Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
File: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft (raw, json)
Hash identifier: 1Xz9vcMWWTGYtLa/dsXlR9Fm8qdiwbMxbQEMF2mjfV0=
Subject key identifier: 86:23:B5:FD:40:21:01:63:A8:EA:BD:32:1C:57:29:5F:21:A7:EF:F0
Authority key identifier: 64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
Certificate issuer: /CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Certificate serial: 13B452B8BDEF80BAE492D3510969839558646238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
Manifest number: 02E8
Signing time: Tue 05 Aug 2025 12:27:21 +0000
Manifest this update: Tue 05 Aug 2025 12:22:21 +0000
Manifest next update: Wed 06 Aug 2025 14:54:21 +0000
Files and hashes: 1: 3138352e33312e3230322e302f32342d3234203d3e203231383430.roa (hash: Kajayyoa2dzx1Wy8xnY0CxCsWP+YAOcNiSJVzn+7fM4=)
2: 6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl (hash: BKHWOv/agWmnxspBkKfoRNLU8riUvtmASyeXyk+6dr0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b4:52:b8:bd:ef:80:ba:e4:92:d3:51:09:69:83:95:58:64:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6464045da5bed0687d15cbda67a04eb87a8fb03e
Validity
Not Before: Aug 5 12:22:21 2025 GMT
Not After : Aug 6 14:54:21 2025 GMT
Subject: CN=8623B5FD40210163A8EABD321C57295F21A7EFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:40:e2:a6:f2:fd:0a:7c:8e:a7:c7:c7:f8:4e:
c5:73:52:16:42:5d:7d:d7:1a:53:eb:e2:0b:07:c2:
7f:26:ae:db:64:ab:80:7d:1c:de:89:68:f4:e0:30:
33:b2:c3:5b:15:28:24:f0:cc:fe:d9:8f:fb:2c:4c:
3c:3a:b6:f1:00:1f:07:9f:f7:9d:95:a2:d6:66:f3:
0e:73:c1:07:d3:a4:f6:14:b2:84:52:76:09:5a:37:
46:9d:3e:79:db:0f:24:1c:4c:53:09:b3:69:e6:a6:
49:a1:33:24:ad:e6:2b:59:78:44:43:de:cb:de:5b:
34:c2:77:29:c9:ba:95:ab:ee:a0:25:f9:3d:ee:70:
ee:80:34:3b:47:c1:cf:be:11:6d:38:db:7c:ab:91:
ba:86:c7:1d:87:53:eb:6f:04:48:c3:64:c6:43:eb:
ae:49:86:dd:26:78:fe:36:68:5c:74:a2:04:7a:20:
59:9b:3b:42:13:fe:8e:96:8a:7d:53:7e:d5:e0:ba:
0f:5a:e1:c1:be:1c:0c:ea:40:dd:88:ea:dc:8e:a9:
6a:cb:6e:5e:e9:b8:35:2e:64:3b:aa:03:fa:3c:db:
c5:67:dd:f5:c6:ee:dc:dc:98:a7:02:27:51:45:39:
28:e8:5c:3f:3f:39:65:ef:f7:63:93:5e:00:32:f6:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:B5:FD:40:21:01:63:A8:EA:BD:32:1C:57:29:5F:21:A7:EF:F0
X509v3 Authority Key Identifier:
keyid:64:64:04:5D:A5:BE:D0:68:7D:15:CB:DA:67:A0:4E:B8:7A:8F:B0:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQEXaW-0Gh9FcvaZ6BOuHqPsD4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ebc533f-7f31-4bd6-874d-e736e9fde5bd/0/6464045DA5BED0687D15CBDA67A04EB87A8FB03E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:05:87:6c:2a:77:58:ec:83:6d:54:ba:ad:00:0c:37:42:6d:
65:51:9e:2a:cc:4e:bd:02:ec:72:b4:78:fe:0a:fc:0b:9c:01:
df:cf:63:88:ca:5e:a4:42:81:10:b2:ea:67:2b:c9:ae:c6:d8:
6f:61:c6:52:ac:93:af:d6:5d:c0:28:13:8c:0d:aa:76:86:b4:
72:82:e5:ac:9d:14:31:46:80:01:ef:36:5d:26:1e:02:90:a8:
ea:a7:b2:0c:ff:02:23:f5:d3:28:a8:e6:a7:cc:2a:ad:92:63:
24:42:cb:64:f3:56:73:b2:a2:82:0e:71:5c:2d:40:f3:fa:fd:
66:e1:46:b6:5b:a7:1c:18:7b:6d:81:3a:50:0e:97:7b:d7:0b:
7f:91:c7:5e:f2:32:b5:22:f3:91:54:d1:a6:b0:03:bd:77:68:
15:86:6b:40:d9:7d:3a:b7:be:24:1d:af:94:77:09:11:c2:38:
77:c9:c9:68:2b:82:c7:ea:5a:dc:5f:1d:c7:6c:90:3f:c7:48:
a6:51:9c:c5:d0:e8:f7:f3:ce:26:62:33:f9:76:dc:46:fd:1a:
2b:35:ae:3c:dd:aa:f3:a4:f4:76:ab:f8:62:a3:8b:4e:54:4c:
a3:16:4b:dd:b9:bb:fd:19:fd:db:e7:22:58:ac:bd:e3:9b:51:
22:13:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:19 2025 by rpki-client