Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
File: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft (raw, json)
Hash identifier: sHOa5jWHxqSVJdndjn4jNp0jpzU5+eZclxZvWgqIwKI=
Subject key identifier: 75:57:FB:60:75:77:FF:A9:5E:7E:F2:4C:ED:85:E1:C9:1D:84:92:31
Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
Certificate issuer: /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Certificate serial: 7A0A2E00D3442A511A94D5314D43B960FC385B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
Manifest number: 76
Signing time: Tue 04 Nov 2025 22:41:47 +0000
Manifest this update: Tue 04 Nov 2025 22:36:47 +0000
Manifest next update: Wed 05 Nov 2025 23:14:47 +0000
Files and hashes: 1: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl (hash: Qr8SZ8o2VadG07A7Z9LXK70CF9eiBFnUAjZF020AKsI=)
2: AS213605.asa (hash: I3Z4blf/4PqskT2+0zpqCX/QLx8+W39EW2amMQefWD8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:0a:2e:00:d3:44:2a:51:1a:94:d5:31:4d:43:b9:60:fc:38:5b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Validity
Not Before: Nov 4 22:36:47 2025 GMT
Not After : Nov 5 23:14:47 2025 GMT
Subject: CN=7557FB607577FFA95E7EF24CED85E1C91D849231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:6a:77:d5:b6:42:63:f3:98:c2:73:88:0b:
34:0c:04:38:db:9b:fa:58:3a:bd:26:82:31:0f:db:
ec:ef:65:cd:07:fd:e1:b7:38:8c:ec:b0:c3:1c:cf:
4e:2d:07:bb:f2:73:50:00:00:10:96:e3:17:c1:62:
3e:c3:05:5e:a8:86:2e:1b:1f:57:7d:ce:6a:fc:0a:
83:e1:eb:a9:b8:63:d3:2e:06:8a:66:7b:0f:3c:c9:
8d:7d:76:cf:3a:b5:31:01:ff:47:47:49:4e:22:c7:
78:f1:f3:d6:31:71:c5:0d:21:a0:77:d8:5b:a7:49:
ae:5f:51:ca:64:4d:11:a9:86:96:83:de:34:d3:03:
81:ce:f7:bb:7b:9e:2f:9c:d4:2a:1b:c2:67:21:1a:
4c:73:f9:0d:0f:fb:22:5b:e4:4f:6d:6a:e8:fe:ae:
c3:db:a9:b1:aa:2c:e1:08:ac:8f:1b:e0:9c:71:49:
06:ef:dc:9b:05:3a:ba:b1:86:47:2a:1a:91:04:56:
71:be:28:74:4e:d8:f5:93:4e:98:98:91:4f:ac:d3:
42:b5:2e:a9:4b:50:22:73:20:1a:32:ea:38:19:df:
9b:68:9f:2a:37:4e:2d:75:b1:fc:7f:11:5c:78:bd:
0e:49:e3:d3:6a:c0:e3:6d:d2:5b:0f:0e:72:69:a5:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:FB:60:75:77:FF:A9:5E:7E:F2:4C:ED:85:E1:C9:1D:84:92:31
X509v3 Authority Key Identifier:
keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:52:28:7f:7c:e2:f0:8c:bc:a0:2c:e2:28:05:56:0b:b2:e9:
a6:ef:fa:25:22:3e:1d:f1:f3:d7:9d:e0:50:a2:e0:79:4a:f4:
fb:b5:ee:69:a7:e8:6b:77:1b:18:6f:59:c8:f1:d8:bc:70:72:
d2:64:fc:07:1d:26:ca:2b:68:38:43:62:dc:af:0e:de:66:9a:
d3:ee:0f:e4:cb:e6:3a:17:39:2a:14:32:f7:f0:73:a1:47:55:
47:e8:0e:bf:92:88:1d:59:77:ec:98:d0:16:ce:6b:c8:e1:3b:
fd:87:1a:e3:0c:74:7a:32:d9:c9:9c:4b:76:14:fe:b0:be:55:
9b:32:4d:3f:11:4d:1e:5c:f2:6f:da:7b:f3:69:33:db:79:16:
dc:6b:fd:88:34:8f:e9:55:7a:8b:c1:10:c2:52:3a:36:4b:5a:
39:a1:4e:ec:da:7a:af:da:ce:f2:8b:14:80:ff:76:04:b9:fe:
ac:91:6e:d5:2e:bd:ef:92:69:89:75:67:ed:8f:a7:5c:51:a7:
74:d0:68:bc:2a:e8:f8:6c:93:43:25:c2:06:46:fa:1a:88:89:
6c:01:c0:c1:cd:0a:ae:8a:bf:18:c9:6c:ea:85:de:ac:f8:bd:
cb:c3:6c:5f:35:4a:b1:c0:ba:29:e9:93:70:5c:8d:66:e6:67:
7f:20:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:45 2025 by rpki-client