Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json)
Hash identifier: dr2+PQZzpyGy+yR+Gb5NXLtsd/qzV+fe92pbLHYraqU=
Subject key identifier: 72:17:AA:3C:4D:D4:4D:32:67:81:A6:63:22:A9:C1:C1:04:02:32:28
Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Certificate serial: 2FECDD556651FFAFF2866234447A98254A356F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
Manifest number: 92
Signing time: Tue 11 Nov 2025 00:12:35 +0000
Manifest this update: Tue 11 Nov 2025 00:07:35 +0000
Manifest next update: Wed 12 Nov 2025 01:42:35 +0000
Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: /5M8RkvXzuHgung913sYA8hdmnT+qjrfiDPXZ9ofLKc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ec:dd:55:66:51:ff:af:f2:86:62:34:44:7a:98:25:4a:35:6f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Validity
Not Before: Nov 11 00:07:35 2025 GMT
Not After : Nov 12 01:42:35 2025 GMT
Subject: CN=7217AA3C4DD44D326781A66322A9C1C104023228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0d:7b:5f:51:57:51:ea:02:b6:66:25:96:dc:
86:68:3a:11:c2:d4:de:ff:38:40:33:6b:d8:b0:8d:
6d:4e:37:2e:ce:46:ee:f4:ea:64:cf:8d:94:4d:a2:
64:10:c6:36:cd:70:95:76:6a:6a:5c:35:5a:df:ca:
c2:10:ae:2b:1e:dd:d2:10:2c:e1:d6:32:9c:77:7c:
3f:d5:1c:5a:90:dc:51:23:45:b0:83:98:a5:bd:93:
62:51:bd:ce:77:85:b5:d9:1d:d4:0d:bf:db:d1:03:
94:2f:00:53:0a:e6:c1:ac:04:e4:24:b8:0f:af:c6:
87:82:40:e7:80:a3:f5:c5:76:f4:38:a9:0f:51:45:
e1:fa:4a:ef:74:f5:31:19:62:a1:c2:73:30:c4:38:
fa:90:e0:66:fb:b1:71:6a:a6:0d:35:4b:a0:f3:93:
e9:40:e9:41:ed:54:d0:ab:d6:df:8d:1b:a9:1a:99:
f8:25:24:f7:ea:c1:40:ee:cb:c8:7d:e9:58:4b:cb:
e8:de:38:b7:6c:f6:86:ab:67:cb:39:26:b0:b7:f7:
5f:dd:04:8c:6f:6f:04:3c:92:22:17:42:fe:e9:12:
6c:6f:d7:f8:f2:80:5e:50:1c:d2:38:17:66:86:81:
94:98:0b:a2:10:21:88:65:90:f5:f0:6e:94:74:45:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:AA:3C:4D:D4:4D:32:67:81:A6:63:22:A9:C1:C1:04:02:32:28
X509v3 Authority Key Identifier:
keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:53:4d:94:ee:74:80:6c:48:a1:f2:e9:99:c9:19:d8:b7:
f2:62:bb:9c:26:9f:91:30:2f:2a:e0:52:95:68:8c:75:4c:fa:
92:a7:75:8f:dc:1e:df:39:3b:84:6a:b3:38:48:34:bc:95:b8:
0d:39:ff:2a:95:6f:01:4b:75:d3:64:c3:8a:6f:85:bd:72:c5:
56:8c:b4:bf:f1:fa:df:48:6d:6b:03:01:c0:9d:c0:c2:b2:8a:
94:fe:5b:a4:cd:18:16:7e:0b:28:e4:b2:01:f3:7f:59:f8:2c:
b1:4e:23:11:31:1d:b9:1a:73:c2:dc:24:51:cc:2c:b9:1d:1d:
26:d9:aa:4f:70:01:49:b2:c3:00:3e:0e:f7:a7:ce:1f:7a:d4:
86:f3:e9:0b:2c:75:73:da:d9:c2:62:29:b3:0f:96:dd:1e:e2:
29:a0:1e:6e:30:15:6f:e7:39:53:79:91:48:ad:93:81:6b:c0:
1b:26:e5:fc:9f:47:2c:62:bf:ec:dd:20:f4:e1:f3:2e:9a:8e:
23:ab:09:78:1a:4a:09:e1:c4:a9:14:2c:7c:3f:be:1a:d9:bd:
4f:9f:5d:9d:a3:e9:28:04:d6:64:6d:3f:08:e8:b5:a2:e9:3a:
95:ec:bf:dd:a2:6d:ad:95:b8:b4:c3:32:7b:f9:b2:b9:21:46:
67:55:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:22 2025 by rpki-client