Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: 7amLAyKxZ7BiUX9o5WYQt3D8MbDjIU/am6v5+n9B6h4=
Subject key identifier: 02:F6:6A:28:AE:CB:13:4B:59:17:00:1A:7A:30:27:9B:95:4E:53:D4
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 6ABE14D6173807D549A8391CD1361D00F39A5036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 024A
Signing time: Fri 06 Jun 2025 22:50:38 +0000
Manifest this update: Fri 06 Jun 2025 22:45:38 +0000
Manifest next update: Sun 08 Jun 2025 01:30:38 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: frst7tx0qkxKMzR++kn1UvUtqdBtissO8lMHuxBdXQ8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:be:14:d6:17:38:07:d5:49:a8:39:1c:d1:36:1d:00:f3:9a:50:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Jun 6 22:45:38 2025 GMT
Not After : Jun 8 01:30:38 2025 GMT
Subject: CN=02F66A28AECB134B5917001A7A30279B954E53D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:73:59:0b:51:e4:94:3e:e4:8a:80:4f:a9:
1f:ed:65:b5:0f:0b:86:45:b9:0b:82:84:7a:78:d2:
5b:2c:ff:5a:2d:20:48:f2:d0:5f:91:dd:7a:4e:ad:
b0:17:9a:13:60:b7:8a:ac:01:c5:cc:0c:7a:36:de:
dc:73:a5:b7:37:28:2b:8a:96:7e:09:85:b1:12:10:
4a:79:f1:cc:86:47:29:ca:0b:86:d7:35:fd:e9:f4:
5f:ab:8a:b7:f3:7c:8b:e9:96:3b:d0:73:94:84:89:
0d:96:cd:68:97:ed:e5:16:1b:f6:a6:8b:72:f7:00:
55:ab:da:ac:7c:ec:6f:9b:57:eb:f9:e4:44:04:f9:
97:05:8e:a8:56:5c:8d:0f:f6:78:1e:08:65:48:30:
35:e3:56:fe:02:ed:b6:df:73:3c:06:30:04:29:f1:
23:e6:02:15:b5:35:ac:3b:8c:bd:9e:5a:15:0c:86:
ec:69:03:7c:a2:67:43:69:75:c3:0d:24:88:2b:7d:
46:30:84:8a:26:e9:24:61:f3:05:3b:95:76:cc:b5:
b1:14:d4:92:3c:71:be:06:89:ae:cc:02:b0:00:68:
4a:51:3a:e3:e9:13:f6:54:15:69:9f:af:d6:22:43:
36:13:2a:08:48:94:11:b1:a2:c2:34:8a:e4:d1:e2:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F6:6A:28:AE:CB:13:4B:59:17:00:1A:7A:30:27:9B:95:4E:53:D4
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c1:15:fb:ee:dc:0d:80:5a:3f:e3:ea:fc:9f:0a:a4:6d:23:
47:48:6b:db:94:b3:4c:f1:0c:7a:79:2e:2a:fb:2b:d7:3b:dc:
5a:30:64:a2:d9:a0:6b:38:7e:2b:0f:5c:89:a6:fd:d1:04:ec:
70:a0:e2:0b:7c:30:32:41:9a:10:7e:d1:c9:b5:70:f6:aa:1d:
3f:c8:ef:ad:ef:67:f4:e3:dc:4c:4c:a1:fd:77:ea:22:5d:af:
ea:34:20:f5:aa:87:17:fb:8a:ca:16:ce:94:a5:76:8c:30:a0:
ea:b1:9c:45:29:94:6d:bb:a9:d1:7f:dc:43:6d:6e:7f:fb:4b:
2a:51:9c:c2:f7:6a:a1:56:f0:5f:5b:39:8a:14:d1:7d:3b:8e:
9f:fe:4d:ee:e8:52:33:22:da:61:5d:eb:92:9b:a1:18:34:f6:
9b:c8:7c:80:41:ad:16:0b:ba:b3:27:a9:53:7a:f9:c9:6a:c7:
fd:38:bd:5e:25:65:a8:52:77:2d:4d:b6:ec:3f:69:b4:9a:fc:
2a:42:40:af:3e:85:5a:0c:6e:88:71:c4:ea:a3:bb:f3:01:39:
74:6f:9a:87:ff:32:8a:a5:9a:e9:cb:f9:9f:c4:06:ee:6f:9f:
35:73:3e:62:9f:0e:47:5f:0b:63:8b:02:a9:cb:38:96:cd:9d:
6d:c8:34:52
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUar4U1hc4B9VJqDkc0TYdAPOaUDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzY3OGNjMGE3YmFhOTU4OTE0NDFhZDgwOTU0NDkxZGZl
ZDg3ZDMzYTAeFw0yNTA2MDYyMjQ1MzhaFw0yNTA2MDgwMTMwMzhaMDMxMTAvBgNV
BAMTKDAyRjY2QTI4QUVDQjEzNEI1OTE3MDAxQTdBMzAyNzlCOTU0RTUzRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02XNZC1HklD7kioBPqR/tZbUP
C4ZFuQuChHp40lss/1otIEjy0F+R3XpOrbAXmhNgt4qsAcXMDHo23txzpbc3KCuK
ln4JhbESEEp58cyGRynKC4bXNf3p9F+rirfzfIvpljvQc5SEiQ2WzWiX7eUWG/am
i3L3AFWr2qx87G+bV+v55EQE+ZcFjqhWXI0P9ngeCGVIMDXjVv4C7bbfczwGMAQp
8SPmAhW1Naw7jL2eWhUMhuxpA3yiZ0NpdcMNJIgrfUYwhIom6SRh8wU7lXbMtbEU
1JI8cb4Gia7MArAAaEpROuPpE/ZUFWmfr9YiQzYTKghIlBGxosI0iuTR4jFVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAvZqKK7LE0tZFwAaejAnm5VOU9QwHwYDVR0j
BBgwFoAUxnjMCnuqlYkUQa2AlUSR3+2H0zowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzAvQzY3OENDMEE3QkFBOTU4OTE0NDFBRDgwOTU0NDkxREZFRDg3RDMzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3huak1DbnVxbFlrVVFhMkFsVVNSMy0y
SDB6by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05
NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMC9DNjc4Q0MwQTdCQUE5NTg5MTQ0
MUFEODA5NTQ0OTFERkVEODdEMzNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMEV++7cDYBaP+Pq/J8K
pG0jR0hr25SzTPEMenkuKvsr1zvcWjBkotmgazh+Kw9ciab90QTscKDiC3wwMkGa
EH7RybVw9qodP8jvre9n9OPcTEyh/XfqIl2v6jQg9aqHF/uKyhbOlKV2jDCg6rGc
RSmUbbup0X/cQ21uf/tLKlGcwvdqoVbwX1s5ihTRfTuOn/5N7uhSMyLaYV3rkpuh
GDT2m8h8gEGtFgu6syepU3r5yWrH/Ti9XiVlqFJ3LU227D9ptJr8KkJArz6FWgxu
iHHE6qO78wE5dG+ah/8yiqWa6cv5n8QG7m+fNXM+Yp8OR18LY4sCqcs4ls2dbcg0
Ug==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:36 2025 by rpki-client