrbdTsVsqA5rQScTCVBO7nzkGNXaCc4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0c:66:b7:16:a8:74:0f:96:a0:18:4c:93:0f:e1:32:1e:cf:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Sep 7 02:45:01 2025 GMT
Not After : Sep 8 03:59:01 2025 GMT
Subject: CN=550C3E277C12C5778BF9F22CA7DAB55BFC71CB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:12:9b:04:6c:a6:86:f9:1a:fd:5c:ad:39:
b9:8d:52:d2:6b:87:53:0a:fe:18:05:63:fd:73:b1:
f5:43:ab:0e:4c:c9:43:b7:33:b7:d9:2e:bd:c6:20:
7a:6f:f6:34:a4:fe:d2:0a:09:2f:f6:d2:5a:71:84:
d3:9b:5f:a8:22:d1:fd:f5:eb:0e:fd:48:93:37:cc:
9d:e3:3a:1b:0b:72:18:61:ae:03:f1:ec:5a:d1:2b:
7c:bd:e2:9a:c3:2c:c0:d2:3a:9e:86:b9:18:56:5d:
f0:b2:a7:bd:74:0b:ca:45:5e:8d:a8:b1:d7:18:38:
9b:6d:c9:60:be:52:f6:36:23:b3:dc:46:5e:73:28:
9b:02:e5:7e:36:70:6b:d1:91:36:d2:f1:67:67:f5:
0f:62:eb:96:9d:37:fa:6a:ce:f5:f1:b1:66:8f:4a:
d9:c0:9e:4f:b5:ff:5b:7f:01:e7:32:2a:2c:95:61:
d3:02:f9:e2:d4:4a:92:5a:c5:23:75:05:68:1a:1e:
1b:d1:20:f6:90:5f:c8:7d:0d:a8:41:72:0d:89:b6:
f5:db:5b:7b:c5:b8:53:e1:42:bb:43:5c:44:5e:ec:
98:07:79:fe:bc:f5:1a:d5:55:38:e0:9a:d6:14:44:
cd:f1:56:01:44:6f:2a:ee:6b:bf:7e:1e:8b:1b:34:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:3E:27:7C:12:C5:77:8B:F9:F2:2C:A7:DA:B5:5B:FC:71:CB:4E
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:96:1b:34:92:5b:d9:31:fa:7a:40:92:67:fc:68:3c:64:
44:1f:d1:26:61:eb:dc:34:ab:76:33:8e:b0:33:d9:98:ac:cc:
2e:ce:82:e7:e1:8e:67:9c:8f:6b:69:d7:da:ea:92:e5:d1:63:
51:39:12:ad:e3:8a:47:1a:2e:5a:b4:c9:d0:2e:44:ab:b5:d2:
6d:b9:be:e1:c0:08:b8:a7:6a:fc:d7:1e:f2:1d:d9:cd:0b:ba:
36:ba:f1:3c:7d:6f:e6:16:39:87:ec:8f:e0:48:e3:d2:93:69:
b1:9c:cc:25:f1:cb:48:13:5c:b0:37:13:33:43:aa:da:56:52:
cb:14:e6:16:ff:55:32:33:48:92:cc:d8:55:1a:45:8c:ab:67:
e5:9e:6d:ec:f4:0c:79:0c:02:ec:53:89:75:da:2d:2f:75:59:
91:6e:8f:38:a2:c7:7f:fe:28:c3:44:d5:84:04:99:1e:2b:d5:
14:6e:75:97:a8:ca:8e:e4:08:05:b5:57:8f:be:22:b5:9e:e3:
af:c4:37:b4:e4:47:16:3b:1c:2f:a1:9f:2e:45:e6:8a:af:14:
f9:12:3a:22:1e:98:59:c6:2a:52:5b:cb:de:c3:50:9b:44:fc:
9a:e5:07:a7:35:62:78:a1:38:d2:26:a3:80:dd:8e:e8:c0:e7:
9a:80:ea:88
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSAxmtxaodA+WoBhMkw/hMh7Pk7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGZiYWIxM2RiMTIzYzVkNjNkYmJjNTUwZDIxNGIzZTEw
YzA5MTk5ODAeFw0yNTA5MDcwMjQ1MDFaFw0yNTA5MDgwMzU5MDFaMDMxMTAvBgNV
BAMTKDU1MEMzRTI3N0MxMkM1Nzc4QkY5RjIyQ0E3REFCNTVCRkM3MUNCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9BKbBGymhvka/VytObmNUtJr
h1MK/hgFY/1zsfVDqw5MyUO3M7fZLr3GIHpv9jSk/tIKCS/20lpxhNObX6gi0f31
6w79SJM3zJ3jOhsLchhhrgPx7FrRK3y94prDLMDSOp6GuRhWXfCyp710C8pFXo2o
sdcYOJttyWC+UvY2I7PcRl5zKJsC5X42cGvRkTbS8Wdn9Q9i65adN/pqzvXxsWaP
StnAnk+1/1t/AecyKiyVYdMC+eLUSpJaxSN1BWgaHhvRIPaQX8h9DahBcg2JtvXb
W3vFuFPhQrtDXERe7JgHef689RrVVTjgmtYURM3xVgFEbyrua79+HosbNExhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUVQw+J3wSxXeL+fIsp9q1W/xxy04wHwYDVR0j
BBgwFoAUj7qxPbEjxdY9u8VQ0hSz4QwJGZgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjU0ZmQ3MzYtYmJjMC00ODgyLTg0ZTktNDRjYzg2Nzk1
ZGFkLzAvOEZCQUIxM0RCMTIzQzVENjNEQkJDNTUwRDIxNEIzRTEwQzA5MTk5OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2o3cXhQYkVqeGRZOXU4VlEwaFN6NFF3
SkdaZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iNTRmZDczNi1i
YmMwLTQ4ODItODRlOS00NGNjODY3OTVkYWQvMC84RkJBQjEzREIxMjNDNUQ2M0RC
QkM1NTBEMjE0QjNFMTBDMDkxOTk4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxKWGzSSW9kx+npAkmf8
aDxkRB/RJmHr3DSrdjOOsDPZmKzMLs6C5+GOZ5yPa2nX2uqS5dFjUTkSreOKRxou
WrTJ0C5Eq7XSbbm+4cAIuKdq/Nce8h3ZzQu6NrrxPH1v5hY5h+yP4Ejj0pNpsZzM
JfHLSBNcsDcTM0Oq2lZSyxTmFv9VMjNIkszYVRpFjKtn5Z5t7PQMeQwC7FOJddot
L3VZkW6POKLHf/4ow0TVhASZHivVFG51l6jKjuQIBbVXj74itZ7jr8Q3tORHFjsc
L6GfLkXmiq8U+RI6Ih6YWcYqUlvL3sNQm0T8muUHpzVieKE40iajgN2O6MDnmoDq
iA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:31 2025 by rpki-client