Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
File: F69066348CBBD67E19E5C1CFED53765401498B26.mft (raw, json)
Hash identifier: YPcL9D+31bTl/7DxwlG7KomCPpCnWMVL8wbziRZbkWs=
Subject key identifier: A6:99:86:09:6B:CE:97:80:BE:5E:16:83:8E:3D:48:B3:80:1B:28:CF
Authority key identifier: F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
Certificate issuer: /CN=f69066348cbbd67e19e5c1cfed53765401498b26
Certificate serial: 36D887401842D4BD91E8A0241D4B100EC87FB830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
Manifest number: 95
Signing time: Sat 06 Sep 2025 15:27:04 +0000
Manifest this update: Sat 06 Sep 2025 15:22:04 +0000
Manifest next update: Sun 07 Sep 2025 19:21:04 +0000
Files and hashes: 1: F69066348CBBD67E19E5C1CFED53765401498B26.crl (hash: YgAwPOXbcgEaRsvastzJ3qNKUU4cMQjluqgJtrZmpf8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.crl
rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 19:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d8:87:40:18:42:d4:bd:91:e8:a0:24:1d:4b:10:0e:c8:7f:b8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69066348cbbd67e19e5c1cfed53765401498b26
Validity
Not Before: Sep 6 15:22:04 2025 GMT
Not After : Sep 7 19:21:04 2025 GMT
Subject: CN=A69986096BCE9780BE5E16838E3D48B3801B28CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:8f:ab:57:c1:87:59:fb:2c:9b:34:77:7f:
9f:19:a6:f6:d2:e1:c9:27:f1:4f:a7:cd:dc:f0:2c:
f1:3b:e2:5e:d2:93:5c:21:36:bc:64:17:50:7c:e5:
da:43:6e:13:52:57:77:e8:a1:88:35:76:13:b1:b9:
42:b4:79:0a:7c:8e:7e:ff:60:88:fd:57:f7:56:31:
7d:c1:8b:e7:f7:da:a2:f8:f0:cd:b2:f3:51:48:3d:
bb:d4:05:1d:71:30:65:71:a2:35:4d:87:d1:03:89:
b7:d7:c6:9f:bd:3e:eb:68:72:19:a0:4f:be:b9:0e:
3b:76:c9:45:69:76:55:37:ad:bc:b3:13:bc:0b:4d:
1c:a7:be:b6:6f:a4:d4:9e:ca:5b:cd:5c:99:e6:02:
a0:08:7e:2c:ab:03:56:9f:5b:92:b0:e3:91:9e:b2:
a3:80:e5:30:11:36:96:c9:f9:07:65:b0:18:82:d4:
3c:1e:38:18:e3:2f:cf:b2:a3:1f:da:50:1a:90:dc:
26:0e:21:b7:10:45:d6:e4:cd:36:a9:81:e8:37:b3:
77:44:bc:61:cd:13:a9:23:4c:5f:79:8b:be:5a:51:
84:68:c2:e3:61:c4:97:a9:ac:00:4c:58:73:92:70:
b7:7e:cd:ee:52:c0:2a:89:0d:b3:ba:66:d3:1d:ba:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:99:86:09:6B:CE:97:80:BE:5E:16:83:8E:3D:48:B3:80:1B:28:CF
X509v3 Authority Key Identifier:
keyid:F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:62:4b:26:c1:91:e3:7c:73:e6:3e:55:d3:2f:3d:ba:2d:27:
2a:c0:95:19:62:2e:4f:ce:3f:53:ad:ba:0b:9d:b7:df:c1:92:
8e:86:22:26:e1:a6:3f:27:9f:47:3a:fd:5d:41:a1:65:b0:88:
2a:af:77:9a:a3:04:74:51:8b:13:b4:ed:c6:37:c0:0c:4d:f5:
66:5f:30:a3:89:d3:d1:4c:27:2c:d8:f4:d4:de:4e:a2:72:c5:
8b:70:39:a9:d3:fc:d9:0a:ae:5f:e1:24:7e:f1:cb:7d:66:51:
2f:e8:4f:61:a8:76:61:a6:67:61:06:92:f2:ce:46:ed:5b:bf:
53:70:41:f9:80:8e:ae:7a:7a:58:59:2d:51:8a:dc:60:c7:a6:
f8:e9:4f:35:b4:4a:62:f7:7e:c3:5c:0d:fb:8f:6a:c0:3f:cd:
8b:ff:66:5f:77:fe:92:d3:a5:00:49:ef:72:67:c0:26:b5:1e:
73:90:49:d6:ef:79:99:eb:4d:82:c1:86:4f:e7:57:bb:e6:42:
9f:40:f9:d1:4d:8d:f3:2d:63:c7:83:b7:cc:28:3f:c0:07:e6:
bd:9b:92:92:f1:9d:9b:2a:74:b4:d1:08:48:58:45:66:13:ef:
2d:2b:c1:76:3b:5d:b2:58:83:3f:49:65:7d:39:83:5a:86:ca:
6d:a6:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:48 2025 by rpki-client