Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: IUBlyeXEC0p7d+Yk9pi80AqhYOoKmeOVAl2e+NquiDw=
Subject key identifier: 99:9C:9A:8C:D0:F6:99:97:75:64:E3:76:EF:0A:D2:B4:2C:EB:CA:8A
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: C0A4AB1350A8BFBBFBE58DACF4C052010853C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0286
Signing time: Mon 04 Aug 2025 10:02:28 +0000
Manifest this update: Mon 04 Aug 2025 09:57:28 +0000
Manifest next update: Tue 05 Aug 2025 13:09:28 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: fphgqWlOW1v7udRkOmG6QJgv0/edJO2j+he2rlEsle8=)
2: AS215828.asa (hash: jurRDln6QuNpc6IoJAhmodpiRmmi0pbj8mD4CWgxSRA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c0:a4:ab:13:50:a8:bf:bb:fb:e5:8d:ac:f4:c0:52:01:08:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Aug 4 09:57:28 2025 GMT
Not After : Aug 5 13:09:28 2025 GMT
Subject: CN=999C9A8CD0F699977564E376EF0AD2B42CEBCA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:26:22:2b:1c:03:2b:12:c9:da:46:41:73:
cb:02:24:ef:08:9d:a6:3c:a5:c9:bf:dd:1a:02:01:
9c:5d:4d:9e:f5:1d:61:bb:54:45:f5:94:0a:27:ed:
a9:9d:27:eb:b1:7c:2d:7d:ce:f8:b5:4c:f0:d4:1e:
d5:6f:cf:6a:96:f8:a3:59:ae:a2:a9:58:d7:43:4d:
bf:62:05:53:e9:26:72:c9:62:d6:0e:05:d3:cf:20:
30:d9:9c:9e:f2:3b:78:12:3d:19:fa:b0:05:11:f2:
78:bb:f7:9d:34:30:b0:83:f7:dc:ee:de:c1:6a:b5:
b6:ba:27:52:a6:27:b3:3e:2b:47:cf:22:4b:7b:9f:
eb:39:6b:98:a2:cb:9b:2f:1c:e9:af:00:50:99:c4:
68:0a:48:c1:00:82:c8:22:7e:0e:3a:41:e0:28:cd:
c4:a5:c3:8f:1f:01:b8:3c:da:26:53:ab:f7:9e:68:
e3:7a:f1:f7:a6:ee:97:57:e4:63:6d:52:28:87:5a:
fc:e7:13:dd:1b:f0:98:b2:01:f6:9b:9a:6c:1f:46:
61:2b:0b:b4:3d:df:b5:7c:d2:c7:65:3b:22:38:ed:
06:31:a3:38:52:43:f1:6e:a7:8e:da:c8:f1:e7:8c:
82:ff:8e:1f:6f:ea:56:a6:2f:19:60:63:78:e6:40:
73:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:9A:8C:D0:F6:99:97:75:64:E3:76:EF:0A:D2:B4:2C:EB:CA:8A
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9e:c5:05:b9:ee:68:9d:22:fd:88:23:fb:95:6b:87:a8:79:
53:a4:7a:d0:ac:53:4a:dc:5f:c5:de:56:d9:42:20:04:3d:d5:
b5:7a:1a:20:6b:69:c9:88:1e:38:4d:6a:41:21:8f:67:9b:02:
2d:0c:63:a7:a0:b4:96:cc:47:03:d1:b1:98:7e:40:90:b9:01:
3a:ad:96:d9:c6:c3:ab:b5:ed:cf:6b:b3:7d:13:6a:4f:61:c7:
75:ff:a3:9a:e9:8d:10:0c:d8:ca:92:8b:34:a5:62:c6:7b:d6:
19:e6:c8:97:be:6c:c8:b9:7d:d8:79:46:be:0d:4a:d2:4f:d9:
f2:dd:4f:17:5c:92:cf:0d:83:85:70:c9:05:55:4d:23:f2:20:
11:ba:89:42:b9:d6:9d:ca:60:c2:0b:78:3c:a3:97:8f:51:71:
e2:9d:cc:13:f4:18:71:47:76:f0:a7:6d:3a:52:07:ae:e5:14:
59:09:9f:dc:08:b0:13:d1:52:7a:da:e7:6b:e9:79:28:8d:18:
97:c1:ba:1a:b1:cd:40:8a:52:63:9e:4c:5e:b2:fd:24:53:f2:
83:da:48:8a:3d:57:57:85:94:ed:ab:fe:bb:a4:a9:fb:49:d3:
e6:6a:37:12:e7:20:48:4e:e6:cd:14:87:58:7e:46:9b:70:7d:
7f:2d:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:57 2025 by rpki-client