Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: twi63aux5Q9K73/SGecgw+z/+AkfGG6Zum7k/2Koyds=
Subject key identifier: 16:17:3A:B0:F2:E4:3B:F9:0D:48:82:2D:68:31:0E:2E:A6:A1:7D:B4
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 08E50532B0E01C679FB6615AF1D2964BDE118A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: 29
Signing time: Tue 17 Jun 2025 11:39:30 +0000
Manifest this update: Tue 17 Jun 2025 11:34:30 +0000
Manifest next update: Wed 18 Jun 2025 12:39:30 +0000
Files and hashes: 1: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: 9fdLjJh3ZsJrhOpuYW7jiaxVtM3Dy6tV98BHL08bDl0=)
2: AS213768.asa (hash: R9ERvttyM23Nz4uP5cMSLIdDTei/lOmIkuEaLWi+d1s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e5:05:32:b0:e0:1c:67:9f:b6:61:5a:f1:d2:96:4b:de:11:8a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Jun 17 11:34:30 2025 GMT
Not After : Jun 18 12:39:30 2025 GMT
Subject: CN=16173AB0F2E43BF90D48822D68310E2EA6A17DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:38:3c:34:90:57:b4:a0:45:87:b0:f7:a6:
eb:4f:3f:21:fd:cf:65:b3:1d:63:c4:fa:93:b4:a8:
54:bb:a4:5d:75:a8:ab:58:f7:76:b3:85:8a:50:20:
2b:e2:32:9a:20:26:17:30:b6:54:00:62:4c:4e:66:
c6:b4:02:27:34:db:80:40:22:93:08:8f:a7:0d:e1:
11:83:7a:fe:62:01:59:6f:3e:38:11:41:d6:33:78:
cd:13:e7:22:c2:9b:04:59:e3:d9:5b:26:1c:e0:6b:
f1:42:30:9a:47:fa:62:14:73:cb:ec:33:f1:de:c2:
5a:fd:02:bd:fa:6a:74:f6:31:da:3c:6f:bb:97:5b:
68:a0:f4:c7:5f:70:41:b1:4a:d3:3b:c3:8a:f6:be:
ea:bd:52:c7:3d:af:4e:57:81:5f:7c:63:46:e3:25:
cc:e5:c3:b9:0d:22:76:53:a2:70:0a:b3:0e:db:0c:
3b:6d:47:04:cd:f6:92:1e:fe:55:2c:ae:ad:20:34:
83:3b:b9:a2:09:fa:92:ae:7a:ed:73:76:f4:39:b0:
47:56:f8:cd:83:1e:4d:37:52:59:cf:ed:ef:73:09:
db:b4:71:ae:46:62:fe:8a:2d:6f:37:aa:6a:40:c2:
a5:ca:5d:79:cb:09:c1:d1:25:78:18:bf:4f:b7:22:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:3A:B0:F2:E4:3B:F9:0D:48:82:2D:68:31:0E:2E:A6:A1:7D:B4
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ee:ef:da:ca:9a:05:c2:04:cf:8b:81:79:da:2e:cc:c3:87:
36:1a:61:95:51:49:60:37:0e:9f:80:d6:fc:1b:9f:5b:e1:f8:
3e:a9:0b:85:3f:97:87:44:6e:17:e5:ac:13:ae:ba:48:c2:48:
0c:85:61:24:6e:dd:35:69:c4:55:31:02:f8:e4:e2:c9:81:da:
84:20:df:fc:23:9a:25:7c:7a:42:c9:26:db:b5:17:df:4e:85:
06:ef:2c:0e:d4:82:4a:51:18:5d:90:f2:1d:34:f3:51:be:7f:
51:94:ad:04:59:d1:d3:7f:2e:66:e5:1c:b6:5e:dd:f4:65:e5:
71:cf:6f:1f:54:cb:3b:c6:d0:d3:5d:25:7b:6e:80:08:b3:8f:
a2:2d:1a:c2:c6:a5:16:8b:96:fe:39:cd:f5:a2:2c:8d:75:89:
6f:60:1d:d4:da:44:94:2e:37:40:44:9f:e0:98:99:8d:21:4f:
8b:b8:2e:12:16:f8:74:f6:e7:15:94:51:31:a2:90:78:68:a3:
63:15:61:1e:c6:30:1f:10:04:fb:91:4d:96:4c:06:b4:f7:aa:
cb:cd:ad:f1:6b:45:64:f5:a5:36:fb:e1:0c:5f:12:70:09:64:
54:da:13:c5:0e:08:da:eb:99:d5:5e:93:4d:e5:91:b7:ae:9e:
7c:e5:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:16:17 2025 by rpki-client