Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: ABQz/86zekd75A0uC0U98+xJ/1JFrA0cohwCrrDDVJw=
Subject key identifier: 38:64:2E:E8:B1:A9:D2:44:76:76:07:52:08:53:5E:D8:BE:45:E8:E7
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 308E26702E46FE26BB4CB23D0FD731E2B0912864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 04A3
Signing time: Mon 10 Nov 2025 19:22:08 +0000
Manifest this update: Mon 10 Nov 2025 19:17:08 +0000
Manifest next update: Tue 11 Nov 2025 20:47:08 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: o6KyNOvHGRXi5Fx2XbKVSBDwn96MJ3jfcPURiT/vv68=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 20:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:8e:26:70:2e:46:fe:26:bb:4c:b2:3d:0f:d7:31:e2:b0:91:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Nov 10 19:17:08 2025 GMT
Not After : Nov 11 20:47:08 2025 GMT
Subject: CN=38642EE8B1A9D2447676075208535ED8BE45E8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:1d:d2:c6:25:ec:99:59:42:30:af:d1:42:
cc:fc:63:6d:5e:d3:4a:c5:95:6a:06:06:59:7f:8a:
3a:7c:c7:71:28:ba:0a:9a:eb:05:61:ad:2e:14:f3:
91:61:9f:56:4a:f5:9d:23:af:5f:3f:38:ee:de:97:
d9:ad:c4:bd:e5:d1:51:eb:b0:ef:48:7b:9e:3b:54:
0b:0c:08:76:d4:46:fa:b5:0e:cb:d5:bd:90:00:f8:
62:b5:b8:b4:f4:d2:54:93:78:a5:54:d6:40:62:5d:
28:f1:a6:36:bd:80:a5:f5:f1:40:ed:e2:e6:ab:31:
83:12:42:1c:5a:2a:f9:a8:ab:df:fc:67:a6:dd:ba:
22:51:26:f8:ce:bc:41:4e:d0:ee:a7:31:98:12:f1:
e2:07:9a:96:8e:e7:3a:81:fc:13:e7:60:bf:91:a8:
75:64:a8:14:8a:f0:3f:30:88:44:3e:4a:30:cf:8b:
60:f1:21:0d:8d:67:65:b6:ed:8d:a3:86:64:7d:c8:
ea:02:87:be:bd:fe:4a:e2:c9:9b:7f:d3:7e:ab:5d:
37:1d:e6:7c:7f:55:6b:63:81:99:83:8c:d0:9a:dc:
e6:73:6a:f0:25:7f:28:b3:dd:18:5f:4c:2f:4b:79:
2d:6d:71:3c:b1:06:ec:a9:c2:39:22:44:b8:3a:09:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:64:2E:E8:B1:A9:D2:44:76:76:07:52:08:53:5E:D8:BE:45:E8:E7
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c1:8f:d7:97:02:25:8b:a5:d4:a8:b8:68:14:3f:46:68:1d:
8f:4e:45:46:9f:00:41:c5:3f:c1:08:bd:83:21:3b:3d:b7:44:
24:2a:1c:1f:7b:ef:9b:09:ee:ad:2b:84:c5:6e:31:8d:b2:93:
86:9a:1a:cf:be:a7:9e:98:23:a2:db:b5:16:07:25:a6:5a:b2:
91:7a:51:d1:93:91:13:51:8c:10:64:4b:34:4c:54:bd:19:8a:
4f:ce:32:5b:c6:7d:36:65:87:65:ab:37:27:de:1d:38:da:3d:
94:ba:6a:f0:1c:f6:d4:33:59:3d:60:bc:27:09:c6:c6:be:ba:
0f:37:ff:d9:e8:e6:94:31:b7:ed:61:71:42:4e:af:25:f0:83:
da:5e:87:c8:4d:9f:54:7c:e5:49:e4:02:24:d1:b6:50:7a:fe:
66:86:24:75:8b:1e:eb:7e:6a:c3:b9:12:06:7a:fb:b4:d2:0c:
65:4c:42:10:74:71:84:86:a9:24:10:20:6b:34:c4:57:04:16:
e3:28:45:b6:2f:94:2b:07:98:12:0e:fb:5e:b5:06:28:73:7d:
5d:b5:b0:66:dd:c2:3a:1f:13:b5:44:c9:d6:a0:ad:05:17:6a:
ed:4c:c1:82:74:42:b3:8c:19:56:a7:bc:b6:6e:77:90:d5:d3:
fb:af:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:08 2025 by rpki-client