Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
File: 64742A2EF43282A0509E6A31574C96C8006ECCD5.mft (raw, json)
Hash identifier: zpycEUqee3Ay0nII2JolXEp3UC7nvev9Yym89m6tvkA=
Subject key identifier: CE:2C:4B:BE:24:1E:A9:4C:4E:48:97:D9:44:00:95:11:A6:AA:18:10
Authority key identifier: 64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
Certificate issuer: /CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Certificate serial: 2E7F0B4A9DD544F47BF5D9856D0DA8ECC87C7FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
Manifest number: B6
Signing time: Mon 10 Nov 2025 22:15:08 +0000
Manifest this update: Mon 10 Nov 2025 22:10:08 +0000
Manifest next update: Wed 12 Nov 2025 01:07:08 +0000
Files and hashes: 1: 64742A2EF43282A0509E6A31574C96C8006ECCD5.crl (hash: W7MmN+twpP2JjOxjxMa6ylLmf+9T8c9hSmVqpuV+GDk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7f:0b:4a:9d:d5:44:f4:7b:f5:d9:85:6d:0d:a8:ec:c8:7c:7f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64742a2ef43282a0509e6a31574c96c8006eccd5
Validity
Not Before: Nov 10 22:10:08 2025 GMT
Not After : Nov 12 01:07:08 2025 GMT
Subject: CN=CE2C4BBE241EA94C4E4897D944009511A6AA1810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:39:60:a3:6c:41:1b:8e:e3:b2:79:0c:86:
ba:fa:50:4a:06:51:17:d0:8a:94:32:63:d1:73:b9:
ad:1f:3e:e2:10:df:fa:22:76:5e:b7:9f:c0:ca:93:
b3:16:8c:d8:06:48:e2:42:96:6a:01:87:9b:27:81:
09:45:75:17:8a:23:8d:29:0f:2d:6f:ca:87:37:5f:
f1:e9:ad:9f:d1:f7:7e:d1:85:04:d0:08:84:dd:a3:
f5:b9:ec:69:d8:ba:d5:08:84:2c:be:be:72:20:ce:
69:ab:b2:76:3c:72:24:dd:71:1f:69:7f:7d:34:db:
a3:3f:5a:86:fa:eb:13:fb:44:cd:e9:71:66:9a:0c:
77:d7:a7:99:7a:85:b4:ec:38:bf:28:7a:26:74:31:
73:2a:78:88:3b:04:3e:8d:90:94:aa:d2:0c:51:9a:
89:84:bc:f1:dc:e7:68:00:ae:55:82:8b:f7:9a:ec:
56:a5:73:15:30:f5:57:e6:ac:7d:17:00:5d:86:76:
21:e1:40:74:d4:07:9a:e8:43:c3:67:59:e0:ef:e5:
aa:d7:44:6c:18:80:89:5f:83:ac:4e:86:01:34:e9:
7a:2e:07:9b:42:c7:7e:9b:99:06:76:c2:be:7a:5e:
9f:18:4e:ab:ea:2b:b4:fe:8b:86:db:61:e1:aa:da:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:4B:BE:24:1E:A9:4C:4E:48:97:D9:44:00:95:11:A6:AA:18:10
X509v3 Authority Key Identifier:
keyid:64:74:2A:2E:F4:32:82:A0:50:9E:6A:31:57:4C:96:C8:00:6E:CC:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHQqLvQygqBQnmoxV0yWyABuzNU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/0/64742A2EF43282A0509E6A31574C96C8006ECCD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:59:93:98:84:b9:0c:33:b1:0f:a1:9d:a6:09:d8:7e:f6:
39:eb:2b:59:71:6b:33:19:42:ee:7f:9d:de:51:e9:38:e2:7b:
61:6b:a6:73:d4:2c:2d:3d:12:b8:1c:b0:d8:d3:dd:d0:c2:2e:
9a:9c:19:f0:91:0a:bb:fc:02:74:30:5f:9d:e0:a8:9c:a7:46:
4e:75:19:a5:b6:e2:1b:02:47:cd:65:1b:15:cb:d1:e6:ca:58:
57:87:fb:6a:8a:5e:c3:fa:9f:ce:3a:46:5f:37:7e:67:fd:48:
28:1b:6a:75:ef:08:8f:12:72:47:01:c0:ef:49:d6:39:df:59:
4b:c1:96:5a:c7:2a:71:ee:90:c0:16:10:0d:10:13:8e:01:b0:
b8:52:75:e1:8f:d8:d9:20:58:48:82:a1:99:4f:a7:46:d9:42:
ab:ea:2f:2d:e6:7e:78:fc:dc:47:8c:00:e2:9c:ff:06:43:da:
2a:d2:13:4c:a9:99:49:78:3f:23:c6:96:ce:f2:5a:da:a8:96:
28:2b:07:2b:4b:88:b8:7f:bc:1e:39:79:2b:23:9d:f3:40:97:
93:40:86:2b:98:41:3d:67:81:ec:e1:7e:cd:4e:23:fa:67:07:
a7:1d:a6:b9:27:9e:35:7c:d8:c2:9c:9a:fd:dc:53:01:69:eb:
d7:fd:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:12:36 2025 by rpki-client