Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: 47AScf0jFy2/Eb6BLIiT70kHLQNfmMe2ju0NOQ1b7z4=
Subject key identifier: 07:E0:1E:F9:36:7D:06:C7:86:84:74:9F:3C:E2:33:47:5C:A1:58:2A
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 4118324F84CBDAA0D7D054DE75C50C8BAF9601EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 02F5
Signing time: Tue 11 Nov 2025 02:36:02 +0000
Manifest this update: Tue 11 Nov 2025 02:31:02 +0000
Manifest next update: Wed 12 Nov 2025 05:25:02 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: c2bmiGy352fOgfjYcoPLMxWYLjc82x4SQIyaRSl3dzc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:18:32:4f:84:cb:da:a0:d7:d0:54:de:75:c5:0c:8b:af:96:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Nov 11 02:31:02 2025 GMT
Not After : Nov 12 05:25:02 2025 GMT
Subject: CN=07E01EF9367D06C78684749F3CE233475CA1582A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:d0:fb:90:2c:76:69:28:7e:a4:eb:fe:66:
4e:af:91:dc:ad:2d:41:83:dd:72:9f:7f:9f:8e:bf:
77:f3:f8:34:b5:fd:55:90:52:4f:af:b9:0f:61:82:
01:84:70:fa:e1:05:52:9d:af:d8:15:c0:ea:d6:bf:
2c:1f:15:f5:a8:b5:d5:05:e0:42:b0:fa:da:e1:61:
ef:bd:25:bf:9f:37:ff:88:ee:ec:2a:fc:00:ee:dc:
81:da:2c:2d:a5:37:4f:37:d5:a5:de:aa:11:c8:91:
2d:31:9b:5f:ec:57:38:34:4c:12:a5:5f:b6:a7:4d:
fa:38:87:19:28:f7:d5:f5:e1:0a:a7:33:b9:78:d5:
10:85:4d:85:cc:b7:b8:6e:ef:6b:d4:9b:c0:ed:e5:
20:f3:57:de:2a:cf:e5:7d:c7:d7:32:d5:0c:33:19:
d7:d2:8a:67:8e:25:40:7a:1f:fe:49:81:7d:53:5e:
9b:ef:40:2a:08:b9:48:39:57:dd:c1:04:cc:7f:e4:
90:75:72:8a:8c:40:4e:d7:c1:a9:18:c3:b2:19:29:
45:ce:ac:3f:11:24:f2:93:27:e6:08:30:85:e0:cd:
fa:3b:14:c6:fb:53:ac:e0:86:88:13:4a:3e:aa:9b:
96:fc:f0:e9:4a:33:83:97:40:26:1e:69:e0:60:bd:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E0:1E:F9:36:7D:06:C7:86:84:74:9F:3C:E2:33:47:5C:A1:58:2A
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:00:ad:1d:b2:c2:ae:63:1e:ff:86:83:32:75:2d:d2:22:6d:
92:12:f1:57:e1:e7:49:10:ac:f7:d5:f2:dc:67:c7:04:2c:a5:
4e:f3:83:b1:54:e0:e7:2c:55:e2:49:45:1a:ac:5b:f4:32:e2:
2a:90:25:40:c4:14:04:a6:28:11:ad:b9:29:aa:cc:d2:5c:20:
e5:d5:08:02:23:4c:df:53:d5:7c:76:d8:4e:a0:7d:e4:ba:d1:
34:05:3e:b4:53:e8:2a:ab:4d:91:b9:ed:ab:81:93:59:c5:0c:
54:06:32:96:7a:c3:19:1b:c7:13:fd:73:fe:45:8b:22:74:0b:
af:3e:d7:4d:06:94:54:22:81:06:3c:cc:e9:82:49:e3:6d:d6:
c4:bf:53:66:04:1c:1f:a8:44:ec:6c:65:df:02:2b:8e:8a:73:
c6:dc:1d:17:34:d3:c3:93:ce:c9:aa:5d:c0:12:39:87:21:6b:
d2:c4:48:c9:83:37:30:12:16:2c:08:30:cf:8d:3f:81:8e:1c:
6f:f0:cc:54:94:25:6b:6a:62:73:7d:7a:43:f5:24:e9:28:aa:
b0:34:cb:83:43:4f:84:d2:c5:54:57:21:61:c8:40:1d:3f:ac:
97:f2:fc:5a:07:f7:49:c5:74:b3:9f:cd:2b:26:c8:40:1b:b3:
a2:ab:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:31 2025 by rpki-client