Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: cWrSROZQn4JJyTOwpeTu0SrZSmuvj6zxn3FeocTomLw=
Subject key identifier: 40:7F:A5:03:1D:9A:5C:32:77:9E:2E:69:EB:AB:02:9F:F6:B8:8C:59
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 4AA5EADA21A24F26CA17843B2C7C3376AF0FD35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: E5
Signing time: Tue 04 Nov 2025 22:59:27 +0000
Manifest this update: Tue 04 Nov 2025 22:54:27 +0000
Manifest next update: Wed 05 Nov 2025 23:39:27 +0000
Files and hashes: 1: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: o/6IivtBj12j3iO/c7odMvV6HZOjeT2oHunvwgndaaE=)
2: AS213768.asa (hash: h3rS3JyeiVp8FsFljS/efb0MZnxctnTuSuQjoONj0XI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a5:ea:da:21:a2:4f:26:ca:17:84:3b:2c:7c:33:76:af:0f:d3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Nov 4 22:54:27 2025 GMT
Not After : Nov 5 23:39:27 2025 GMT
Subject: CN=407FA5031D9A5C32779E2E69EBAB029FF6B88C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:39:fb:ef:3f:a6:07:e4:dd:14:46:8d:f9:
a2:9c:90:7b:ae:53:ef:bb:90:b2:29:78:6e:aa:de:
db:ab:d7:c3:2a:c5:b2:ca:2c:22:2a:3a:ee:4b:ff:
3c:0c:71:2a:19:d7:66:ac:b9:dd:79:76:38:09:3c:
2c:10:18:a9:fe:e9:98:1b:48:e2:c0:09:47:76:a5:
d8:eb:ea:a2:11:9a:b5:66:26:17:3f:ee:95:62:a2:
f9:a8:84:6b:5b:d7:13:94:af:e0:39:42:af:9f:6d:
57:80:81:4c:da:26:93:6d:c4:fa:18:14:34:50:6e:
6b:5c:53:1a:54:ff:40:a3:29:12:0f:b3:9b:fd:bd:
de:ec:ad:8d:7f:01:c0:e6:04:47:e6:b6:82:9d:77:
f7:e9:dd:f2:d4:b8:8a:d6:ad:d0:cb:49:85:75:2c:
0a:fb:cb:c8:f4:be:07:96:ba:a6:0d:84:ef:7c:09:
b9:34:cf:cc:d7:a1:66:84:a7:30:d3:ba:9e:60:ab:
8c:7d:3c:37:7a:14:ef:18:8d:c4:ca:16:1f:ef:4d:
4a:ad:d1:14:29:8c:c1:48:0c:5e:07:0a:6a:15:06:
56:03:ee:b1:8d:41:ef:de:87:4c:6e:bc:fb:96:97:
2e:7f:48:b8:4b:f3:b1:d7:62:e5:23:4d:51:ac:88:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:A5:03:1D:9A:5C:32:77:9E:2E:69:EB:AB:02:9F:F6:B8:8C:59
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:db:d2:33:8e:94:93:23:f5:28:78:69:1c:81:c1:3d:f0:cb:
38:f0:80:0e:29:a8:42:d0:fa:04:46:1d:10:1f:a3:13:f4:5e:
7e:39:4b:9d:79:cf:a4:27:28:9c:1b:bf:47:bd:dc:7e:1b:3a:
3c:92:d2:64:fd:70:aa:57:c4:19:78:d2:64:09:ca:2f:b6:d2:
8f:4d:fd:e2:bc:99:fe:a8:a9:f1:ce:b7:0b:11:16:7b:2e:fd:
d8:45:5e:42:12:57:bb:f4:da:f9:c6:e2:bd:56:a9:b2:26:8f:
a6:0c:1c:27:7c:5c:16:20:e6:a6:27:72:3c:ef:ef:0b:82:de:
69:8d:37:6b:86:27:4d:92:5e:c6:b4:63:7f:8a:77:f2:65:20:
9f:60:9c:4d:d2:85:ec:27:17:69:72:03:ba:f6:f7:16:91:ca:
52:02:3f:7f:53:ea:f0:c3:c9:5a:b4:8d:61:d6:09:88:3e:45:
fb:f5:92:bf:ea:af:53:21:c4:a6:dc:a2:2e:f5:b0:13:a2:8b:
fa:9f:5a:fc:4b:bc:67:d9:e7:82:74:2c:5e:40:62:66:c6:ab:
bb:7a:0c:70:91:e4:d3:8c:02:31:c2:61:8a:53:5c:f0:1d:30:
1f:9c:c5:7a:f1:44:a0:75:75:f2:96:3f:33:c1:66:9b:9a:6f:
78:a6:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:04:12 2025 by rpki-client