Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
File: D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft (raw, json)
Hash identifier: pRrY2fHnMs3zqOldts7IdXlQ/XfVMi7kMnA4/Os7JVw=
Subject key identifier: C5:6B:4E:0D:72:E4:32:60:CC:15:56:B5:9B:02:0F:25:2A:57:07:81
Authority key identifier: D8:35:71:90:AA:93:04:EC:44:27:06:E1:C0:7B:99:BC:4D:7F:5D:A3
Certificate issuer: /CN=d8357190aa9304ec442706e1c07b99bc4d7f5da3
Certificate serial: 1B09D686D8D31D2DDAB67CDD6B016879DA158220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
Manifest number: 6F
Signing time: Tue 04 Nov 2025 21:29:15 +0000
Manifest this update: Tue 04 Nov 2025 21:24:15 +0000
Manifest next update: Wed 05 Nov 2025 22:45:15 +0000
Files and hashes: 1: D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl (hash: vVzPXVPbsXCIwEqg0jQ+azlAbMS26fgqKrLgtiNyHy4=)
2: AS205941.asa (hash: 9spObUbHpAkXIM7YZ+50YqknkOiwFm1d8mVPPIYo0uo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:09:d6:86:d8:d3:1d:2d:da:b6:7c:dd:6b:01:68:79:da:15:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8357190aa9304ec442706e1c07b99bc4d7f5da3
Validity
Not Before: Nov 4 21:24:15 2025 GMT
Not After : Nov 5 22:45:15 2025 GMT
Subject: CN=C56B4E0D72E43260CC1556B59B020F252A570781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:e1:6d:7d:45:ef:d1:8a:af:f7:31:49:d9:
04:44:e1:05:10:82:6d:12:78:a0:b7:2a:0c:b2:0a:
d8:1a:37:41:a9:5f:0c:bc:76:c0:d1:16:9c:9c:16:
a6:3c:73:f7:86:6b:92:5c:57:c3:2b:a0:0b:d6:ec:
fe:47:20:6d:eb:b8:9f:7e:07:30:36:16:2e:16:d0:
c9:a0:2c:aa:81:fb:b1:61:6f:54:14:73:75:35:33:
ec:db:09:3b:47:ab:eb:91:64:f2:e8:44:cf:34:ee:
d1:02:5e:52:89:27:aa:9e:fc:c8:d3:5d:12:40:cf:
63:6f:ce:e1:89:94:90:cf:93:45:f8:9d:60:83:9f:
96:ab:d6:d0:9b:1f:53:64:54:26:f3:4c:42:0a:03:
d3:8d:00:f9:3c:ba:2d:92:dc:c4:fe:80:1c:ee:45:
68:70:8a:da:6e:a5:48:17:e8:b1:2e:fd:64:e7:87:
e8:ac:0b:d7:c3:f0:34:36:64:06:4d:34:97:37:b4:
68:1b:e9:f2:dd:dd:6e:a4:c6:13:15:a2:93:08:32:
6b:31:dd:65:d7:95:61:0f:35:d2:8a:c9:00:eb:5d:
2e:aa:27:19:b0:d4:8b:d3:f2:35:14:e3:c3:c6:e6:
6f:88:3a:ee:27:d0:37:88:6e:a7:a7:16:5e:46:f9:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:4E:0D:72:E4:32:60:CC:15:56:B5:9B:02:0F:25:2A:57:07:81
X509v3 Authority Key Identifier:
keyid:D8:35:71:90:AA:93:04:EC:44:27:06:E1:C0:7B:99:BC:4D:7F:5D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7c:cf:fb:04:4c:d1:e1:81:82:ff:df:a5:91:ec:f6:51:f5:
75:66:56:cb:fe:c8:35:14:d2:20:59:4f:a6:18:b5:8e:30:cd:
35:4b:c2:94:95:bb:0d:21:70:0d:be:5e:bd:4b:6a:a7:dd:6c:
d9:a6:36:ee:52:1d:b1:08:bc:a2:a1:75:a1:e9:c1:38:4b:aa:
89:40:57:3d:7c:df:f6:e7:17:22:1d:20:1e:2e:5a:c0:1f:80:
20:3e:a8:22:51:7b:34:3d:bb:49:3c:76:c7:08:d2:79:38:9d:
2d:b2:bd:0c:70:75:b6:7d:bf:7d:e0:78:81:10:fd:15:89:ec:
5b:e1:ac:82:9d:27:34:d7:fa:66:ed:11:e5:a2:5f:60:54:e6:
1a:4f:3a:79:1e:cc:ee:cd:89:0b:0f:2c:64:a0:88:bf:0c:a4:
fc:d0:86:04:e5:72:2a:93:fa:c6:6a:c0:6b:f5:e2:56:56:18:
f2:4d:65:d7:f8:d1:a6:42:71:40:67:67:b2:25:f8:9e:37:06:
54:81:82:95:f4:5c:e7:c2:95:6e:0f:b6:bf:cd:91:1a:b1:d6:
e9:f4:6f:d3:f7:9b:e5:15:2e:86:2f:80:b3:05:2e:00:31:7c:
c7:f5:f5:79:b0:d0:51:1c:fb:60:98:f2:74:9d:79:0d:bf:a0:
f9:14:1f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:24 2025 by rpki-client