
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
File: B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json)
Hash identifier: qVe0c/f1PrqcmW+v79iYUzAIvkm0rXaNfJAiutHAUwU=
Subject key identifier: EA:43:43:3A:8E:86:76:BF:C3:7D:B9:DF:B5:00:90:64:F2:42:07:FE
Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
Certificate issuer: /CN=b056811cb944a23c757f57affd483c6fcfb80119
Certificate serial: 4472A3C11BB032600C14EC2349D13C459AE4FE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
Manifest number: 0DC4
Signing time: Wed 23 Jul 2025 11:46:46 +0000
Manifest this update: Wed 23 Jul 2025 11:41:46 +0000
Manifest next update: Thu 24 Jul 2025 12:14:46 +0000
Files and hashes: 1: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=)
2: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: cpQG2Z+PmhBrpC9WE/ffUdk2yRWWw4On/ZPOpywit2c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 12:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:72:a3:c1:1b:b0:32:60:0c:14:ec:23:49:d1:3c:45:9a:e4:fe:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119
Validity
Not Before: Jul 23 11:41:46 2025 GMT
Not After : Jul 24 12:14:46 2025 GMT
Subject: CN=EA43433A8E8676BFC37DB9DFB5009064F24207FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:11:e9:0d:d6:a2:d6:22:87:8e:3a:ec:21:
a5:43:d9:02:fd:6b:dc:db:95:61:1d:99:9d:a8:c3:
0b:e7:cd:55:59:46:45:89:03:27:6d:6f:6f:99:04:
9c:d1:f4:e0:d5:93:da:b4:65:3b:6f:55:11:b5:37:
3c:a9:93:c1:5f:f1:4b:a4:fa:47:6d:a2:a9:f4:21:
23:64:45:4d:07:85:2b:65:10:1b:9a:d0:ba:f9:04:
a8:d9:f2:34:42:4f:e7:ef:1d:78:0f:ad:22:c2:c1:
7d:e0:d3:69:ad:04:29:3f:20:fd:ad:5f:6f:0f:ec:
22:59:78:5e:0e:a7:22:3e:93:ff:31:52:f8:26:56:
9a:fe:4a:6b:25:f0:95:9a:48:da:7a:f5:7e:24:44:
bc:1c:d9:5c:b5:63:2b:ce:ab:f5:a5:00:1a:57:bb:
47:54:12:9d:32:7a:f3:9d:bf:18:be:92:84:64:8e:
db:a4:9d:f0:53:a8:70:43:90:f5:03:10:78:0e:19:
8b:43:88:cf:4a:0a:18:ca:ab:10:5e:08:bb:72:b2:
d1:7c:ff:06:f0:be:f5:f0:90:23:0d:27:04:e3:38:
b5:ca:ab:33:46:e8:60:37:c7:b0:6a:a7:b6:aa:ca:
58:1e:0b:9d:bf:ff:92:d4:60:38:c0:19:d1:a0:6f:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:43:43:3A:8E:86:76:BF:C3:7D:B9:DF:B5:00:90:64:F2:42:07:FE
X509v3 Authority Key Identifier:
keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e1:c4:d6:85:4d:47:a5:3a:42:28:5e:2d:69:30:24:fc:bb:
46:13:1e:2d:7f:4c:43:01:31:1f:bc:a9:ef:45:f5:15:b4:9f:
c0:f9:4e:9e:12:af:cf:be:0d:94:33:53:84:0b:98:fe:bf:40:
16:6c:45:f8:5a:9a:c3:d3:dc:2e:e0:49:70:04:07:f2:95:76:
fc:aa:58:b6:e9:47:c7:c3:54:b0:89:72:9b:b9:d4:fd:70:ef:
6e:34:c0:e7:1a:b2:ae:d6:5c:04:d1:84:ab:cb:34:43:22:65:
c4:c3:d5:77:f8:87:75:24:34:4e:8c:62:c0:92:2c:59:e3:6a:
30:d5:c1:b6:7d:e0:f4:0f:45:77:16:25:68:85:f0:01:61:11:
99:94:9c:36:13:eb:bb:91:3b:e8:bf:0a:2d:c6:7e:e9:2a:f7:
6f:ad:eb:25:d4:1f:94:fe:32:5c:ba:e7:aa:52:fe:51:2d:44:
d4:7b:59:da:67:24:e9:37:3d:d8:3f:80:40:8d:af:11:5d:9b:
a3:e4:b8:c7:c1:fa:82:e7:55:be:2c:8d:8c:74:c0:b1:77:0c:
79:68:8e:78:41:16:a0:3d:33:99:28:f0:3e:57:dc:fd:7b:43:
cc:c6:ad:d2:b7:02:e5:bd:cb:26:37:49:3b:7c:96:c0:a6:78:
5f:47:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:57:37 2025 by rpki-client