Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: BNcLEvtyT1Z6QhiCCPyoNhrVrCUpEK5hX53AKtVIm3Q=
Subject key identifier: 18:33:C3:87:BA:FE:0E:3A:7C:AA:A8:88:82:8F:D0:2C:E2:DD:6B:79
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 4CCC573D697CD9D38465B7EE0DDAF451453D09CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 01BA
Signing time: Wed 05 Nov 2025 03:16:15 +0000
Manifest this update: Wed 05 Nov 2025 03:11:15 +0000
Manifest next update: Thu 06 Nov 2025 19:14:15 +0000
Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: bAnXR6nkmC/eRVs+1DLgY8EIns9FYBEfAk7dEdBIm7k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cc:57:3d:69:7c:d9:d3:84:65:b7:ee:0d:da:f4:51:45:3d:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Nov 5 03:11:15 2025 GMT
Not After : Nov 6 19:14:15 2025 GMT
Subject: CN=1833C387BAFE0E3A7CAAA888828FD02CE2DD6B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:7a:b0:5b:1a:d9:a6:09:ad:ac:54:39:0e:
8f:83:e3:74:c9:b7:5a:11:2d:9d:91:56:33:2c:c3:
09:dd:64:0c:3d:9e:6a:c5:52:60:0e:88:a9:16:c0:
14:3b:f5:ce:96:32:cb:0a:10:a5:08:aa:a5:b4:3a:
25:cc:ab:9b:03:78:3d:60:ad:69:0a:c7:fc:cd:c2:
52:2c:60:a6:6f:e8:c8:b8:50:e0:e5:f9:cb:fb:11:
a0:c8:60:73:cd:9b:2c:64:72:74:04:a4:a6:39:89:
ad:1b:7a:cd:6a:96:cb:07:3e:3a:6e:57:37:02:3e:
fe:93:21:83:5e:0b:e1:29:09:dc:fa:c6:b0:df:6e:
24:96:3b:4b:2f:c6:85:b0:da:22:51:f3:33:6e:dd:
be:ee:9e:d5:2f:56:1f:1b:ff:36:49:35:f7:c1:65:
f5:e4:14:30:df:b1:bf:f0:f9:a8:d8:8d:18:34:0f:
75:41:90:d8:cf:71:78:64:8f:03:96:b7:1e:38:63:
b2:82:45:3b:ad:27:e8:6c:ec:c3:bc:d4:1d:63:90:
29:e2:5b:a5:0d:6b:00:d4:f0:4e:29:b9:62:87:f9:
e3:10:47:4d:4a:c6:66:4a:95:86:54:a1:dc:9d:28:
92:a0:8d:e0:ae:c0:e3:14:8b:52:6f:3c:5a:1c:0c:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:33:C3:87:BA:FE:0E:3A:7C:AA:A8:88:82:8F:D0:2C:E2:DD:6B:79
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ea:d4:9b:56:8f:ab:eb:0f:58:20:f1:d9:c5:37:0f:21:53:
70:ff:94:33:ea:38:6b:11:bc:0b:ee:ad:be:dd:28:fd:d8:88:
64:7f:29:53:9b:6e:92:de:4a:c5:2e:5d:db:70:a2:4a:e1:25:
91:03:76:a0:05:07:25:ca:1a:c8:27:91:44:8c:6e:b8:3f:4a:
32:6e:bf:35:c5:20:8b:bf:82:c0:9b:d3:aa:0d:bc:c7:05:92:
0c:90:96:b4:09:9b:4d:21:23:b2:a1:de:42:f7:c6:6e:a2:ab:
23:c7:1f:5e:df:dd:58:65:2c:ec:ff:41:2a:26:30:78:f3:c4:
93:f4:24:56:86:43:16:da:db:01:92:33:48:a2:87:d1:5e:4c:
0b:cb:41:55:60:53:a1:cb:43:5a:f0:5c:8c:3c:22:ba:ab:ee:
89:b4:b6:11:25:f6:76:37:47:2a:e8:a3:f3:bc:3c:fc:2f:57:
72:b2:83:58:2a:e8:b6:f4:38:cc:f9:b2:54:3f:7a:1e:78:e3:
8a:a7:fa:d3:0d:24:8d:21:3e:d4:75:db:75:d9:4a:42:36:eb:
7e:97:0d:81:42:de:81:3a:fd:98:ab:3a:44:33:88:e0:d3:45:
fe:93:a7:0c:50:05:94:63:ad:d1:c7:fc:b1:85:0e:3e:28:99:
91:8c:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:23:54 2025 by rpki-client