Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: l1zgrL/pMawLmPJBMza9NKHgH1S1/9GK0hoVoFoxQiY=
Subject key identifier: 8D:4B:7E:C9:CD:C3:5D:46:25:D7:97:EC:08:48:7F:23:09:3E:73:8D
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 1FF6B6B2CA125B6708F6217215EBF0E7443F3FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 03D1
Signing time: Fri 06 Jun 2025 23:20:18 +0000
Manifest this update: Fri 06 Jun 2025 23:15:18 +0000
Manifest next update: Sun 08 Jun 2025 00:29:18 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: skAXMOetzQMi4b4saQHTpQ1fEM/2gzRK99aYGK2qPHM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f6:b6:b2:ca:12:5b:67:08:f6:21:72:15:eb:f0:e7:44:3f:3f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Jun 6 23:15:18 2025 GMT
Not After : Jun 8 00:29:18 2025 GMT
Subject: CN=8D4B7EC9CDC35D4625D797EC08487F23093E738D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:c6:0d:19:8f:92:70:8a:32:43:77:c4:18:
63:59:b5:d9:c5:86:63:a3:f7:66:fb:a8:70:0b:5b:
a7:77:e4:9e:17:72:ef:28:cb:d0:12:22:f9:bf:10:
7b:ad:3a:69:cd:b8:e6:78:8b:e6:2a:f9:23:3d:44:
12:e9:e9:ba:35:3e:ee:88:11:01:91:95:e8:10:d7:
20:03:71:30:ff:80:c1:8a:34:5d:61:7a:5d:07:44:
bd:63:fa:f6:07:5a:28:48:4a:2a:f5:32:92:8e:89:
57:42:e9:25:e3:1b:3a:8b:ad:0e:41:19:c4:2f:af:
df:4f:79:2e:87:d7:f9:77:6d:57:5d:10:37:9a:f8:
36:c4:6d:21:9d:56:1a:f1:b0:0e:3e:33:55:4e:65:
a4:54:76:44:f5:df:27:cb:b6:d1:de:83:ed:49:5f:
d3:42:07:9f:e8:cc:b5:e5:1d:b5:30:0c:fc:be:6f:
9e:62:d3:52:7d:8e:1a:a0:80:b6:30:e6:a6:df:91:
22:c6:e7:72:58:fd:90:56:15:81:13:b8:e4:2b:1b:
bb:8c:cc:f4:16:b3:e3:1f:b7:95:df:47:e2:7a:53:
c9:09:fd:bd:ee:b3:04:08:81:f0:2e:66:b5:7f:1c:
39:08:97:af:f0:3c:80:67:98:5f:8a:4d:22:ad:96:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:7E:C9:CD:C3:5D:46:25:D7:97:EC:08:48:7F:23:09:3E:73:8D
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:ae:5c:b3:37:2c:0e:cf:57:04:03:83:b4:69:d5:cf:e8:
9a:8a:fa:f4:26:33:fb:9a:11:55:53:0b:75:15:fd:67:a1:fb:
41:25:d6:b2:6c:4a:8a:74:8b:d6:91:7a:28:fc:a1:a6:8b:36:
a6:c5:8e:8f:69:d0:0b:22:55:95:37:69:89:4a:1d:2b:b9:8d:
52:97:51:87:94:ad:9e:ed:12:58:bf:90:e0:99:08:3f:be:31:
a6:ea:1b:f9:e0:4f:e7:3b:fa:8c:4b:9a:8b:f3:22:8f:d7:14:
79:2f:cf:a0:7e:03:6d:3a:57:d6:59:73:1e:fc:c2:03:f6:47:
cb:5b:93:e2:6b:f9:e1:f7:5c:92:2f:16:f4:59:67:87:c9:a4:
51:b4:c2:51:c3:49:9b:62:de:ba:91:6e:f2:56:c8:d9:06:95:
4e:6d:72:a6:a9:88:e2:3d:7e:29:c0:2b:ef:d3:6b:2a:2e:e1:
de:7f:81:8a:a7:42:43:74:4c:b1:35:50:d4:e7:f9:af:ad:a3:
f7:e0:fb:25:46:2d:a1:23:d4:24:db:04:c8:13:d5:38:0f:22:
c7:d5:98:d0:f1:63:d7:d9:1e:cd:a5:53:0c:73:32:6a:f1:52:
ea:e1:cc:47:cb:56:e3:1a:c8:2a:08:aa:40:d8:c6:49:83:63:
71:cb:64:d6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUH/a2ssoSW2cI9iFyFevw50Q/P9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGVlZDFiN2IyNmMzNWQyMmI1MGM1ZDBjZDg1NTQ0YmU4
OGRkOGYyMzAeFw0yNTA2MDYyMzE1MThaFw0yNTA2MDgwMDI5MThaMDMxMTAvBgNV
BAMTKDhENEI3RUM5Q0RDMzVENDYyNUQ3OTdFQzA4NDg3RjIzMDkzRTczOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQI8YNGY+ScIoyQ3fEGGNZtdnF
hmOj92b7qHALW6d35J4Xcu8oy9ASIvm/EHutOmnNuOZ4i+Yq+SM9RBLp6bo1Pu6I
EQGRlegQ1yADcTD/gMGKNF1hel0HRL1j+vYHWihISir1MpKOiVdC6SXjGzqLrQ5B
GcQvr99PeS6H1/l3bVddEDea+DbEbSGdVhrxsA4+M1VOZaRUdkT13yfLttHeg+1J
X9NCB5/ozLXlHbUwDPy+b55i01J9jhqggLYw5qbfkSLG53JY/ZBWFYETuOQrG7uM
zPQWs+Mft5XfR+J6U8kJ/b3uswQIgfAuZrV/HDkIl6/wPIBnmF+KTSKtlkE5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUjUt+yc3DXUYl15fsCEh/Iwk+c40wHwYDVR0j
BBgwFoAUDu0beybDXSK1DF0M2FVEvojdjyMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm
ODVjLzAvMEVFRDFCN0IyNkMzNUQyMkI1MEM1RDBDRDg1NTQ0QkU4OEREOEYyMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0R1MGJleWJEWFNLMURGME0yRlZFdm9q
ZGp5TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMTI4MjcxZS1j
MjY5LTQ5NTQtODdkYi1kMTg0ZGYxN2Y4NWMvMC8wRUVEMUI3QjI2QzM1RDIyQjUw
QzVEMENEODU1NDRCRTg4REQ4RjIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIquXLM3LA7PVwQDg7Rp
1c/omor69CYz+5oRVVMLdRX9Z6H7QSXWsmxKinSL1pF6KPyhpos2psWOj2nQCyJV
lTdpiUodK7mNUpdRh5Stnu0SWL+Q4JkIP74xpuob+eBP5zv6jEuai/Mij9cUeS/P
oH4DbTpX1llzHvzCA/ZHy1uT4mv54fdcki8W9Flnh8mkUbTCUcNJm2LeupFu8lbI
2QaVTm1ypqmI4j1+KcAr79NrKi7h3n+BiqdCQ3RMsTVQ1Of5r62j9+D7JUYtoSPU
JNsEyBPVOA8ix9WY0PFj19kezaVTDHMyavFS6uHMR8tW4xrIKgiqQNjGSYNjcctk
1g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:29:58 2025 by rpki-client