Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: iAqX3EgprUQ0mYgAXwfT6ZGkwFbdfoug6tk8+lj6494=
Subject key identifier: 5E:83:DA:DD:44:A7:03:5A:54:E1:F4:35:55:42:9B:DD:6C:01:1C:9D
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 6BF15073012988D0A827339B85B8C22031EB8279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 0259
Signing time: Sun 07 Sep 2025 03:51:04 +0000
Manifest this update: Sun 07 Sep 2025 03:46:04 +0000
Manifest next update: Mon 08 Sep 2025 05:42:04 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: qudr+UFh+ddQUGNGQVVmjob7aVXmfeh+D9bHApg3YfI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f1:50:73:01:29:88:d0:a8:27:33:9b:85:b8:c2:20:31:eb:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Sep 7 03:46:04 2025 GMT
Not After : Sep 8 05:42:04 2025 GMT
Subject: CN=5E83DADD44A7035A54E1F43555429BDD6C011C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:47:8e:06:66:2a:91:c9:7c:27:12:1d:69:
6b:53:ca:1a:d7:a8:2e:7e:8a:91:7c:f3:bb:f5:3b:
35:3f:7a:f7:4f:f8:b4:04:25:bc:ff:c1:15:46:ee:
e1:39:e7:60:f6:a0:ff:29:7c:e4:49:0f:11:cd:4d:
f6:98:39:5d:f2:e5:47:e3:c3:da:c0:4b:b9:bd:20:
4f:b4:31:05:49:71:0e:30:36:ad:73:02:51:2d:27:
3e:08:ac:ad:93:3a:a4:8b:58:1c:02:e7:86:fd:0a:
cd:e4:58:76:ff:fc:76:75:5a:f5:dd:a1:3c:ca:5a:
fb:20:c9:60:62:68:37:8f:c7:d6:17:ab:68:37:37:
42:31:93:51:d9:3e:de:58:46:52:c9:57:89:d4:80:
eb:b0:f9:49:8a:60:a5:30:ca:88:8b:a4:26:3b:28:
0d:09:bf:fb:42:10:01:04:e6:af:fa:18:48:bf:f5:
18:9a:ee:ea:37:58:04:c0:d0:b3:f5:9c:00:04:9d:
2c:ec:99:17:24:49:91:a3:08:12:10:5b:d4:9a:43:
73:e2:a2:97:b6:e7:88:e3:f2:97:85:e2:33:f0:ab:
ec:37:f1:09:cc:2f:56:b1:df:f0:f4:25:07:b3:14:
bb:04:d9:ce:25:4e:06:a3:70:b8:a3:84:f1:f0:18:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:DA:DD:44:A7:03:5A:54:E1:F4:35:55:42:9B:DD:6C:01:1C:9D
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:33:b6:8c:7d:5e:89:5d:34:61:ca:e9:a6:1d:a7:4e:fd:f4:
19:59:f1:df:b6:f2:cc:52:b5:86:be:6b:30:61:15:94:75:e4:
06:e6:4b:cd:36:27:38:86:29:00:50:ce:60:e6:6b:7c:c1:de:
7a:73:ec:69:63:99:33:77:7c:6f:e2:a1:f1:2d:0a:dc:b3:46:
1c:60:1d:c6:09:81:ad:3c:26:11:f7:31:e7:c9:bb:45:6e:67:
f1:17:53:1e:c1:5c:52:91:1e:c3:36:3a:06:d5:24:a1:71:85:
05:6e:05:d7:9d:5c:d5:07:59:13:bc:9d:0d:88:33:5f:ae:60:
95:f5:68:b1:4b:7a:08:13:c8:63:59:2a:1b:a7:ee:d3:79:3b:
f4:5d:8f:3b:73:e5:b7:8e:d7:51:62:6e:c3:cc:cb:d3:52:55:
a8:3d:d4:00:a9:be:73:fb:f0:22:4c:c3:3b:b4:17:68:d9:f4:
34:a5:93:70:79:74:66:3d:68:62:fe:cd:2a:d0:20:80:96:f2:
a5:31:2f:64:ec:79:9e:06:81:05:69:14:0e:ce:c9:c6:cc:eb:
45:2d:03:9b:ca:51:18:1c:49:98:77:00:28:73:61:fb:b6:6b:
33:7f:75:dd:01:82:02:da:17:01:b1:59:6c:4e:03:4b:3d:10:
00:c7:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:27 2025 by rpki-client