Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: qmWDBK6jVcyEsykkxCxVzcn2G7G3YIVO6E38ydd3JbQ=
Subject key identifier: 8C:07:F2:92:6E:79:5C:D9:C7:99:D7:F0:13:5A:0F:65:1A:40:EA:4A
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 4F59B1EC07F66B92C020F88E537033FF166C13AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 029E
Signing time: Sun 07 Sep 2025 05:10:55 +0000
Manifest this update: Sun 07 Sep 2025 05:05:55 +0000
Manifest next update: Mon 08 Sep 2025 05:42:55 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: /9sCRdCbi5Lv14rn5/16xEd1GV8cDPYr5rSZ5exzbN0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:59:b1:ec:07:f6:6b:92:c0:20:f8:8e:53:70:33:ff:16:6c:13:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Sep 7 05:05:55 2025 GMT
Not After : Sep 8 05:42:55 2025 GMT
Subject: CN=8C07F2926E795CD9C799D7F0135A0F651A40EA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:25:cb:ad:5a:e7:c1:84:d7:94:ea:5a:45:d8:
c4:0e:e0:66:4e:fc:6c:74:1d:8f:12:c5:8c:9a:3e:
4d:dc:b0:ed:d3:f8:98:63:7f:5d:ee:c9:64:13:04:
0a:a9:b4:cb:29:b3:8c:2f:22:be:7a:ed:dd:15:46:
3c:de:ee:6a:39:23:5c:8a:80:59:e1:f8:69:f1:bb:
12:05:98:53:51:8e:d2:c9:db:2d:64:ba:4c:18:e6:
87:8d:26:cd:74:ab:19:b8:bc:50:6d:43:c8:87:70:
ac:30:9b:17:b8:9d:e2:78:c1:41:7c:f0:25:ae:58:
43:d9:af:40:e0:ce:1b:76:5c:8a:40:ec:62:7c:27:
e4:e4:1c:d5:a4:8d:24:30:3b:b1:c0:06:c9:0a:ca:
26:90:70:f4:fc:54:11:1c:8f:b2:42:fa:a0:7a:fa:
f9:18:46:a3:b8:8c:33:8b:b2:9c:9d:ab:a7:ff:ce:
48:a5:5b:ef:a2:89:c8:0e:33:b5:e0:53:b9:ac:fa:
3f:37:bd:f2:23:7e:78:1e:c9:17:f6:5f:16:07:c9:
e1:f7:6c:e3:af:0b:f6:4a:fc:f8:e3:4f:21:1b:0b:
70:02:1d:32:54:28:6a:32:50:04:f8:ae:0c:6a:f9:
fd:a3:df:75:78:fe:2e:99:7e:fe:37:a9:69:17:29:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:F2:92:6E:79:5C:D9:C7:99:D7:F0:13:5A:0F:65:1A:40:EA:4A
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1f:ad:a6:74:e7:1f:62:50:b3:cb:ea:46:51:9f:bf:8b:e3:
41:b6:b0:2a:2e:d7:23:17:7a:74:86:4d:d2:f5:a3:37:b8:68:
ca:7c:fc:90:84:d7:b7:76:ce:54:91:9f:f9:f1:34:15:51:72:
83:a7:b9:83:a8:84:dd:8d:50:77:54:ca:6f:fb:91:cf:f2:09:
9d:90:1c:28:b0:28:d1:f7:94:d8:0c:4d:4a:7d:a7:4d:0b:e3:
6b:0b:9d:7c:31:56:fb:ec:e8:38:e6:ef:65:b9:cb:f8:58:cb:
c8:7f:fb:3b:41:a2:8f:76:af:18:f8:d9:29:f4:51:0b:69:59:
b3:f3:b3:86:65:44:c5:c1:84:6a:71:c2:b3:03:75:cb:c0:6f:
86:4d:88:cf:68:de:24:f3:51:2f:75:7f:77:38:29:6e:9d:e6:
82:ce:12:03:a7:48:35:08:83:bf:6a:9a:71:b4:74:19:cc:48:
aa:d7:52:cb:f8:cc:78:15:3d:95:3e:81:86:82:52:26:c4:50:
1f:06:43:1f:90:62:8c:7b:5f:13:f2:0b:56:da:c9:85:c4:3a:
b1:26:3f:44:d5:8d:96:fc:60:43:4a:9c:83:c8:c5:02:a5:64:
86:6c:e8:98:8f:32:f4:b0:e5:15:dd:b0:14:e0:22:79:8f:1a:
a8:3e:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:32 2025 by rpki-client