Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: 8frwfzLygJSHJc4xWY8nIWfVITNsGv1/NMxV7tbXmLs=
Subject key identifier: 38:3C:41:6A:08:B7:AB:AD:10:41:F6:91:04:7D:68:EB:14:90:99:81
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 08C66BF29C60B49A0769E4DE0B04DEB56904D5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 0570
Signing time: Fri 08 Aug 2025 07:30:37 +0000
Manifest this update: Fri 08 Aug 2025 07:25:37 +0000
Manifest next update: Sat 09 Aug 2025 08:29:37 +0000
Files and hashes: 1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
2: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: OxNh7iNPN9kQucCcT0rD9CztAauOyOnYmXSG5pXXnWE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c6:6b:f2:9c:60:b4:9a:07:69:e4:de:0b:04:de:b5:69:04:d5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Aug 8 07:25:37 2025 GMT
Not After : Aug 9 08:29:37 2025 GMT
Subject: CN=383C416A08B7ABAD1041F691047D68EB14909981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:f3:2b:7c:2d:df:04:2e:76:f0:fe:41:91:
99:2d:85:41:98:2a:02:9f:29:20:92:1b:80:28:8d:
1f:90:5a:82:c3:6c:e6:dc:4e:6e:d0:b1:b1:de:44:
44:08:e0:9e:87:a8:af:f1:85:3a:7d:8d:8a:fc:e5:
1e:de:58:5c:01:62:ac:93:6d:bd:21:57:a8:c3:6e:
d7:31:e2:a3:89:ef:50:7c:e0:af:ee:9c:72:f2:2f:
eb:7a:db:74:68:8e:87:81:47:ca:d9:31:27:d3:10:
f2:c5:fb:91:d7:81:db:86:45:c9:c5:4f:bc:14:e3:
93:e7:14:bb:f1:2b:08:ed:bd:a7:6e:b9:17:98:57:
a9:a7:57:ae:a9:44:24:ed:ba:88:d2:5c:8c:c9:53:
f3:81:29:aa:c7:a2:e0:22:80:63:82:3b:06:bd:5f:
87:ff:e0:a9:46:e1:74:8a:ad:d4:71:ee:42:49:0a:
b4:3b:ce:0b:52:2e:51:7f:ae:ff:4b:91:18:99:6c:
1e:37:c7:ca:7e:95:b3:e8:01:7a:44:0a:68:21:05:
8c:fa:5b:10:5e:ec:3c:fb:2d:d4:20:1d:43:4b:3a:
54:23:31:5f:34:e0:0f:c2:65:f6:42:18:61:57:fd:
7f:81:30:52:63:c6:d4:92:44:d5:7e:23:7e:da:92:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:41:6A:08:B7:AB:AD:10:41:F6:91:04:7D:68:EB:14:90:99:81
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:a6:24:ec:ca:05:21:b4:8e:1d:fd:af:07:f0:82:93:38:
d2:09:0b:0c:18:99:e4:cc:39:25:e6:4a:84:0a:4b:5c:7a:93:
17:f7:23:a2:63:3b:20:51:e2:92:45:33:4a:ae:ba:14:c0:f2:
24:cd:ed:b9:cd:d6:07:f8:0c:e4:32:d6:59:c1:ae:d7:52:20:
d0:24:41:01:d6:3a:76:d4:e0:90:ea:8f:81:bc:2e:40:d3:39:
06:28:12:2a:dd:7c:0c:37:09:bd:bb:18:0e:01:b8:6c:50:c5:
cf:4f:df:de:18:0b:68:eb:7a:d2:79:8a:b8:ed:75:72:30:fc:
17:4b:f9:b0:bb:af:8d:1f:58:79:86:f3:23:52:26:f6:f1:dd:
92:c3:e5:67:0f:b4:d2:a4:1d:be:86:9b:5b:28:55:21:82:d2:
1e:5d:12:75:f5:5b:ed:10:34:8e:1f:c0:a2:de:c4:88:48:72:
61:c0:00:b9:75:8d:60:8e:25:89:f5:37:f6:1e:e6:66:99:0d:
2a:ed:60:5e:5d:51:57:24:ac:56:ce:ad:37:69:f0:89:f0:01:
94:e9:af:37:89:9c:aa:10:7c:71:1b:62:76:82:f4:76:32:1c:
65:cc:21:f4:f4:8c:94:33:a7:ed:f2:29:c1:b2:dd:74:2e:fe:
5e:72:13:75
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCMZr8pxgtJoHaeTeCwTetWkE1dgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTcxNWE3YzQyNDNkZmQ1NjA4YWM3YzU5NjIwNTUxMjVi
OTRkMTc2MzAeFw0yNTA4MDgwNzI1MzdaFw0yNTA4MDkwODI5MzdaMDMxMTAvBgNV
BAMTKDM4M0M0MTZBMDhCN0FCQUQxMDQxRjY5MTA0N0Q2OEVCMTQ5MDk5ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM+vMrfC3fBC528P5BkZkthUGY
KgKfKSCSG4AojR+QWoLDbObcTm7QsbHeREQI4J6HqK/xhTp9jYr85R7eWFwBYqyT
bb0hV6jDbtcx4qOJ71B84K/unHLyL+t623RojoeBR8rZMSfTEPLF+5HXgduGRcnF
T7wU45PnFLvxKwjtvaduuReYV6mnV66pRCTtuojSXIzJU/OBKarHouAigGOCOwa9
X4f/4KlG4XSKrdRx7kJJCrQ7zgtSLlF/rv9LkRiZbB43x8p+lbPoAXpECmghBYz6
WxBe7Dz7LdQgHUNLOlQjMV804A/CZfZCGGFX/X+BMFJjxtSSRNV+I37akkDBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUODxBagi3q60QQfaRBH1o6xSQmYEwHwYDVR0j
BBgwFoAUpxWnxCQ9/VYIrHxZYgVRJblNF2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvQTcxNUE3QzQyNDNERkQ1NjA4QUM3QzU5NjIwNTUxMjVCOTREMTc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3B4V254Q1E5X1ZZSXJIeFpZZ1ZSSmJs
TkYyTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS9BNzE1QTdDNDI0M0RGRDU2MDhB
QzdDNTk2MjA1NTEyNUI5NEQxNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPumJOzKBSG0jh39rwfw
gpM40gkLDBiZ5Mw5JeZKhApLXHqTF/cjomM7IFHikkUzSq66FMDyJM3tuc3WB/gM
5DLWWcGu11Ig0CRBAdY6dtTgkOqPgbwuQNM5BigSKt18DDcJvbsYDgG4bFDFz0/f
3hgLaOt60nmKuO11cjD8F0v5sLuvjR9YeYbzI1Im9vHdksPlZw+00qQdvoabWyhV
IYLSHl0SdfVb7RA0jh/Aot7EiEhyYcAAuXWNYI4lifU39h7mZpkNKu1gXl1RVySs
Vs6tN2nwifABlOmvN4mcqhB8cRtidoL0djIcZcwh9PSMlDOn7fIpwbLddC7+XnIT
dQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:49:49 2025 by rpki-client