Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
File: 1215278DAD24717513E9235A15705AA467DD6205.mft (raw, json)
Hash identifier: ZjKA0p6o8UOl9QcoDV+JSTgYWYvWdj5kIgv5/KXAopU=
Subject key identifier: B4:D7:B8:AB:00:34:AA:D4:8A:33:8C:0E:7D:C4:72:A2:BA:A7:C0:56
Authority key identifier: 12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05
Certificate issuer: /CN=1215278dad24717513e9235a15705aa467dd6205
Certificate serial: 0DF3EEB6D6CDA542A71C86D975FDF852844E15A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
Manifest number: 05
Signing time: Tue 11 Nov 2025 00:38:14 +0000
Manifest this update: Tue 11 Nov 2025 00:33:14 +0000
Manifest next update: Wed 12 Nov 2025 03:20:14 +0000
Files and hashes: 1: 1215278DAD24717513E9235A15705AA467DD6205.crl (hash: i42e7dHj0HXPZsLkF5IVe80GvV60HXxMXjX+9ZauYas=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.crl
rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f3:ee:b6:d6:cd:a5:42:a7:1c:86:d9:75:fd:f8:52:84:4e:15:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1215278dad24717513e9235a15705aa467dd6205
Validity
Not Before: Nov 11 00:33:14 2025 GMT
Not After : Nov 12 03:20:14 2025 GMT
Subject: CN=B4D7B8AB0034AAD48A338C0E7DC472A2BAA7C056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:2f:87:e6:61:ca:93:da:5f:77:c9:64:b9:
c7:ea:3e:6f:07:c0:49:f2:91:4f:5e:c5:44:64:ef:
d8:86:2b:fa:94:23:bd:e6:1c:a9:59:12:75:fa:f5:
83:04:cc:6f:28:f6:a6:e2:80:c6:38:9e:39:10:8f:
84:a2:ed:f0:b0:6f:e2:21:06:24:7b:5f:84:7b:0a:
92:44:82:30:5b:4d:f9:49:fc:b6:62:f1:96:fa:7e:
2b:32:d5:3e:d5:bf:27:33:6a:4f:5c:68:cd:ec:53:
7d:81:09:70:f7:e5:01:48:dc:2f:af:1c:ed:4d:d6:
ad:d5:1b:43:6d:16:d9:24:b5:2c:61:da:92:1f:4a:
50:1e:42:4f:92:d0:bf:55:e9:e5:0c:d2:11:80:7e:
5a:1c:cb:b4:fe:a5:bb:a8:0b:e6:c7:cd:3a:0a:fe:
d4:57:21:1f:e3:f4:49:0c:8d:b8:b4:f9:aa:13:4c:
9c:80:d4:0e:99:34:bf:5a:96:6f:c3:9c:d0:16:7d:
2b:d3:e6:57:af:4b:51:36:19:f6:9f:48:3b:f3:82:
6d:2f:c7:15:dd:e9:af:a7:08:ef:d8:af:d8:24:6c:
e8:b4:43:15:8c:10:97:c1:ab:dc:00:9c:de:1d:3e:
e0:f5:b6:ef:d7:e5:bc:07:ce:c2:ae:e9:6f:5b:73:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:B8:AB:00:34:AA:D4:8A:33:8C:0E:7D:C4:72:A2:BA:A7:C0:56
X509v3 Authority Key Identifier:
keyid:12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e5:d7:e7:18:7c:12:87:20:2a:28:7c:80:e5:4b:44:29:b4:
55:86:4d:53:6c:61:3b:61:c7:d8:68:01:82:34:7d:94:4c:d7:
6d:15:c3:b6:b9:3e:14:a1:b1:07:76:dd:0d:3f:d8:f4:db:66:
f8:7e:58:18:57:94:d1:0d:99:e7:87:fa:1f:34:95:80:6f:83:
97:e6:67:f9:52:ff:fe:40:bc:be:f0:e2:8f:6e:e7:b5:69:ec:
ed:94:e8:98:33:c9:25:47:7c:96:f2:4a:f1:2c:0d:7d:b8:1c:
4f:47:2a:e2:27:00:0b:6b:32:a6:4e:7c:e1:a5:e2:08:a3:f0:
4b:62:10:9d:0e:ed:89:8b:00:5a:28:76:b2:65:84:11:e3:c8:
93:a1:5c:f0:26:a6:88:4c:54:f8:7a:ab:4c:b7:59:4d:cd:dd:
8a:94:b8:1c:23:fd:a8:10:00:d5:79:9d:2e:c2:49:3e:01:f1:
b0:39:d2:70:c9:73:41:73:39:ee:05:ce:c1:8c:dc:0b:cb:cc:
c1:c1:fe:53:33:bb:ad:81:e5:3b:76:7b:7e:9b:91:d6:70:4d:
08:24:d8:0e:15:4f:59:2e:98:0f:22:60:4a:6d:2b:b0:de:17:
af:7f:b3:61:1d:87:d6:65:50:14:e4:c3:7a:21:2d:1e:42:cc:
5c:92:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:09 2025 by rpki-client