Manifest
$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
File: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft (raw, json)
Hash identifier: Y/AyBzaCeR3RHHZKZXLlRpYVbNX0dPWLRo14lVfH43w=
Subject key identifier: 04:A3:96:8E:69:F9:69:63:1A:0A:F7:F8:AD:A1:C7:0F:01:5E:91:87
Authority key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Certificate issuer: /CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Certificate serial: 1BA4B34E5B9DDC4498A3AD5354A7AB9F00486F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
Manifest number: 0E
Signing time: Sun 01 Mar 2026 11:32:21 +0000
Manifest this update: Sun 01 Mar 2026 11:27:21 +0000
Manifest next update: Mon 02 Mar 2026 13:06:21 +0000
Files and hashes: 1: AS214749.asa (hash: rtjvYN0k7vmh5PkcG3ccW4AvhB2PUVVt+8Gkfr1HOH0=)
2: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl (hash: lUuexavVCVpNE8Mx1lGYPQZndftgBZrpQ/6dSouy3yQ=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a4:b3:4e:5b:9d:dc:44:98:a3:ad:53:54:a7:ab:9f:00:48:6f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Validity
Not Before: Mar 1 11:27:21 2026 GMT
Not After : Mar 2 13:06:21 2026 GMT
Subject: CN=04A3968E69F969631A0AF7F8ADA1C70F015E9187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:c4:74:98:e9:a6:23:2c:cd:99:dc:c9:eb:
c6:27:c8:dd:2b:f5:1d:cd:7d:09:e8:52:44:e1:27:
65:14:43:6e:58:98:dd:ac:6d:a5:7b:f6:4c:6c:ad:
8d:c1:d1:27:0b:b5:3e:ee:b5:d7:4d:c8:cd:06:e2:
c8:40:e5:99:69:65:e6:00:f6:86:4a:8b:2e:f1:9a:
0a:ea:3d:79:3d:ec:5f:14:c4:12:b9:a4:8f:cc:c2:
16:5c:7e:71:3e:3d:1e:05:fe:bb:8b:29:1d:e7:03:
32:8b:c9:e6:79:dc:71:03:e7:c1:bb:15:48:55:d8:
b3:cb:46:2d:91:13:ba:45:64:03:89:7c:3b:2e:75:
6d:b0:2d:6d:6d:f0:79:24:0e:16:79:7d:51:84:f2:
e6:06:c1:a2:9c:da:a9:a7:32:17:d9:4d:0a:9d:6e:
ee:ec:8e:c0:88:0c:c8:1b:c6:bf:67:45:39:ca:0f:
cf:ff:da:15:b4:16:b9:15:af:b8:52:b5:ff:70:db:
76:40:c7:96:1e:52:c1:10:75:34:b4:52:66:d2:96:
88:b6:2f:a9:ed:28:0c:8c:d2:1f:f2:ad:f2:c6:a9:
5d:92:9a:59:5c:88:bd:3f:84:c6:ca:e7:6b:7d:33:
a6:d1:e0:5e:0e:80:c1:b0:c1:75:10:a8:e1:ef:fe:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:96:8E:69:F9:69:63:1A:0A:F7:F8:AD:A1:C7:0F:01:5E:91:87
X509v3 Authority Key Identifier:
keyid:35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4c:56:72:b9:1e:66:59:f2:42:47:fd:78:d8:26:31:3d:84:
a3:a5:47:12:1d:d8:f2:cb:91:f5:11:1d:4c:c1:e7:2e:92:02:
8e:bf:52:75:5c:93:43:b9:6c:eb:6b:57:16:48:51:b1:af:8c:
c9:f8:f4:20:f8:ed:ee:4d:f9:1c:6a:e5:c3:61:14:57:d2:d7:
09:83:68:0a:89:42:23:2f:e9:5f:88:ed:92:61:2d:83:af:2c:
fb:a9:a2:73:99:56:e9:c9:2c:ce:f2:a4:31:1e:b9:2f:0c:4d:
f6:b6:79:97:b2:9c:de:49:2e:17:f9:97:f1:74:75:99:16:57:
7f:63:20:39:e1:89:7f:b7:dc:a6:57:b9:ee:73:a9:b6:99:32:
b8:82:cf:96:ce:c5:96:51:47:16:53:2a:f9:d4:1b:ac:25:c7:
72:39:8b:62:b7:8b:4c:c8:0c:cb:91:5a:58:7d:b0:d5:dc:7f:
f4:47:72:71:ff:93:19:92:8d:72:a0:93:6a:38:64:7a:93:b4:
1c:e1:c5:27:a6:25:af:b1:a4:ca:7d:9f:8e:75:17:ce:67:26:
13:9b:9b:7d:99:99:47:59:16:62:7f:05:d9:26:23:45:db:01:
35:ec:1c:d3:ee:07:f2:4e:08:13:34:d8:e5:9c:30:69:dd:5c:
ec:4e:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:24 2026 by rpki-client