Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier: 5pTMFlwx0HF5eZXzlzAM23r4NAHgH9kjfGbNauMi0kU=
Subject key identifier: D0:AB:A8:96:89:6C:75:6F:B1:57:E1:AD:A9:20:1C:A9:F2:35:78:39
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial: 4ABAE37BC42F4346D0FFADAB92577E036D155AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number: 42
Signing time: Wed 05 Nov 2025 00:59:34 +0000
Manifest this update: Wed 05 Nov 2025 00:54:34 +0000
Manifest next update: Thu 06 Nov 2025 03:16:34 +0000
Files and hashes: 1: AS214757.asa (hash: jL3ZHZO2rDPBy7IkoORDXI20p2/dpY2J7HmBqd/Xf+4=)
2: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: 8YJymIRZKjyXSzOm+Asptwd3TLneGyFzqPQxyGsdiEE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ba:e3:7b:c4:2f:43:46:d0:ff:ad:ab:92:57:7e:03:6d:15:5a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Validity
Not Before: Nov 5 00:54:34 2025 GMT
Not After : Nov 6 03:16:34 2025 GMT
Subject: CN=D0ABA896896C756FB157E1ADA9201CA9F2357839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:a8:74:34:64:36:37:05:bf:21:03:0a:2d:
eb:bb:98:22:1c:5a:04:75:d4:b9:1f:70:ad:00:82:
c6:d0:8c:59:d1:41:2a:be:a0:be:8b:ff:64:24:6e:
a7:b6:e9:e2:66:73:ea:0b:a9:fc:60:6f:c7:ad:8d:
b3:10:a8:b5:e3:e6:bc:1e:57:49:e5:5e:1f:ef:eb:
5e:14:bb:68:94:86:da:71:a0:27:65:c8:a5:78:7a:
cb:de:d3:4f:57:58:6d:ac:57:2a:8f:ab:c0:5e:ee:
ff:d2:f8:2d:89:a4:36:82:35:08:8c:ed:3d:ab:a5:
78:fd:6e:c1:b3:2b:f8:fb:46:c6:24:ff:77:2a:dc:
7f:ef:c6:74:73:12:bb:1e:87:54:14:dc:d2:73:46:
6f:a8:d2:66:ca:12:76:43:a0:f0:3f:e8:e3:61:dc:
b9:b0:2d:fc:6d:68:ef:ca:f8:4c:87:da:75:b4:b4:
da:06:4b:3c:e4:85:35:37:37:9b:4e:89:22:fb:39:
b1:98:53:27:16:19:6b:86:fb:47:aa:1b:9b:34:d3:
ea:58:5d:23:e2:fb:8d:a2:da:ac:3b:bd:39:6b:41:
ef:67:58:ea:90:8c:c1:18:c9:f4:1a:97:cb:ca:06:
85:02:fe:88:e9:dd:78:73:9e:c6:64:fb:6f:3e:70:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:A8:96:89:6C:75:6F:B1:57:E1:AD:A9:20:1C:A9:F2:35:78:39
X509v3 Authority Key Identifier:
keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:8c:a6:0f:06:75:b9:d4:98:08:6d:a5:0e:61:71:8a:27:
52:07:0b:fa:34:25:9c:77:ce:97:90:6b:45:00:c8:02:f0:32:
f8:ee:83:5c:7f:03:12:71:4d:1c:d9:66:e0:e2:ba:ef:aa:7c:
1c:d3:68:c1:0e:09:4e:bc:9b:0d:6f:5d:28:c9:0b:6d:36:5e:
40:e5:3e:44:80:96:b6:93:55:35:35:65:61:8b:dd:14:d8:f3:
cb:07:c5:ab:ac:06:5a:8a:47:84:87:f2:ad:ef:1f:b3:76:93:
2c:b8:09:6f:b7:11:b7:a0:0f:bd:e3:a6:b6:6c:5f:e2:26:0f:
e9:7b:fc:89:0a:b1:01:05:20:ee:a9:ca:09:f1:a9:99:7f:ae:
01:b0:1b:2d:83:28:7d:8f:2e:9d:c0:d7:e0:1e:ef:3c:1b:e3:
48:b1:14:97:69:af:a9:f9:f2:33:3f:5a:59:cf:d2:69:31:ff:
59:a9:2c:91:cc:f8:f3:93:da:32:a8:4b:7b:bf:e5:cc:33:64:
bd:92:89:2c:07:ff:2c:42:82:95:89:bd:8c:43:69:03:ee:f5:
0d:e6:5b:80:8d:6e:35:bb:d4:eb:66:d4:53:e4:99:fe:c5:e2:
51:1a:dd:cb:61:df:b6:3e:3f:4c:9f:7f:56:4f:a0:2a:4c:62:
c2:06:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:02 2025 by rpki-client