
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier: BSzbiS/cf1saBweKFCMsNG3ARGWfHS++o7oxZqVTwJg=
Subject key identifier: 33:EE:EC:6B:EC:8B:29:84:95:CD:27:FC:EE:59:B6:0A:67:19:A1:68
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 587D28A3B9658A4BD32E8EB7CD505B3D6535C206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number: 0432
Signing time: Thu 07 Aug 2025 01:27:22 +0000
Manifest this update: Thu 07 Aug 2025 01:22:22 +0000
Manifest next update: Fri 08 Aug 2025 03:14:22 +0000
Files and hashes: 1: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
2: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: jMd2k/2Ir9Bp+EYIbjYHyPR1KRacGAPKrCYp8sQ9L4k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7d:28:a3:b9:65:8a:4b:d3:2e:8e:b7:cd:50:5b:3d:65:35:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Aug 7 01:22:22 2025 GMT
Not After : Aug 8 03:14:22 2025 GMT
Subject: CN=33EEEC6BEC8B298495CD27FCEE59B60A6719A168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:d2:e2:64:19:17:27:6d:af:1c:44:e0:63:
97:a1:97:57:d2:e3:0a:5e:20:7c:8d:90:3c:2a:13:
5b:29:3a:9f:e8:43:76:16:3a:ad:14:b6:c8:0a:6d:
be:a5:19:c9:db:60:2b:92:96:6f:0d:5b:8a:ac:ec:
f8:d5:07:48:cd:fc:1a:e8:b1:f2:1a:34:f6:63:d4:
92:e9:39:7a:17:30:06:fc:20:f3:ef:7c:8c:24:53:
12:f5:46:bc:06:8a:c2:ba:27:e9:f0:7c:07:d2:c7:
14:64:73:86:84:b6:2f:e2:2f:0f:51:d1:c5:4f:97:
40:3b:8f:7f:fb:51:4b:12:d2:4d:ea:ac:b7:bf:74:
22:d6:e0:92:25:a6:ca:0d:b6:99:bd:5a:43:3c:59:
a4:16:b7:64:54:9e:e8:47:f3:52:9c:31:c6:02:bf:
5c:b9:52:c5:40:a1:31:d9:6b:48:21:da:27:d0:74:
24:fe:81:0f:df:63:96:ee:f5:ef:84:b0:cc:da:f9:
26:3b:7a:5d:91:ab:34:64:8f:e7:f5:63:9e:32:5d:
48:66:c0:43:95:de:3b:5d:1e:9e:b5:e5:ed:2a:d7:
29:f8:25:80:38:0c:15:e4:5a:cf:6b:29:33:6e:0e:
0b:e7:f4:e8:d5:ff:1a:bc:32:22:d2:ed:6f:c2:16:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:EC:6B:EC:8B:29:84:95:CD:27:FC:EE:59:B6:0A:67:19:A1:68
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:81:20:88:a3:b1:0a:a7:43:82:6e:9a:00:54:62:34:4f:ac:
23:c5:46:c4:ee:44:e9:2e:9c:f7:f3:76:5d:cf:a7:9d:dd:51:
16:90:38:51:b3:6f:10:aa:0c:a7:32:04:51:44:21:1e:48:8a:
d0:a0:b1:43:ed:69:8e:a7:35:84:55:16:3d:5b:c9:5d:80:99:
49:55:d1:ce:80:69:5a:b5:60:a9:76:a2:08:72:cb:61:a2:d5:
fe:16:93:24:7e:ef:64:3c:29:8c:a7:65:86:a8:1f:88:7e:78:
b7:2f:84:1a:57:56:c4:df:19:c0:46:05:3f:a9:1b:4e:78:31:
14:0f:55:c4:79:4f:bf:a3:1f:db:24:5c:3a:5a:7f:72:c2:5e:
ed:b7:36:82:ed:88:a1:03:88:4d:cf:34:3a:ef:41:f9:3d:8e:
84:40:5c:c0:9e:eb:e4:cf:28:ac:b1:e7:a6:98:ca:b2:95:5b:
a5:ea:5a:7c:76:ec:db:2f:a9:f9:40:f2:a8:54:ea:e8:df:1a:
18:78:5c:e4:bf:e0:c3:18:64:6c:f9:46:08:15:41:43:34:02:
dd:cd:03:e7:4e:fd:b9:aa:e9:d4:8c:13:62:18:31:6e:51:4f:
bd:aa:3d:7b:b1:d7:fd:94:c0:31:98:2c:3b:c6:13:d8:47:55:
56:00:ca:fc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWH0oo7llikvTLo63zVBbPWU1wgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTkyZDE0ODU4M2E0NjQyZDkwZDRjNGJjNDdiNDUwNGUx
ODBlYTBjMzAeFw0yNTA4MDcwMTIyMjJaFw0yNTA4MDgwMzE0MjJaMDMxMTAvBgNV
BAMTKDMzRUVFQzZCRUM4QjI5ODQ5NUNEMjdGQ0VFNTlCNjBBNjcxOUExNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKdLiZBkXJ22vHETgY5ehl1fS
4wpeIHyNkDwqE1spOp/oQ3YWOq0UtsgKbb6lGcnbYCuSlm8NW4qs7PjVB0jN/Bro
sfIaNPZj1JLpOXoXMAb8IPPvfIwkUxL1RrwGisK6J+nwfAfSxxRkc4aEti/iLw9R
0cVPl0A7j3/7UUsS0k3qrLe/dCLW4JIlpsoNtpm9WkM8WaQWt2RUnuhH81KcMcYC
v1y5UsVAoTHZa0gh2ifQdCT+gQ/fY5bu9e+EsMza+SY7el2RqzRkj+f1Y54yXUhm
wEOV3jtdHp615e0q1yn4JYA4DBXkWs9rKTNuDgvn9OjV/xq8MiLS7W/CFtJbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUM+7sa+yLKYSVzSf87lm2CmcZoWgwHwYDVR0j
BBgwFoAU6S0UhYOkZC2Q1MS8R7RQThgOoMMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI4M2EzOGEtN2EzOS00Mzk3LWI1ODgtZWRiOWZiYjYy
ODE3LzAvRTkyRDE0ODU4M0E0NjQyRDkwRDRDNEJDNDdCNDUwNEUxODBFQTBDMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZTMFVoWU9rWkMyUTFNUzhSN1JRVGhn
T29NTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYjgzYTM4YS03
YTM5LTQzOTctYjU4OC1lZGI5ZmJiNjI4MTcvMC9FOTJEMTQ4NTgzQTQ2NDJEOTBE
NEM0QkM0N0I0NTA0RTE4MEVBMEMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYEgiKOxCqdDgm6aAFRi
NE+sI8VGxO5E6S6c9/N2Xc+nnd1RFpA4UbNvEKoMpzIEUUQhHkiK0KCxQ+1pjqc1
hFUWPVvJXYCZSVXRzoBpWrVgqXaiCHLLYaLV/haTJH7vZDwpjKdlhqgfiH54ty+E
GldWxN8ZwEYFP6kbTngxFA9VxHlPv6Mf2yRcOlp/csJe7bc2gu2IoQOITc80Ou9B
+T2OhEBcwJ7r5M8orLHnppjKspVbpepafHbs2y+p+UDyqFTq6N8aGHhc5L/gwxhk
bPlGCBVBQzQC3c0D5079uarp1IwTYhgxblFPvao9e7HX/ZTAMZgsO8YT2EdVVgDK
/A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:21:39 2025 by rpki-client