
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: RTHE6YYdl+y+7xT4lZoo6wsPg2ExGOM+TTvYbHpcFjA=
Subject key identifier: 95:0C:B2:EC:EC:BB:25:BC:58:9E:EE:39:22:63:99:EB:C2:3C:95:39
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 51661EB6DA3CE134C061ABBF090975A7DE75AB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 0139
Signing time: Sat 14 Jun 2025 03:48:39 +0000
Manifest this update: Sat 14 Jun 2025 03:43:39 +0000
Manifest next update: Mon 16 Jun 2025 04:20:39 +0000
Files and hashes: 1: AS44355.asa (hash: Xqrm1wO+FssiB7AfsRuBPzY6P43VBGzRC2JyHRAKeh4=)
2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: HSI3XfvShKEeEo6Z3efR8CCUxRckjNdYUFXT3fvUD/o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:66:1e:b6:da:3c:e1:34:c0:61:ab:bf:09:09:75:a7:de:75:ab:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Jun 14 03:43:39 2025 GMT
Not After : Jun 16 04:20:39 2025 GMT
Subject: CN=950CB2ECECBB25BC589EEE39226399EBC23C9539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:83:02:2d:7e:da:0b:4d:d1:9a:83:a8:83:
06:af:d5:f6:60:f4:53:8c:36:c1:86:f3:24:e4:49:
b8:76:f7:ad:8a:01:9f:60:22:97:81:67:04:83:9e:
43:aa:78:2d:23:ac:c7:00:96:d4:2b:a2:ed:ad:5c:
65:52:9d:6d:b4:88:69:b5:79:ae:06:3e:3a:ac:43:
7b:4f:a0:23:55:6e:ea:ce:2e:ca:ae:80:40:a2:19:
41:79:d7:94:ed:e2:27:d5:43:21:87:43:a0:22:2f:
48:e8:00:67:95:5b:0a:71:1f:b9:d5:fe:05:d5:71:
8d:1c:71:f8:37:fb:70:c9:0c:21:b0:ed:c0:9a:7b:
24:cc:8a:17:0a:bf:7e:5d:45:45:2e:4c:a5:6f:19:
ac:a8:33:82:0a:1f:f0:f3:39:62:38:1a:fd:92:2e:
b7:d7:2c:5d:86:5a:10:1e:96:2e:27:0b:72:47:11:
37:2a:17:1f:63:ae:3d:a6:4d:71:d4:ce:41:a9:f5:
41:6c:39:e5:70:b0:f6:e7:18:af:a3:a5:f6:bd:45:
c2:ae:e5:f0:51:3a:ea:4d:89:1e:79:1e:c6:60:67:
a1:ec:a7:4d:20:f6:d9:9b:e8:56:ef:a6:36:7c:4d:
a2:19:32:6d:71:05:12:a8:aa:c6:fe:95:bc:25:1c:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:B2:EC:EC:BB:25:BC:58:9E:EE:39:22:63:99:EB:C2:3C:95:39
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8a:5d:52:6b:1f:ed:ce:34:16:40:85:70:d5:0c:e6:cf:e4:
e2:a0:de:e4:ca:04:f1:af:3a:2c:d0:2d:50:f9:51:0d:32:55:
bf:5f:1f:5e:05:c6:64:0d:a8:59:00:2e:7c:b2:e4:27:27:8a:
d0:48:f8:18:f0:06:ff:b9:07:21:f1:2d:8d:71:b4:cb:9c:73:
ff:71:82:c2:ef:61:62:cd:bd:64:72:22:83:95:77:0f:14:d0:
57:9a:1f:39:77:02:5e:e8:62:f8:12:56:09:35:d6:e2:88:6f:
87:fc:60:56:cd:0c:b7:5e:28:84:93:1c:d3:44:ff:78:f1:19:
97:de:59:08:a6:af:c5:7e:6a:67:e9:ee:07:f4:5c:ba:4c:7f:
2c:3d:44:d4:a9:c8:69:17:2c:6c:db:4f:c1:45:54:8e:49:c4:
3d:a6:b0:e4:a2:64:fb:50:26:00:9f:90:43:75:5a:b9:d0:ae:
6c:cf:bb:00:45:68:17:b6:ed:4b:d4:23:3a:ce:a6:0d:dd:d1:
37:71:ee:63:3c:54:fc:77:99:14:8a:d0:ff:2d:e0:47:6f:df:
84:5a:7e:0e:2d:ed:a9:64:c2:55:90:c4:e5:67:98:02:41:88:
3d:c5:87:2b:ba:01:27:41:9b:3d:de:6d:1b:b0:87:16:f2:3a:
2a:41:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:37 2025 by rpki-client