Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: /iPyzFwbyUVo7juSrYSlO2AGKQ1KfJNUCN2BXrrcjjg=
Subject key identifier: C7:C1:4B:0C:F1:FA:13:1B:0C:38:52:4C:95:41:18:D1:5B:E5:28:B0
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 56815E277E5D43ED779C933E42255A511E5C1E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 8C
Signing time: Wed 05 Nov 2025 12:23:09 +0000
Manifest this update: Wed 05 Nov 2025 12:18:09 +0000
Manifest next update: Thu 06 Nov 2025 12:58:09 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: LVJ23GVtWmQqPpgSBiaQ8XPmpru2TJ+zJ9iGhq0hcKc=)
2: AS211575.asa (hash: nPJ1LprS9/u9GgaDNqu2HsXaB9B+xrAoBi5odzSyQpQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:81:5e:27:7e:5d:43:ed:77:9c:93:3e:42:25:5a:51:1e:5c:1e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Nov 5 12:18:09 2025 GMT
Not After : Nov 6 12:58:09 2025 GMT
Subject: CN=C7C14B0CF1FA131B0C38524C954118D15BE528B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:3f:74:63:cf:f4:2e:63:4f:35:9e:06:5f:
88:fa:2e:c5:8a:7c:76:58:32:1d:f1:b6:cb:77:8e:
1e:76:55:21:52:af:e3:a3:e9:e7:6a:50:77:8e:20:
f3:a0:87:cc:6f:ba:38:88:47:31:c4:cd:dc:8c:f8:
72:25:ad:54:6f:d4:51:75:81:ff:2c:c0:b1:d0:dc:
b6:60:1d:39:2c:b7:87:8b:d5:57:d4:5d:85:54:0f:
f3:9a:ff:cf:66:04:56:8c:5c:fe:26:b5:7f:47:6f:
82:09:66:7e:7b:46:64:3e:15:ae:0f:a9:2a:41:f2:
3d:60:6b:8a:df:d0:58:f4:86:5e:42:89:f9:a6:d1:
29:4a:b7:8e:eb:60:7b:c0:b9:e7:fd:e3:19:ce:a4:
d6:cf:a5:91:06:01:48:31:72:44:06:41:ce:6f:21:
6c:88:67:24:4a:76:04:4c:04:66:dc:a7:f4:bf:82:
b1:82:08:ac:5d:14:ad:81:f8:38:f4:2f:b1:da:5c:
96:10:f6:12:f9:a5:5d:2b:0b:d6:2f:8f:5f:f8:0c:
ba:3d:52:fb:10:97:40:9f:96:0f:66:db:6e:ed:24:
21:1c:bf:f2:3e:ed:5e:b8:e9:45:73:5f:20:22:c8:
8f:6b:cd:f6:8d:85:11:33:13:7d:83:78:50:08:b0:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C1:4B:0C:F1:FA:13:1B:0C:38:52:4C:95:41:18:D1:5B:E5:28:B0
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:e0:68:63:93:4b:1d:bc:0e:fc:58:be:18:3b:bb:fc:b8:
10:d5:c3:b2:c8:46:45:0a:08:ef:83:8c:fe:80:5c:89:70:cb:
4c:fe:68:2e:ae:3c:77:76:67:b3:e0:41:05:28:26:0e:70:f0:
a8:18:81:c5:b6:08:29:c2:ad:a3:c0:b5:82:5f:5e:2b:ea:50:
26:02:35:1f:8e:93:1e:45:a7:99:8a:de:f8:db:f3:07:6f:f3:
5a:c3:c3:fd:3e:8a:68:32:80:01:f0:48:fc:69:4e:3a:c8:14:
05:17:ae:d2:53:8f:1f:89:ed:98:31:77:f7:73:74:21:b8:5e:
ea:ff:9d:07:67:5d:ab:45:b1:cf:d7:59:f9:8d:db:03:95:f2:
84:d8:39:e4:8a:82:2a:97:81:ff:9e:45:fc:2c:ef:97:6f:40:
40:ac:f7:82:a1:25:1b:89:d5:28:d7:33:78:65:07:98:dc:8e:
2c:7c:76:50:b6:c1:84:18:bb:41:aa:5b:c8:8e:4f:6b:b3:75:
86:16:02:ab:6c:69:e2:4c:1c:21:86:fe:84:62:51:5d:9f:05:
5d:a3:b3:52:5a:c6:86:01:a2:83:d5:bc:d8:10:16:af:42:0d:
7e:b2:b6:85:48:e8:5a:0a:a6:5b:1c:02:d0:22:f5:00:a9:48:
8e:82:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:22 2025 by rpki-client