Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: uN0jR5g/c55YYQpnP0obBIefVntsI2kp96eHFFM4bgI=
Subject key identifier: F6:18:EC:A2:D6:43:E5:85:95:97:1F:B8:73:AC:E5:A9:2B:96:EB:06
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 653703BAAC264EE818A958889E8A3901134C62D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 037E
Signing time: Sun 03 Aug 2025 21:14:01 +0000
Manifest this update: Sun 03 Aug 2025 21:09:01 +0000
Manifest next update: Mon 04 Aug 2025 22:18:01 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 20Wdp2ptEck2eo+IqEBsBaaoJDvmPUTNb7c2fjvZRdg=)
2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 22:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:37:03:ba:ac:26:4e:e8:18:a9:58:88:9e:8a:39:01:13:4c:62:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Aug 3 21:09:01 2025 GMT
Not After : Aug 4 22:18:01 2025 GMT
Subject: CN=F618ECA2D643E58595971FB873ACE5A92B96EB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:17:62:78:4f:8b:78:d7:1b:7d:b9:0b:39:
16:57:92:cb:af:67:1b:26:07:c2:0e:39:d1:23:e4:
de:4e:e2:dd:61:81:fd:3c:35:f7:ef:c5:02:cd:6c:
91:ed:85:be:49:45:5f:b9:e7:a8:f1:60:b9:79:6c:
44:76:24:89:3b:d2:17:16:7a:d5:15:98:00:57:63:
e3:99:fc:65:2b:4d:38:6b:61:ff:06:2a:b9:fd:8b:
05:c5:39:d3:f3:70:49:27:cd:4f:ad:a1:ac:8b:ae:
9c:4a:19:5e:b5:4f:54:51:2d:21:47:5f:76:32:5c:
13:77:fe:49:90:c6:de:f4:14:19:d4:46:6d:57:85:
fc:76:4b:69:9b:61:c2:a5:c2:f3:24:8a:7e:50:51:
e9:b8:cc:98:de:91:e3:ae:b5:9c:f5:27:b5:a2:17:
aa:6a:83:8f:e8:6c:54:94:50:48:f3:69:32:7d:b0:
4f:de:d0:16:88:db:e4:ea:15:c2:70:b6:b5:71:42:
fb:a7:f5:74:49:1a:96:24:e5:82:9f:7d:88:a3:3a:
76:4e:80:c0:d9:00:c7:24:59:5a:67:fb:2c:33:22:
9d:9a:2f:57:07:bc:73:a5:3b:f4:2b:3e:a0:9a:27:
9e:8c:ac:b6:ad:19:d1:39:b3:dd:8d:d7:89:1a:c9:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:18:EC:A2:D6:43:E5:85:95:97:1F:B8:73:AC:E5:A9:2B:96:EB:06
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5d:77:da:d8:67:0e:bf:e9:b9:c5:58:2b:52:c6:c1:cd:e1:
f7:6b:ac:82:5d:36:40:20:f7:60:35:2e:d0:d3:4a:bb:ef:ba:
65:e9:6c:f6:84:9f:ab:eb:e7:f5:97:6a:6e:aa:96:a7:2b:3d:
4a:28:e2:91:08:c6:f9:45:aa:7b:89:92:b3:d5:ec:ed:14:6b:
13:f4:5d:ba:86:21:78:34:f0:80:e9:37:23:b5:a2:fb:4f:c7:
b9:32:f8:6e:cf:81:ca:be:f8:d0:3f:41:f5:b3:99:11:97:99:
a5:ce:37:e3:41:da:ec:e7:aa:76:ee:6f:dd:57:e1:ce:e6:fd:
60:42:02:8b:d9:49:5b:91:5d:c9:26:b1:25:22:24:ab:d9:d3:
2f:35:97:84:1e:4f:f5:29:f2:6a:28:9c:c2:f7:74:98:72:e4:
2d:8d:44:ef:cf:b0:c5:49:ed:d7:86:6e:25:e3:00:bf:35:ed:
a6:20:e1:1f:fa:ae:6b:f3:7d:a5:58:29:3c:61:3d:46:df:3b:
9d:6d:96:43:47:f2:94:5f:ea:9f:2b:f0:86:2e:46:17:0b:78:
ab:32:e3:d2:bb:61:a7:43:86:5c:5c:10:42:53:55:3f:8c:f0:
5f:66:2f:b3:5c:b5:fc:c3:11:ee:a6:f4:52:6d:6e:d4:00:67:
5b:a2:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:28 2025 by rpki-client