Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: ERtkUOSYUo2k2KLFmn820PJDeQNkWRhUyltjcL5/tmg=
Subject key identifier: 9B:66:F1:E4:33:EA:92:11:E1:6F:48:A0:0F:53:F8:8E:63:5E:8E:D8
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 637D66FAB729F05EF419218DF47768F4FBC7D84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 0235
Signing time: Tue 04 Nov 2025 01:07:58 +0000
Manifest this update: Tue 04 Nov 2025 01:02:58 +0000
Manifest next update: Thu 06 Nov 2025 03:10:58 +0000
Files and hashes: 1: AS44355.asa (hash: noT3NQk7rtD6jNk1GY90L8a80oYtiLLuAlQV7OyslJk=)
2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: +sDd0+Gwrj0mmxfn2CuyhUl64b8fKyVAUPx7X5MCchU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7d:66:fa:b7:29:f0:5e:f4:19:21:8d:f4:77:68:f4:fb:c7:d8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Nov 4 01:02:58 2025 GMT
Not After : Nov 6 03:10:58 2025 GMT
Subject: CN=9B66F1E433EA9211E16F48A00F53F88E635E8ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:40:51:bf:5d:b1:b1:56:18:ee:b3:43:ad:
ac:b8:ce:5f:7d:27:50:64:a1:54:69:6d:20:5f:c7:
ef:1c:04:67:77:7b:a5:9e:46:7e:ab:c8:ba:64:e6:
19:9e:eb:14:8d:03:fe:f3:0b:05:d8:64:f5:42:95:
ed:13:b8:14:26:a4:24:e4:ff:47:1b:06:b3:38:06:
e7:f3:5c:e5:b2:c9:c9:b8:3e:79:30:ed:dd:a5:da:
45:50:f0:a2:3c:b7:58:9a:ae:b5:01:65:14:e5:e0:
04:b8:22:ea:61:c7:03:31:6f:4a:60:be:5b:fb:79:
73:35:61:c3:97:0f:91:d6:c3:64:f5:e4:b6:9f:5f:
66:f0:de:23:44:c8:c6:61:a1:68:cd:21:0e:a9:e6:
d2:ee:f3:c0:92:b3:e9:8c:9f:f0:2d:4e:b0:84:88:
5a:0c:38:dc:34:80:5f:b6:29:21:e4:23:f1:15:e9:
b5:ff:5f:34:5b:ba:ad:67:a0:09:1d:a3:c5:3c:98:
66:64:1a:16:a3:19:d4:0e:dc:13:83:2d:f2:a5:66:
91:f5:3c:e7:c2:56:34:89:86:34:01:40:ad:1c:10:
38:5d:21:53:28:e0:f5:4e:15:38:e8:84:fe:89:c9:
7a:2d:3c:63:ed:52:71:19:5c:7a:c4:d3:3a:18:42:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:F1:E4:33:EA:92:11:E1:6F:48:A0:0F:53:F8:8E:63:5E:8E:D8
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:79:98:85:5e:42:2f:4f:95:45:53:42:d1:1e:17:e9:c7:
a8:22:38:49:ae:14:6b:8a:57:de:55:85:6d:0a:96:29:11:e3:
aa:f3:76:d9:0a:50:ee:d1:32:48:b6:2d:8e:1a:e1:95:33:61:
1b:96:07:a3:bd:67:75:51:cc:8c:05:eb:b2:fa:4f:7d:1a:c3:
4d:8c:77:e3:3c:60:a5:01:a4:6e:4c:87:79:9b:74:49:da:02:
1c:d7:13:87:6e:63:48:26:2d:c8:30:8c:a8:cb:97:d1:2f:11:
d0:b0:70:3d:b8:0d:16:fb:e0:01:a6:56:5f:61:4a:65:21:65:
b7:d3:3f:3f:2d:b3:a5:90:c9:5a:4a:7e:e9:c9:a1:6f:6a:5e:
bb:96:f3:e2:75:38:32:db:c0:b2:36:86:31:ff:a0:8e:2e:06:
7f:21:5c:03:06:fc:c2:a3:0d:89:c8:65:7d:23:bd:cf:a6:2e:
4d:e9:0f:47:b8:46:95:1f:b5:3d:62:9e:c8:87:ca:9d:66:27:
b2:23:cb:1d:02:c3:69:a1:83:35:4a:b6:5c:f9:13:13:31:89:
2d:1f:ad:7d:4a:6e:8a:14:6d:f1:a7:07:4b:dd:b1:f8:db:cc:
8a:85:77:9a:ee:30:b4:64:2f:ca:75:0e:c9:d3:b6:90:d3:2d:
ad:63:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client