Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier: x39QeLg7iPJ8h5mQsa1Ys3CEQnTgy7uaYyQVGrQAe4U=
Subject key identifier: 5F:D4:04:AE:EF:F1:FA:EE:3E:9E:4D:4B:B3:5D:5B:16:1E:EA:52:65
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 12DEFF55ED3EBA4EC7275600085013558417B36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number: 04A8
Signing time: Tue 04 Nov 2025 11:37:06 +0000
Manifest this update: Tue 04 Nov 2025 11:32:06 +0000
Manifest next update: Wed 05 Nov 2025 15:05:06 +0000
Files and hashes: 1: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: uKtTARLwOtRZFIqawFIovRH5OMPr/99DZUeuqFsNZbQ=)
2: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:de:ff:55:ed:3e:ba:4e:c7:27:56:00:08:50:13:55:84:17:b3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Nov 4 11:32:06 2025 GMT
Not After : Nov 5 15:05:06 2025 GMT
Subject: CN=5FD404AEEFF1FAEE3E9E4D4BB35D5B161EEA5265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:90:2d:a3:16:26:c2:76:37:76:f4:ad:20:
5c:7b:05:c9:6e:46:38:26:04:5f:bd:90:44:dc:a3:
54:46:ba:1d:d3:a3:1f:79:6a:cb:79:27:ff:0a:fa:
0d:3b:e0:86:4c:f1:c6:91:00:46:25:5f:29:01:90:
f7:9c:15:29:30:81:06:09:29:a7:77:0c:52:4f:81:
ec:6e:c5:4f:88:f6:84:36:57:fe:bd:e5:52:65:bf:
9e:e1:0b:3a:9c:b5:a3:ad:31:67:08:dc:e5:76:da:
26:49:11:db:f9:62:2c:bd:44:2a:0d:b1:75:f2:13:
90:b3:ae:de:13:f2:10:ef:26:a3:39:4b:ab:9f:f5:
fe:9c:d0:a0:5b:7e:7a:b5:c2:95:5e:eb:8a:9c:26:
af:69:a2:7e:4a:76:95:47:22:cd:9b:cf:76:97:4b:
30:58:cb:d5:e3:6a:69:5d:d1:eb:21:1d:4a:39:1b:
58:35:54:b5:9a:56:7d:ac:f8:63:ff:5a:6f:5b:13:
60:ab:cd:a3:5a:0c:35:9f:81:ea:fe:ba:4a:2b:85:
a7:9d:d9:9b:06:ce:02:3f:ab:ae:b4:6e:54:7f:a8:
ed:d5:21:df:56:6c:8e:d5:c4:1f:ea:40:88:73:02:
c8:43:5d:09:41:e2:3d:04:3f:48:1f:ef:e3:40:6b:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D4:04:AE:EF:F1:FA:EE:3E:9E:4D:4B:B3:5D:5B:16:1E:EA:52:65
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6c:50:49:57:22:79:5c:d8:f2:05:b9:8b:30:4c:a0:7e:46:
1a:ae:41:9d:ab:e6:1a:b9:71:a2:21:76:3a:93:be:97:c6:94:
95:cf:ac:f9:9b:5d:74:3c:22:08:36:79:db:e8:11:d4:83:9c:
88:e1:de:2c:9a:f8:8d:11:3a:12:5f:f1:f4:f9:77:79:cf:5b:
46:c1:ef:85:f4:63:9a:d3:7c:ad:7f:c5:63:ab:e0:de:ad:25:
ea:b5:a6:88:7e:ea:50:38:05:9d:67:d0:de:ff:a3:a1:99:68:
86:9f:8c:7c:f9:4c:f8:57:aa:0d:05:df:d3:69:06:90:81:5c:
4f:cb:c9:21:b4:85:2e:48:50:20:90:37:52:92:73:1f:b4:9b:
ff:1c:b0:39:ad:74:b1:ef:bb:53:58:97:73:8f:95:0f:c1:7b:
43:db:73:4a:2d:d6:b1:f7:bb:2a:bc:a3:85:70:8b:b1:74:0f:
8f:25:3f:b5:4b:83:45:71:c7:9a:bf:44:e1:75:cb:1b:92:47:
a1:be:d8:e2:b9:51:77:a8:bc:ea:d1:c0:a2:b0:e6:ce:93:35:
15:4c:32:da:b3:16:0d:37:35:43:bf:c8:4c:51:b3:82:e6:48:
2f:56:05:e3:8e:54:dc:02:ce:74:5a:79:09:db:e7:1e:ce:e1:
8e:df:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:06 2025 by rpki-client