Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: rGnFdcldwGujU2DK+pOkgag1XUXUS4TiLigyS7QNNOU=
Subject key identifier: FC:F8:14:BE:64:28:EC:3C:99:AE:AB:A7:E3:28:BA:42:DB:E8:11:6A
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 2C258ABF9924CAAB60CF53618E306B20C06CDCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 0108
Signing time: Fri 06 Jun 2025 07:49:35 +0000
Manifest this update: Fri 06 Jun 2025 07:44:35 +0000
Manifest next update: Sat 07 Jun 2025 10:36:35 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: STTOabXOyk6WqBrybqOSQ748m6woqYw6orhsF0VuTO0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:25:8a:bf:99:24:ca:ab:60:cf:53:61:8e:30:6b:20:c0:6c:dc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Jun 6 07:44:35 2025 GMT
Not After : Jun 7 10:36:35 2025 GMT
Subject: CN=FCF814BE6428EC3C99AEABA7E328BA42DBE8116A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:61:b2:ea:3d:83:ba:74:3f:67:53:f2:ed:
5a:2e:22:cf:f6:c2:e6:dd:bc:e9:92:f1:f5:e1:d0:
46:08:6d:a9:52:c8:8a:50:07:81:e3:64:d5:ed:62:
1d:53:70:5f:3b:76:95:5b:f8:fd:7a:e3:84:5a:58:
77:3b:77:7a:9a:28:5f:b0:cb:16:fb:92:af:88:e5:
b2:20:2e:5f:fb:d2:8b:63:6a:a0:ee:5f:4f:75:54:
fc:0e:08:58:31:fd:a4:4a:32:b4:90:da:14:5f:3f:
aa:c4:14:62:b1:0b:00:63:4d:ad:22:36:b1:f3:b1:
b3:8f:92:87:4e:15:ff:5f:86:8b:be:b4:a7:73:48:
62:b9:54:f9:8d:50:14:de:ac:25:17:20:b1:8b:7e:
e8:b1:6e:89:80:63:0f:27:3d:49:5f:0d:d8:28:cb:
ee:55:d9:e6:ac:48:3d:d2:71:82:a6:81:1e:de:f9:
23:67:10:8c:02:c1:99:3d:c3:20:03:c9:f7:79:7f:
91:7b:c6:f7:6f:9b:fb:bd:63:08:66:2b:3e:bb:ff:
8b:ba:ad:2f:9a:9e:61:5e:f6:23:ab:df:44:0e:2e:
44:50:66:5a:40:47:f6:02:a5:bc:c6:5b:2f:72:5e:
65:a3:b8:54:6c:0d:e4:eb:17:f0:61:cd:e9:c4:d7:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F8:14:BE:64:28:EC:3C:99:AE:AB:A7:E3:28:BA:42:DB:E8:11:6A
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2e:d4:53:0a:a4:1a:af:b0:98:e8:a9:c9:b2:ce:62:54:fb:
b3:20:cb:e2:a9:d9:2e:d1:a3:87:ea:4c:0f:f6:ac:5a:b6:86:
81:a1:2f:0f:a7:89:13:be:cd:2b:0c:84:03:5a:b3:ca:cd:e4:
41:2e:f6:eb:84:b1:33:e1:d1:94:fc:82:e6:97:ff:cf:a1:42:
10:e2:0b:47:91:af:f5:fd:0d:17:66:11:3e:d6:08:93:54:e8:
6e:71:a9:33:5f:6b:e2:2c:e5:c2:41:5a:42:fd:c8:28:09:54:
bc:8b:0c:71:ce:e5:56:d6:ea:39:6d:a2:24:47:f4:81:f9:06:
c5:a0:c3:ee:82:c2:c7:95:ec:3e:63:47:17:a7:8f:97:da:ba:
f7:ed:e9:ce:bb:2e:cd:24:ac:45:e2:56:03:ab:68:3c:b3:46:
6b:5a:4a:21:9d:e3:7d:14:41:bb:83:04:3e:57:d8:ef:5c:94:
cd:68:6e:26:62:47:0f:10:20:82:20:56:f6:3e:5f:b7:84:fe:
51:37:c3:e4:63:fe:21:3b:7e:44:eb:5e:70:32:cb:28:04:fc:
36:aa:1f:13:57:71:d4:7d:da:a4:23:d3:c5:7a:bc:97:c0:a0:
1e:4e:aa:24:26:30:ad:25:60:ff:21:31:8d:b6:17:8b:37:65:
4d:f3:dd:97
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULCWKv5kkyqtgz1NhjjBrIMBs3K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZkMWRkNTIyZjYxMzRmMDcwMTk1YzVjMGUyZDRjMTFj
ZmE2YTk3ZDAeFw0yNTA2MDYwNzQ0MzVaFw0yNTA2MDcxMDM2MzVaMDMxMTAvBgNV
BAMTKEZDRjgxNEJFNjQyOEVDM0M5OUFFQUJBN0UzMjhCQTQyREJFODExNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdWGy6j2DunQ/Z1Py7VouIs/2
wubdvOmS8fXh0EYIbalSyIpQB4HjZNXtYh1TcF87dpVb+P1644RaWHc7d3qaKF+w
yxb7kq+I5bIgLl/70otjaqDuX091VPwOCFgx/aRKMrSQ2hRfP6rEFGKxCwBjTa0i
NrHzsbOPkodOFf9fhou+tKdzSGK5VPmNUBTerCUXILGLfuixbomAYw8nPUlfDdgo
y+5V2easSD3ScYKmgR7e+SNnEIwCwZk9wyADyfd5f5F7xvdvm/u9YwhmKz67/4u6
rS+anmFe9iOr30QOLkRQZlpAR/YCpbzGWy9yXmWjuFRsDeTrF/BhzenE13PZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/PgUvmQo7DyZrqun4yi6QtvoEWowHwYDVR0j
BBgwFoAUf9HdUi9hNPBwGVxcDi1MEc+mqX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy
MWI3LzAvN0ZEMURENTIyRjYxMzRGMDcwMTk1QzVDMEUyRDRDMTFDRkE2QTk3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5SGRVaTloTlBCd0dWeGNEaTFNRWMt
bXFYMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jODZiNjViMS00
NWU5LTRmYjItYWRjNS04N2JhNzExZTIxYjcvMC83RkQxREQ1MjJGNjEzNEYwNzAx
OTVDNUMwRTJENEMxMUNGQTZBOTdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS7UUwqkGq+wmOipybLO
YlT7syDL4qnZLtGjh+pMD/asWraGgaEvD6eJE77NKwyEA1qzys3kQS7264SxM+HR
lPyC5pf/z6FCEOILR5Gv9f0NF2YRPtYIk1TobnGpM19r4izlwkFaQv3IKAlUvIsM
cc7lVtbqOW2iJEf0gfkGxaDD7oLCx5XsPmNHF6ePl9q69+3pzrsuzSSsReJWA6to
PLNGa1pKIZ3jfRRBu4MEPlfY71yUzWhuJmJHDxAggiBW9j5ft4T+UTfD5GP+ITt+
ROtecDLLKAT8NqofE1dx1H3apCPTxXq8l8CgHk6qJCYwrSVg/yExjbYXizdlTfPd
lw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:10:19 2025 by rpki-client