Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: uxMX1e55NZHVODKUfSUFZ7wuh+xn2BL1wLJEQuOZ7nc=
Subject key identifier: 7B:A3:03:E0:5C:F8:26:6C:41:58:9E:3A:6D:B9:C0:8B:B8:7D:0A:C3
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 4C2414CB0A36F476B4AB7B17E049E56924DD08F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 03F6
Signing time: Tue 04 Nov 2025 23:05:25 +0000
Manifest this update: Tue 04 Nov 2025 23:00:25 +0000
Manifest next update: Thu 06 Nov 2025 02:07:25 +0000
Files and hashes: 1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
2: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: CbaX49OGvux6Zk63qfnyRGC37cwvsuH4e5Zt0Niwds4=)
3: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:24:14:cb:0a:36:f4:76:b4:ab:7b:17:e0:49:e5:69:24:dd:08:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Nov 4 23:00:25 2025 GMT
Not After : Nov 6 02:07:25 2025 GMT
Subject: CN=7BA303E05CF8266C41589E3A6DB9C08BB87D0AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:4e:bd:c8:14:e0:0e:ef:6a:13:98:99:8d:
06:9b:5b:29:64:a4:78:6a:dd:59:e2:16:fa:c9:77:
61:da:08:75:83:aa:19:af:48:ae:b8:a7:58:32:a5:
81:8e:dd:6d:e7:49:70:fb:f6:62:5a:1d:09:3c:e7:
2f:d8:60:e2:2a:62:35:fe:5b:ed:95:99:02:91:1f:
41:f9:2b:60:2e:4c:20:1e:9e:84:1a:91:63:d9:74:
71:c4:21:01:92:53:bb:36:31:c8:42:dd:e0:45:16:
fa:dc:d1:b0:20:5a:35:c2:c0:11:06:1e:b2:d8:67:
05:3d:a0:8f:f1:d3:a0:54:68:19:f3:c9:40:c4:28:
51:fb:70:0d:ad:cb:51:d0:eb:51:41:44:fd:ab:a8:
8c:23:09:d4:9f:58:13:4b:9f:ba:73:12:46:8e:9e:
cc:38:cb:f9:b2:6b:ab:4f:db:cf:d8:5b:33:15:b0:
fc:bf:6e:8e:d2:de:37:24:c2:61:ea:32:c1:a4:e7:
d5:3a:c0:34:38:6a:80:1f:18:c6:b6:ae:6a:2b:17:
26:46:54:13:b7:3c:33:6f:62:ef:21:cf:1a:f2:ce:
97:8a:e7:5c:40:cd:5c:41:e9:4b:58:2f:b4:74:cd:
78:03:bd:e5:3a:1b:cf:bd:0f:73:1e:90:94:16:74:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A3:03:E0:5C:F8:26:6C:41:58:9E:3A:6D:B9:C0:8B:B8:7D:0A:C3
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bc:98:ea:e9:a5:57:54:ef:f6:6a:23:3a:f0:7f:4f:0c:cb:
5f:c7:36:71:ba:2d:b1:b4:d1:41:15:d0:19:d5:f0:10:ab:58:
0e:20:2f:7d:28:b2:08:54:46:ac:6f:46:1e:2d:59:70:cd:9c:
36:f4:50:86:6d:35:ec:88:90:d6:db:70:ac:94:4a:fe:b6:8c:
3c:ad:8d:d9:af:ba:24:74:d8:24:36:53:51:eb:9c:28:c1:c6:
03:e4:b3:4e:8e:55:21:14:05:7b:5c:52:c5:39:54:09:55:6d:
d6:9b:90:39:b6:d8:42:79:10:71:74:70:d5:67:8c:6b:79:2a:
9f:dc:38:91:44:79:7b:19:5a:f1:38:46:84:c3:8c:9b:78:3b:
dc:a5:14:fd:56:e3:fb:d1:06:dd:f3:0f:99:78:86:cf:4a:be:
02:31:47:e0:14:54:ee:dd:ea:2f:40:f2:5d:ca:a5:e4:5b:90:
2c:6a:57:11:9f:0c:0a:3a:a1:99:e1:d4:75:8e:4d:63:8f:35:
b5:21:77:44:bf:d9:77:ca:c0:8f:ec:57:7e:89:18:fc:74:be:
16:83:f6:9e:b8:2d:ca:ae:20:e5:e0:ac:37:80:55:62:5f:53:
3b:2a:cd:b3:3a:ee:f1:6d:ac:b0:27:f8:f8:11:5d:fe:74:9a:
43:f7:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:10:49 2025 by rpki-client