Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: ZhRTW1++CnO6WU8GjkiNX0cFJ2se/C6I/e2Gu9ncJcY=
Subject key identifier: 79:89:A4:1A:86:A4:44:02:73:7E:F4:5A:23:64:49:06:20:DC:C2:DC
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 5170A634ADBA48F57085D6CC7383D0EDAD59B2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 03F7
Signing time: Wed 05 Nov 2025 18:10:25 +0000
Manifest this update: Wed 05 Nov 2025 18:05:25 +0000
Manifest next update: Thu 06 Nov 2025 18:46:25 +0000
Files and hashes: 1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: fnPzf3n/DDDM2hop0vtG82FNmwdZ+fj/1m3IZqa+QhA=)
2: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
3: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:70:a6:34:ad:ba:48:f5:70:85:d6:cc:73:83:d0:ed:ad:59:b2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Nov 5 18:05:25 2025 GMT
Not After : Nov 6 18:46:25 2025 GMT
Subject: CN=7989A41A86A44402737EF45A2364490620DCC2DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:61:11:32:46:47:75:93:3d:24:c3:eb:15:
df:ba:31:72:8e:44:29:15:d0:91:55:bb:80:e5:e1:
8c:ce:8b:f3:8e:52:a2:ed:5b:5f:5c:23:22:4f:40:
57:41:5a:b1:02:40:77:64:f7:90:9c:d5:d2:43:7f:
d1:8c:6a:45:e5:44:d0:33:fb:a9:1d:a1:7b:fd:0d:
44:8d:2c:36:84:4c:4d:40:3b:a4:3d:4a:6c:2d:31:
bf:fd:82:48:22:d2:fe:40:63:2d:a1:cd:d4:7e:16:
2d:f1:c7:43:19:47:34:c9:33:3b:93:e8:4b:3f:d4:
83:ce:45:94:18:b2:44:6d:11:86:35:a5:c1:39:66:
d7:10:aa:fa:2b:a1:65:d1:15:84:b0:9c:0b:a8:f4:
65:21:3e:1d:44:24:3f:c9:0f:46:ca:9c:0c:31:9b:
50:9b:a8:a4:08:e8:8c:4f:31:ac:d1:90:cb:cf:71:
83:4c:e4:43:3c:78:dc:c7:1b:bc:0a:d3:e7:26:d3:
8f:fb:c1:8c:06:5d:2b:dd:25:e6:5f:96:a2:cf:50:
11:fb:d3:ac:eb:56:2f:65:82:16:40:7f:4f:66:ea:
0b:47:b6:45:21:af:fb:05:0c:28:3e:e7:f1:56:b1:
63:27:86:e0:5f:46:b0:49:a5:a9:07:39:db:29:29:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:A4:1A:86:A4:44:02:73:7E:F4:5A:23:64:49:06:20:DC:C2:DC
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:24:48:61:00:f5:7b:c3:42:c2:f9:fc:8a:c9:c9:6c:52:
12:39:e0:f6:06:1f:39:0e:36:29:bb:11:7a:77:89:08:4f:82:
77:12:cc:f8:be:8f:ea:c9:2e:9a:da:ce:ec:60:b6:4d:1c:a3:
e8:24:05:6c:ca:40:19:50:bb:9a:d6:c9:6a:89:c9:0f:93:8e:
36:b7:9b:f5:70:2e:2a:c3:3c:f9:57:86:f5:07:46:66:d2:1b:
2b:d8:f5:a0:f3:05:53:6b:1e:6d:60:a0:12:6a:2d:d5:d2:90:
75:5c:3b:c8:10:91:b5:fc:d5:ed:14:7a:d5:0d:6a:49:72:9a:
64:ea:c7:0d:a4:ea:1e:78:6d:f2:e3:3f:69:d3:17:63:0a:35:
08:17:77:e3:ab:ba:03:7a:60:50:46:0c:bf:ea:f5:05:c1:7d:
9d:54:2b:0d:b4:4d:a2:6b:05:5a:b7:1f:8c:ab:42:d2:18:8f:
ec:cf:79:3a:0e:3f:10:bd:57:89:e2:53:bb:e4:68:58:b5:be:
86:f4:09:5d:35:de:89:19:46:62:d3:54:64:d7:ba:70:ee:aa:
29:be:3f:4c:e1:bb:b5:ba:7f:94:d7:39:90:5c:39:2d:d6:3b:
81:21:e9:4a:0a:4a:05:7e:6c:cd:8d:54:2b:5d:f3:12:3b:6f:
a0:b3:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:36:14 2025 by rpki-client