Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File: E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier: axaYhIQbZ3KLIJQd3cl9swarzVthwPK3lfNw9Dt7BLA=
Subject key identifier: 15:5D:79:0D:5E:9A:0A:4A:F6:00:9B:4C:52:4A:7D:C2:A3:0E:1C:BC
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer: /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial: 67A5373A60BDFFA1B447AC3AF8837A014ECBD6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number: 02C1
Signing time: Wed 05 Nov 2025 05:47:33 +0000
Manifest this update: Wed 05 Nov 2025 05:42:33 +0000
Manifest next update: Thu 06 Nov 2025 08:30:33 +0000
Files and hashes: 1: AS215131.asa (hash: /Ig9Y9j+GErTcuTTgHxL2iaOhUZXWZH+p25xdO/uCfk=)
2: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: OdeYHutOaNLn1ZGRFENLNBF6g1yf6+PbWeafRh62+1w=)
3: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: /8lHhKIuzTcsmBKH0ioYgR3QJ/GmZe2e/TKZ5GWlTv0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a5:37:3a:60:bd:ff:a1:b4:47:ac:3a:f8:83:7a:01:4e:cb:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Validity
Not Before: Nov 5 05:42:33 2025 GMT
Not After : Nov 6 08:30:33 2025 GMT
Subject: CN=155D790D5E9A0A4AF6009B4C524A7DC2A30E1CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:5e:73:0d:a1:b3:c9:dd:26:18:96:f3:12:
89:86:be:b5:1e:05:f1:36:ff:75:5b:68:bf:dc:02:
54:17:bd:ab:17:3d:0d:c3:ce:e5:cb:06:4c:81:98:
29:be:28:ec:82:95:79:57:83:6b:77:f4:a9:a5:c3:
e9:94:6f:fb:7e:06:9b:ef:41:43:4f:1f:d1:bc:a8:
55:af:8c:d7:8f:fa:af:f0:9f:2a:42:f9:fd:cf:b5:
c6:01:ea:f5:7b:f9:27:52:49:89:03:66:4e:3f:20:
66:cd:96:b8:ce:6d:15:10:05:0c:a1:45:99:7c:33:
9b:ec:ec:10:46:17:bd:62:35:bc:3c:8d:44:f1:f4:
70:75:74:24:36:6f:f7:85:16:94:73:3d:d1:98:1d:
94:e2:fe:51:71:6c:05:01:40:62:4b:b2:f3:5f:7e:
df:42:f7:3c:e0:a7:ad:b4:9b:d9:df:3f:cc:f0:63:
49:e7:17:47:cd:6b:15:7d:f5:26:22:a8:28:ed:7c:
05:d7:cb:24:25:a2:46:cb:54:9d:16:87:34:19:0c:
22:98:1b:1b:16:56:4b:a8:57:08:19:a6:9a:81:9c:
da:d8:21:c8:4e:23:73:a4:83:90:1b:7c:20:37:08:
40:b3:25:4d:66:3f:01:f5:9b:51:f1:49:32:a6:9c:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5D:79:0D:5E:9A:0A:4A:F6:00:9B:4C:52:4A:7D:C2:A3:0E:1C:BC
X509v3 Authority Key Identifier:
keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:df:ef:8a:86:ec:63:35:d4:2e:d6:64:4a:d6:22:81:13:02:
2e:c0:d5:24:7e:6c:50:93:7c:60:f2:ea:be:d0:dc:e7:94:9e:
48:bf:da:5a:c0:fb:d1:c3:2f:22:b3:6c:2d:c9:ca:33:90:1d:
d9:d0:a7:39:bb:3c:fb:93:7a:66:a2:ea:f2:35:5d:0f:9f:01:
89:08:ae:91:14:64:b4:58:fc:76:bc:ab:62:63:a9:c5:73:88:
28:3b:5d:ec:0d:b8:4e:ac:ba:4b:ab:c9:01:80:09:8f:3e:59:
c5:d1:aa:66:19:1c:31:51:8b:29:36:3b:c0:66:e2:19:72:67:
ae:c5:95:9e:b2:10:32:dd:d8:d6:8c:4e:89:b0:8a:59:ff:ef:
0e:67:5b:c4:bc:c0:a7:eb:70:93:de:99:97:69:17:a1:ae:89:
ef:89:65:dc:48:2b:14:d8:5a:11:f1:88:74:01:48:90:26:f6:
cc:86:70:d1:f5:ab:a3:d3:74:33:6b:a8:08:a0:6d:0a:15:6f:
10:f0:25:fe:6b:d2:97:b6:a0:09:fd:4f:30:ed:18:21:91:35:
ff:62:75:74:c6:7b:03:28:72:7c:61:cc:cd:bd:25:9e:39:7c:
ca:9e:8b:4d:a2:2b:ff:2e:e1:fc:c8:d7:0b:86:62:1e:f2:b5:
7b:52:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:56 2025 by rpki-client