Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: BJNMTWMnjOdQQl8K85ZA4m8Mb/4sEWPtBxvkX0TAF8s=
Subject key identifier: A0:99:72:80:2C:09:8D:26:7E:8E:36:ED:98:05:7D:99:43:7F:E3:4E
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 05A6ED3EF991F2437DBC2BA3F28F17483FB024AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 02AF
Signing time: Mon 10 Nov 2025 21:18:15 +0000
Manifest this update: Mon 10 Nov 2025 21:13:15 +0000
Manifest next update: Wed 12 Nov 2025 01:13:15 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: 0g8TAxbpl+p22MO8gM0iA2cLA4w9W8X3jAvKcLlhrJ0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a6:ed:3e:f9:91:f2:43:7d:bc:2b:a3:f2:8f:17:48:3f:b0:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Nov 10 21:13:15 2025 GMT
Not After : Nov 12 01:13:15 2025 GMT
Subject: CN=A09972802C098D267E8E36ED98057D99437FE34E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:fd:46:7a:c6:d8:5e:b5:d0:f7:b3:b3:86:
9c:5c:8f:de:bd:f4:1b:0d:f2:9e:b5:f4:9f:fa:c4:
72:f8:5a:aa:dd:a5:af:cd:7e:bf:89:6f:6d:8e:cc:
1e:5f:cd:d3:27:aa:4b:bf:5e:d5:23:7d:5c:9f:91:
5b:28:2a:ba:d7:0c:77:28:eb:45:19:72:56:5c:c4:
c9:ad:68:c1:64:a4:ca:3a:95:69:d4:58:05:d9:ba:
c7:1c:4a:20:d9:82:2e:79:19:1e:2b:36:60:81:39:
cc:d4:05:1e:e7:f9:87:aa:b5:9f:3b:51:2a:3d:03:
7d:43:14:d7:93:e1:85:90:fa:9c:c5:1a:76:dd:89:
b7:f2:a6:80:e6:59:b3:ec:bc:23:96:cb:42:61:d8:
ab:b8:3d:32:f4:75:80:74:6f:41:f2:39:72:4f:ae:
c3:31:5a:1a:2d:e0:0c:cb:85:d6:06:91:37:da:46:
fa:53:ba:c2:56:17:ca:ed:97:93:39:ef:04:e5:ec:
06:c2:0e:ee:6e:8c:e0:fe:b4:b9:58:d4:1e:24:99:
39:86:6b:8c:6a:84:4a:d1:c5:5d:16:53:0e:0d:24:
4a:b0:51:c2:78:05:05:ba:45:b0:36:27:af:81:a3:
1c:f8:6c:a7:4a:8f:4c:4e:38:e5:71:3e:dc:a7:ac:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:99:72:80:2C:09:8D:26:7E:8E:36:ED:98:05:7D:99:43:7F:E3:4E
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:be:26:50:bf:ab:f2:94:e7:a5:9b:56:19:4e:5d:f7:4f:bb:
b3:86:6f:2b:e9:4e:45:07:1c:24:ba:4e:14:ae:63:54:2d:89:
68:66:98:33:5c:c1:d2:b0:3c:c5:32:73:3b:6c:a1:80:48:b3:
38:1d:99:d5:8a:6b:56:3d:86:ee:1e:ed:79:69:8b:ef:1b:59:
76:17:10:ef:94:0c:cb:ea:e7:ab:d1:34:5e:a3:ca:04:b3:90:
ac:ab:1e:84:2f:ac:42:e5:e3:b4:60:c0:d1:0f:c3:27:49:09:
fc:08:37:ec:b7:6d:7e:51:ee:2f:a6:0f:64:09:cc:09:a8:94:
e8:3e:da:ac:18:f0:98:dc:6e:3d:8f:24:8b:ab:de:01:b9:07:
ce:f7:47:0b:9d:27:56:5c:64:07:4d:a7:4f:25:6d:0d:9c:a9:
33:39:41:f1:07:73:5e:e4:b9:f9:67:26:e1:d5:96:88:03:be:
60:93:ab:bb:2b:0c:bc:d9:7c:4f:08:31:06:65:8e:02:83:be:
45:6d:af:93:2c:62:b6:db:80:30:9a:77:03:0c:3e:1d:07:8d:
16:b7:e4:1c:06:51:6e:b8:73:7f:54:09:3d:69:4b:ca:31:db:
8d:ca:81:96:e1:2b:74:d5:a4:4e:f8:95:7b:2d:a0:70:fd:d0:
0b:e0:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:23 2025 by rpki-client