Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json)
Hash identifier: J432DYz2tXMD65+MLuWL3p0+mOtZJTOyd0e0mt2Farc=
Subject key identifier: C5:09:06:A3:7A:51:D5:D8:CC:6C:22:C6:D9:6A:16:A1:25:CB:5D:62
Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Certificate serial: 4873CFFA2FA18534E89D2E07FE68D69E647ACC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
Manifest number: 3F
Signing time: Sun 07 Sep 2025 01:36:00 +0000
Manifest this update: Sun 07 Sep 2025 01:31:00 +0000
Manifest next update: Mon 08 Sep 2025 02:01:00 +0000
Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: 44Kf9efba/JOmukawcQFsW+L0x8N0faZHc7qEu2pU0U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:73:cf:fa:2f:a1:85:34:e8:9d:2e:07:fe:68:d6:9e:64:7a:cc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Validity
Not Before: Sep 7 01:31:00 2025 GMT
Not After : Sep 8 02:01:00 2025 GMT
Subject: CN=C50906A37A51D5D8CC6C22C6D96A16A125CB5D62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:9c:45:94:68:13:61:18:f2:f4:08:bc:49:
74:4b:31:39:bd:a2:9c:93:32:fa:11:6d:62:c1:d3:
70:23:f0:5a:91:f8:74:9c:bc:45:76:ff:39:87:e2:
57:c4:8d:87:7d:ca:b3:b4:d7:51:f2:27:4a:60:6c:
db:8f:5d:0f:f2:6c:14:40:fa:54:79:e4:04:78:9f:
b9:4b:5c:8c:99:12:4c:da:2d:8b:08:f2:ec:f3:ba:
37:41:d0:8f:3a:a0:fe:1d:19:99:d0:c9:ad:7d:ef:
dc:c7:f9:f4:c8:a7:2d:94:82:41:56:88:e2:f9:f5:
e9:f5:25:f3:fc:f4:e4:39:54:12:fe:c7:43:a5:ea:
ed:99:b8:5a:89:d0:2f:92:b3:bb:bd:f7:c1:57:80:
67:95:60:1d:86:47:7a:dd:7b:a8:84:a4:92:cf:09:
77:e5:45:54:2d:a0:06:0d:bb:e0:1f:9e:68:55:c6:
38:fc:01:de:85:27:d6:c2:98:c3:3a:d2:aa:66:a6:
22:3b:ce:33:f5:88:2c:18:ab:e3:c3:49:fb:e7:a6:
25:2d:60:ac:a8:e6:e6:d8:fc:15:35:36:ca:b2:3c:
6a:05:b9:2d:ee:59:f9:67:c4:50:39:ac:0d:4c:e9:
70:4d:d2:2f:6b:03:d3:89:15:06:28:70:f6:ce:b7:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:09:06:A3:7A:51:D5:D8:CC:6C:22:C6:D9:6A:16:A1:25:CB:5D:62
X509v3 Authority Key Identifier:
keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:16:e8:d8:b6:3d:ea:78:fd:8a:4e:45:ec:a1:e9:85:ae:e5:
b2:6d:65:06:86:06:9a:38:5d:9e:32:ee:a5:61:54:b7:a8:5b:
dd:3a:5e:36:78:38:d5:af:29:e1:d8:43:fa:a9:e2:03:28:ee:
20:46:ee:3c:07:3d:5e:36:5b:cf:ad:df:34:f7:a6:0d:d8:c9:
e8:ac:10:2a:df:3a:34:88:61:8a:a5:b9:6c:f1:09:56:f2:49:
c4:c4:67:36:4d:e2:07:e2:25:6a:74:0c:0d:f4:67:b6:f0:6b:
e0:74:9e:92:57:de:14:9c:46:4d:0f:98:84:ed:bc:66:2c:16:
da:37:91:84:31:d2:87:35:8c:f5:0c:61:01:69:4d:1a:3c:56:
c4:1f:c1:fa:d9:f8:85:a5:4f:c9:0e:ad:c8:32:cc:ea:2b:09:
f7:c8:14:48:ba:75:02:d4:d2:82:05:df:c9:b8:71:96:3c:3c:
1b:35:66:c1:ef:d1:96:a6:15:36:fd:32:e5:82:8e:be:97:0b:
c1:2b:f3:32:3d:18:12:dc:84:88:a1:ba:e3:05:9d:ba:31:74:
f3:a7:63:73:d2:55:f1:c2:9f:4c:00:3b:5c:03:ee:80:7b:c3:
e5:f1:78:cb:fd:9c:eb:3d:dc:4b:df:f4:da:36:56:0c:46:fb:
b1:35:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:29 2025 by rpki-client