Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier: jRmBPM/YBlGI7zUUSEXiZ9syRIQSjzkXI9rNUsdtL6o=
Subject key identifier: 0C:B8:52:DB:8C:F2:26:05:79:52:C2:8B:BE:41:DA:06:33:A6:F7:50
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial: 466A99D48FC0CA9E61B5D63DFBC4CD3CE3F1A8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number: 0252
Signing time: Wed 05 Nov 2025 03:57:40 +0000
Manifest this update: Wed 05 Nov 2025 03:52:40 +0000
Manifest next update: Thu 06 Nov 2025 04:04:40 +0000
Files and hashes: 1: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: P7gCxf+OxgyVHytMQZyEtNSEl/xbjZ9HYIk6c4OM3CI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6a:99:d4:8f:c0:ca:9e:61:b5:d6:3d:fb:c4:cd:3c:e3:f1:a8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
Validity
Not Before: Nov 5 03:52:40 2025 GMT
Not After : Nov 6 04:04:40 2025 GMT
Subject: CN=0CB852DB8CF226057952C28BBE41DA0633A6F750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:2a:5d:e1:60:6d:97:b0:cb:75:08:f3:7e:
71:62:a8:15:ac:04:f5:83:dd:38:05:d2:4c:b1:04:
2b:79:a8:a6:40:d9:05:c7:66:4d:6c:63:53:f5:fa:
49:90:1c:cb:73:1d:d7:ce:a3:12:88:b6:43:d2:8a:
cf:e1:29:00:29:67:c5:a9:49:75:76:f1:b3:2f:29:
2b:b3:4f:45:f8:cb:29:91:3e:24:ff:35:90:02:38:
a0:00:f1:2d:d2:1a:06:f9:76:b4:08:df:e1:d7:d0:
ef:da:6a:b9:27:d4:16:92:8f:be:a2:bd:a1:31:01:
b5:8e:e2:ac:db:74:fd:42:90:49:f1:c0:ad:33:64:
d6:1d:7e:e1:b6:f4:59:ec:55:15:6a:6b:60:34:e8:
91:11:a7:97:0a:1e:d7:24:23:4b:fe:15:83:d6:7f:
cf:cf:31:a7:03:0b:ab:8c:73:4d:d2:12:c6:da:aa:
df:5e:41:86:f8:58:c1:c7:77:40:6a:65:21:36:1c:
c4:89:05:de:43:ea:33:1d:50:ee:6a:f7:da:7d:01:
8e:4d:e0:79:22:4a:10:e6:54:f5:e7:61:06:8f:ed:
db:78:c2:23:2d:66:ac:40:7d:92:41:76:d7:6e:69:
d2:55:f6:54:20:ef:1f:71:b7:a0:34:bb:b1:8f:8a:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:52:DB:8C:F2:26:05:79:52:C2:8B:BE:41:DA:06:33:A6:F7:50
X509v3 Authority Key Identifier:
keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:6a:60:37:4c:ab:49:49:9b:58:f6:08:71:e6:cc:f7:16:
2c:69:c8:33:dd:06:d6:e5:31:a1:78:d5:50:8a:43:cb:53:84:
48:8d:7b:18:80:11:5f:99:0a:83:54:f9:fc:9c:28:50:8a:05:
71:95:4e:18:5b:3c:05:e9:e0:05:b7:7d:12:f8:cd:70:e5:53:
2c:53:34:d9:35:15:e8:a7:85:f0:f7:82:da:22:b4:90:0d:9e:
67:03:6e:63:39:71:ed:dc:35:b2:49:00:eb:b9:74:fe:8e:0d:
58:a7:5b:73:bf:b9:04:90:13:77:ab:10:81:02:52:de:cd:45:
81:3f:4c:cb:fb:dc:e1:4e:79:2c:88:be:51:4c:90:e3:13:e7:
22:0e:3c:ec:9e:83:8d:24:e3:fd:7f:45:cb:e1:5c:41:6a:4a:
aa:d7:1b:6f:ca:ec:e9:9d:10:2b:d7:e3:cf:7e:3d:fd:e5:e5:
dc:c3:62:fc:21:c1:70:4b:12:e0:a5:8b:4e:53:59:a9:53:5f:
be:a7:99:08:f9:08:7c:ca:8a:c9:e2:d7:c2:a7:83:4e:a8:53:
81:c5:ac:7a:56:a6:ad:94:4c:ab:16:34:81:a1:2d:fe:bc:5b:
0a:09:f4:94:d4:7f:51:d0:56:e1:d6:d7:e7:4e:f0:df:9b:a8:
b1:70:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:03 2025 by rpki-client