Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
File: CF7320162773CFFE2866D9712A738E4199536117.mft (raw, json)
Hash identifier: 9pOzXLzV8LE8a3qDwBH3sM5DPEfkSu86RlzaSgrZsco=
Subject key identifier: 6B:12:D0:38:D4:2B:8E:EA:5A:52:1A:FD:EE:A5:7D:33:7B:AC:7A:7D
Authority key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
Certificate issuer: /CN=cf7320162773cffe2866d9712a738e4199536117
Certificate serial: 2A16D39D9153E062B313C5F04C1CD82AD2D83630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
Manifest number: 57
Signing time: Wed 05 Nov 2025 03:57:36 +0000
Manifest this update: Wed 05 Nov 2025 03:52:36 +0000
Manifest next update: Thu 06 Nov 2025 07:15:36 +0000
Files and hashes: 1: AS208824.asa (hash: pO2oqucndlObtPTLzYJvUNtIOdgCmd6bYfZzGJi1V2k=)
2: CF7320162773CFFE2866D9712A738E4199536117.crl (hash: DkcMa5YJsjijEYJB/c+Nx/LDEcIAm6kTmL+QfJ+n9c0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:16:d3:9d:91:53:e0:62:b3:13:c5:f0:4c:1c:d8:2a:d2:d8:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7320162773cffe2866d9712a738e4199536117
Validity
Not Before: Nov 5 03:52:36 2025 GMT
Not After : Nov 6 07:15:36 2025 GMT
Subject: CN=6B12D038D42B8EEA5A521AFDEEA57D337BAC7A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:1a:6b:f2:3f:06:63:b5:6c:36:ab:2c:03:
14:55:95:3b:a9:cd:78:74:31:d7:3d:21:86:90:f5:
67:fc:5c:55:d6:1e:aa:99:6f:51:81:86:89:7b:51:
54:2f:31:5d:3d:fc:95:7b:43:c2:5a:72:22:63:36:
e3:d9:15:c6:37:9f:e5:db:7d:85:0a:ae:bd:c4:4f:
92:c0:b5:ae:66:bd:ff:61:2d:5c:2f:b0:26:1a:92:
0c:9a:fe:13:4f:80:f2:2b:9f:55:b1:8d:75:23:e5:
0f:85:1a:80:2e:ad:99:a7:e0:8c:a1:91:c9:26:63:
bc:b8:27:f7:1d:1b:0f:3f:9d:bb:d3:c9:26:88:87:
c9:94:58:8d:b1:bf:db:0c:3c:40:c3:3e:65:9e:23:
da:f4:54:1a:93:54:d6:3b:2f:eb:f8:7a:fb:c5:3d:
7a:ab:f7:12:b6:93:06:6b:f4:50:c2:bf:30:af:46:
6b:bd:af:db:70:32:45:01:36:5e:27:46:d8:23:1a:
8a:86:d8:db:38:3d:2d:a4:3d:f1:88:73:90:39:df:
62:f3:75:ce:61:56:28:7e:23:58:7a:a9:1a:f9:e5:
fd:e8:2a:b2:af:49:0e:eb:27:b1:74:7f:15:72:f3:
fb:10:5c:20:71:4a:e2:8c:39:13:5c:c7:57:80:0e:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:D0:38:D4:2B:8E:EA:5A:52:1A:FD:EE:A5:7D:33:7B:AC:7A:7D
X509v3 Authority Key Identifier:
keyid:CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:16:33:28:9b:64:35:d1:11:f1:21:d9:66:a7:af:55:e1:
35:75:ea:59:7e:c3:c0:cd:c5:7c:b7:e6:5a:d5:a4:dd:79:cc:
1e:36:4c:6e:f3:e5:a7:8c:76:10:d7:32:86:4e:87:93:b1:7b:
98:0a:05:ed:9b:17:30:94:85:33:78:fb:6c:60:0b:a4:1f:3b:
a9:a6:4e:b7:b2:e9:c1:a0:e7:23:22:85:b4:9c:f2:d9:60:08:
31:65:a4:e8:1a:6f:26:b7:d8:bd:68:1e:8b:4f:3b:75:47:7e:
43:a0:ef:4e:ee:25:d9:83:91:8d:ee:22:d0:4b:f9:e0:61:cd:
12:aa:fd:8a:0f:c5:e0:31:41:6d:73:dd:a2:43:d1:34:c8:70:
5b:f0:90:8a:07:b1:8c:4d:03:f5:37:07:43:cb:9c:0f:0b:e6:
06:c3:b9:db:bc:50:fa:a6:ea:86:0a:bd:7e:34:77:76:c9:1c:
36:4b:c5:44:af:c9:c1:d8:8b:8e:db:f9:8f:50:22:1f:c8:57:
bb:9e:c2:d4:43:80:4a:1b:7f:b8:36:a3:1d:bb:1b:e4:4e:a3:
7b:ab:88:24:7b:c5:a5:9b:da:68:fc:d8:75:d1:9e:50:6c:58:
c1:14:73:c5:7e:ea:02:ad:4c:c1:b4:f3:fd:f4:53:7f:59:29:
6c:d4:b1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:23:23 2025 by rpki-client