Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: QJMoMrN8LtD9bvPl8dJ6LOBIoaIJ6T+X4hVr9mrDmqU=
Subject key identifier: A4:FD:25:01:31:BE:63:42:C7:CA:20:A1:AC:18:93:67:6C:CF:AA:10
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 244123E2E3731CCA311D9E718A2C509F995713AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 03F9
Signing time: Tue 04 Nov 2025 03:05:16 +0000
Manifest this update: Tue 04 Nov 2025 03:00:16 +0000
Manifest next update: Wed 05 Nov 2025 04:25:16 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: fBDS9xb39vDYWRT148zs64BdEzQFzaQKN0NG345qSC0=)
2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:41:23:e2:e3:73:1c:ca:31:1d:9e:71:8a:2c:50:9f:99:57:13:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Nov 4 03:00:16 2025 GMT
Not After : Nov 5 04:25:16 2025 GMT
Subject: CN=A4FD250131BE6342C7CA20A1AC1893676CCFAA10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:79:77:df:9e:26:db:6a:ea:b7:b1:58:e6:
75:9b:ff:8e:82:75:2b:f0:2e:03:01:f8:a1:bb:f7:
e3:31:62:49:13:ee:61:e5:ab:95:80:1c:62:8f:db:
9c:ac:2f:c9:47:47:a4:db:81:eb:6b:8a:bb:20:95:
a4:1b:f3:34:35:bd:37:f8:bf:4d:a4:9c:63:44:c2:
c8:d5:d2:f2:3c:c7:d5:50:52:ca:e7:78:53:39:06:
ef:1c:1b:f4:86:91:61:0e:23:c9:44:02:30:8b:c7:
68:15:a8:f8:c2:2e:b3:f5:c6:9a:0e:46:d6:bc:4e:
85:50:04:26:73:f6:64:ba:7f:a6:c9:55:f0:6f:0c:
b7:ad:04:c7:f1:be:41:9d:5d:f7:db:56:17:3b:22:
57:67:b1:58:37:45:5e:c1:16:76:d3:24:50:d2:72:
4d:b6:05:cc:a6:30:ff:5b:eb:d5:d8:1a:c7:6d:f3:
6e:26:32:03:4b:a5:46:27:a8:1c:9e:f0:4f:32:35:
80:42:7c:17:30:da:bf:4d:3c:b3:cf:cb:a4:07:c0:
5f:f6:87:17:c7:74:64:34:06:19:73:c7:ea:63:9f:
66:22:92:90:4b:f5:c6:a7:f0:87:f2:d7:d4:99:18:
73:23:f8:cf:25:53:54:d1:61:c3:93:da:09:3c:ce:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:25:01:31:BE:63:42:C7:CA:20:A1:AC:18:93:67:6C:CF:AA:10
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:90:68:12:06:15:87:9e:d8:b0:db:b5:cb:ba:fd:39:0e:4f:
1a:9c:18:17:37:f2:59:31:46:12:fc:43:c0:fb:7d:18:cb:80:
03:d0:0e:ea:0c:da:3e:db:5c:06:1f:df:bd:e9:bc:c7:ed:fe:
33:99:00:ea:13:3e:22:ca:4e:17:ab:9f:13:6f:fe:66:8a:83:
72:f1:a9:c5:2c:a7:67:f0:be:84:6b:94:14:0b:53:5a:ba:87:
63:3b:bf:0a:02:e5:5b:75:13:73:f1:e2:28:b2:9c:04:45:aa:
9b:e2:e4:4f:c8:01:0b:97:31:7f:4f:10:c6:89:fc:91:b1:9d:
39:e3:a6:c9:be:7f:f0:12:2d:90:09:a4:41:b2:1f:04:d4:cd:
f6:68:0b:18:9f:3a:31:f1:74:05:51:dc:c8:a6:9a:be:88:02:
33:00:7b:22:55:b1:fb:3f:26:d5:b1:5b:84:2f:cf:37:ab:b5:
9c:e5:6c:dd:68:20:c0:d9:88:a1:c8:7a:cd:a1:2d:05:49:da:
bc:c4:e6:45:bd:d5:93:0c:0a:c9:1b:88:79:12:60:24:14:9a:
6c:23:36:d2:ca:fa:13:07:73:70:db:c9:f4:c8:da:fe:c8:80:
a6:a6:6d:25:49:42:dd:c2:e1:d6:6b:29:bf:c0:f7:11:42:8e:
b4:35:d9:70
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJEEj4uNzHMoxHZ5xiixQn5lXE64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk
YTA2ZmNmNjAeFw0yNTExMDQwMzAwMTZaFw0yNTExMDUwNDI1MTZaMDMxMTAvBgNV
BAMTKEE0RkQyNTAxMzFCRTYzNDJDN0NBMjBBMUFDMTg5MzY3NkNDRkFBMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHnl3354m22rqt7FY5nWb/46C
dSvwLgMB+KG79+MxYkkT7mHlq5WAHGKP25ysL8lHR6TbgetrirsglaQb8zQ1vTf4
v02knGNEwsjV0vI8x9VQUsrneFM5Bu8cG/SGkWEOI8lEAjCLx2gVqPjCLrP1xpoO
Rta8ToVQBCZz9mS6f6bJVfBvDLetBMfxvkGdXffbVhc7IldnsVg3RV7BFnbTJFDS
ck22BcymMP9b69XYGsdt824mMgNLpUYnqBye8E8yNYBCfBcw2r9NPLPPy6QHwF/2
hxfHdGQ0Bhlzx+pjn2YikpBL9can8Ify19SZGHMj+M8lU1TRYcOT2gk8ziI7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUpP0lATG+Y0LHyiChrBiTZ2zPqhAwHwYDVR0j
BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv
R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w
YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE
QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypBoEgYVh57YsNu1y7r9
OQ5PGpwYFzfyWTFGEvxDwPt9GMuAA9AO6gzaPttcBh/fvem8x+3+M5kA6hM+IspO
F6ufE2/+ZoqDcvGpxSynZ/C+hGuUFAtTWrqHYzu/CgLlW3UTc/HiKLKcBEWqm+Lk
T8gBC5cxf08Qxon8kbGdOeOmyb5/8BItkAmkQbIfBNTN9mgLGJ86MfF0BVHcyKaa
vogCMwB7IlWx+z8m1bFbhC/PN6u1nOVs3WggwNmIoch6zaEtBUnavMTmRb3VkwwK
yRuIeRJgJBSabCM20sr6EwdzcNvJ9Mja/siApqZtJUlC3cLh1mspv8D3EUKOtDXZ
cA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:10 2025 by rpki-client