Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
File: B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft (raw, json)
Hash identifier: PJiDyYDzvA2IdZQBABv5O/yD0fFPASfPXpWSVcbPAA4=
Subject key identifier: AB:7F:40:CA:93:D5:C5:94:B8:13:B4:B5:0A:5E:2A:2C:E3:AF:18:22
Authority key identifier: B4:E7:A6:ED:B9:E7:28:7B:9A:C7:96:24:F5:73:F4:48:DB:88:01:5D
Certificate issuer: /CN=b4e7a6edb9e7287b9ac79624f573f448db88015d
Certificate serial: 63142A9A5DA534CCE950F4DBB0265A6AB4053C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
Manifest number: 3E
Signing time: Wed 05 Nov 2025 13:48:54 +0000
Manifest this update: Wed 05 Nov 2025 13:43:54 +0000
Manifest next update: Thu 06 Nov 2025 13:51:54 +0000
Files and hashes: 1: B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl (hash: pOETECArgMFWXpTJSrDi078KB8WyMkNKqRpklcMoAik=)
2: AS210796.asa (hash: DX1AoDPK1cM489HWvmZexK7UjV2p14LhFQl4Gowg9ew=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:14:2a:9a:5d:a5:34:cc:e9:50:f4:db:b0:26:5a:6a:b4:05:3c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e7a6edb9e7287b9ac79624f573f448db88015d
Validity
Not Before: Nov 5 13:43:54 2025 GMT
Not After : Nov 6 13:51:54 2025 GMT
Subject: CN=AB7F40CA93D5C594B813B4B50A5E2A2CE3AF1822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:77:a8:b8:6a:78:e6:2b:67:f8:4c:57:f1:
72:fd:e3:5a:80:bf:b5:f2:51:20:12:5f:e6:39:db:
b9:47:57:c0:88:e0:c6:0b:79:82:2a:e9:f3:47:d7:
98:a8:e8:e2:5b:50:60:06:5a:69:c9:8f:ac:35:41:
67:12:35:c2:90:be:e0:1b:15:61:b6:0f:73:fc:a6:
e9:99:8a:ef:8d:e4:b1:20:aa:23:86:a5:d3:10:63:
da:66:c5:7f:3e:c5:3b:41:2d:fc:90:81:a9:99:5c:
00:80:e4:f6:62:f6:d8:2b:ae:82:a2:37:58:5a:47:
19:7a:2f:09:c7:ab:da:f8:72:74:94:5f:65:94:fa:
74:e7:1c:ba:23:9d:ef:e1:d8:33:3e:21:c1:5a:21:
42:c3:3f:76:59:c4:4f:7c:ad:8f:39:27:32:ee:e0:
8e:96:f0:6e:3d:e2:63:57:61:0a:48:89:5a:9d:5d:
e6:05:33:a5:4c:09:eb:b3:b3:1a:67:56:47:eb:4a:
ab:22:a3:63:b6:d2:36:69:43:d3:75:c3:dc:a1:ed:
14:ff:fb:97:04:cc:28:3c:98:5b:e6:69:8c:6c:a7:
98:fc:3a:b4:bc:cd:85:b0:35:53:88:2a:87:c4:26:
3a:61:35:2e:54:ee:a2:d5:16:67:4a:1b:ea:b2:ed:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7F:40:CA:93:D5:C5:94:B8:13:B4:B5:0A:5E:2A:2C:E3:AF:18:22
X509v3 Authority Key Identifier:
keyid:B4:E7:A6:ED:B9:E7:28:7B:9A:C7:96:24:F5:73:F4:48:DB:88:01:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:08:2c:98:30:03:1d:a1:48:90:17:fd:1e:50:51:12:f8:bc:
e5:81:f0:f9:1e:74:2a:d1:ef:dc:13:29:2b:4f:d9:c1:60:05:
79:45:00:60:56:b8:8e:c7:d1:45:c1:93:c6:3c:e0:e0:87:e2:
09:60:74:89:15:70:1a:f7:8c:d4:52:90:c9:a7:3c:44:e4:1b:
e4:6c:6b:a1:62:c2:d2:3c:a7:99:0e:14:18:56:86:7f:d6:86:
10:68:75:7d:87:69:ba:f7:2e:e5:93:02:a6:b9:b8:b6:4d:48:
99:13:77:fa:9e:63:6a:df:33:d1:cd:e1:07:e0:73:b8:1d:91:
38:b1:26:d2:d2:a0:21:df:97:3e:e0:09:9f:6d:cd:4b:f1:24:
e0:76:b9:ce:3a:2a:5c:a7:9e:49:1a:d4:83:d1:3a:88:42:7e:
48:9f:59:c1:e6:19:91:94:d2:13:c8:7a:4b:ad:5e:c9:ed:e1:
24:26:02:ec:80:27:9d:b4:92:7e:dd:e6:36:72:af:09:25:06:
3a:22:a6:8c:d3:1e:8c:b6:ab:5e:3a:8e:16:a5:57:85:9b:81:
32:17:63:c9:46:9a:9c:1a:e8:7e:b9:ac:32:68:d3:f0:3d:8f:
3c:1e:af:d9:87:d9:e0:0f:d7:bc:8b:b0:6e:5d:db:a2:70:06:
bc:69:70:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:12:29 2025 by rpki-client