
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: hqvwSmW4VrLSb4VsyuzVU6kQss/ggPyyHd7NUIos0rg=
Subject key identifier: 51:0C:7F:27:AF:3F:9A:53:37:C0:AA:69:05:E1:71:24:5A:7B:A0:7D
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 2D9DA47FDE2ED6393DA10496EC3034C6267773D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 037D
Signing time: Sun 03 Aug 2025 22:20:57 +0000
Manifest this update: Sun 03 Aug 2025 22:15:57 +0000
Manifest next update: Tue 05 Aug 2025 00:25:57 +0000
Files and hashes: 1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: 5x+PP0E03NCEopHqwn5TQvVFNbCydq6zHmjj8stFP0w=)
2: AS205329.asa (hash: bO1aR+g5FlFCTFRF/4Bm8O87N5QgNwEYM6lqrTrqZFM=)
3: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: kzIiKa78uyzgIwp38B3VckxTAvGVZjyeobfym4ZXmx8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9d:a4:7f:de:2e:d6:39:3d:a1:04:96:ec:30:34:c6:26:77:73:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Aug 3 22:15:57 2025 GMT
Not After : Aug 5 00:25:57 2025 GMT
Subject: CN=510C7F27AF3F9A5337C0AA6905E171245A7BA07D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:b4:6b:90:d2:e7:51:3d:27:25:d2:61:f7:
22:21:e8:2e:43:a4:d6:df:15:fc:86:b7:a1:a9:d7:
3f:be:00:15:38:be:0f:a4:ce:19:fd:2d:80:b5:c8:
e1:51:6d:50:da:6c:9a:42:7b:1a:23:6c:8d:90:2f:
a8:5f:ea:67:34:53:40:a8:9d:5f:58:67:0f:9d:17:
5b:88:36:4f:b3:a1:71:be:9f:e8:62:34:7e:79:8b:
30:80:9c:11:a4:b7:e1:3e:93:01:60:9f:73:d7:7f:
e8:69:45:06:d4:3d:af:68:8c:be:27:98:e6:14:6f:
9f:34:53:cd:c3:a9:7c:86:a2:56:c6:78:28:ee:dd:
81:0d:40:0d:12:06:c6:56:ee:7e:f0:0d:57:24:57:
05:57:90:c0:69:ed:4d:d2:25:25:17:42:e0:e4:97:
65:89:47:fe:ba:3c:96:5e:bd:fb:41:05:2a:82:d4:
d0:2c:ff:5c:2e:fd:16:ff:ed:2d:84:af:a2:fd:15:
59:34:38:1d:2c:49:dc:2f:85:5d:e8:16:0d:b9:30:
6f:c7:25:3b:c1:bc:0b:9f:42:9e:12:c8:54:a5:15:
df:0b:b4:c0:0b:29:fe:bb:f7:50:40:9e:7d:2d:72:
28:69:bf:46:a2:cf:bf:d6:b3:aa:fa:2f:f4:83:b1:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:7F:27:AF:3F:9A:53:37:C0:AA:69:05:E1:71:24:5A:7B:A0:7D
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ea:66:d8:ca:f6:59:a3:a0:a0:cb:1e:fd:99:68:7e:26:98:
33:03:2e:5e:bb:1e:dd:e2:90:ee:80:da:51:02:c4:c8:ac:b2:
2b:6d:aa:e2:60:9d:6a:1e:5c:04:c7:83:24:32:df:ef:78:2c:
a9:4b:0c:a7:69:54:ab:c0:50:b0:b3:06:1a:6f:70:00:2d:b1:
e7:e4:d1:5e:c5:56:11:ca:69:6e:b1:77:2b:19:3a:64:5e:3d:
4a:87:09:0c:8a:0f:79:75:fc:70:fe:4b:a6:c2:59:4f:10:2b:
35:5d:a6:aa:b6:f7:13:ef:62:06:49:fd:85:a7:e5:1a:8c:e2:
09:64:44:3f:67:ed:9c:6a:aa:3a:b2:a0:7e:44:e5:cd:b1:e3:
15:9d:cf:1b:5f:c6:d5:5d:a3:24:0a:b5:44:14:68:57:ca:e5:
64:4a:56:61:19:fc:52:92:6f:bc:b8:45:06:b2:da:1e:60:79:
f2:e9:ad:25:b4:69:8f:32:fc:20:fe:91:50:13:80:54:85:43:
c8:0e:80:af:e4:07:f7:14:ce:25:30:31:43:f2:7b:af:89:ad:
a7:eb:78:11:7d:99:fd:8d:7c:4a:4e:86:02:0b:62:e5:ff:16:
af:c8:eb:af:43:28:32:ef:5b:50:52:77:28:6b:3e:aa:f2:89:
55:5c:1a:be
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULZ2kf94u1jk9oQSW7DA0xiZ3c9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk
YjM4N2ZiODAeFw0yNTA4MDMyMjE1NTdaFw0yNTA4MDUwMDI1NTdaMDMxMTAvBgNV
BAMTKDUxMEM3RjI3QUYzRjlBNTMzN0MwQUE2OTA1RTE3MTI0NUE3QkEwN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfy7RrkNLnUT0nJdJh9yIh6C5D
pNbfFfyGt6Gp1z++ABU4vg+kzhn9LYC1yOFRbVDabJpCexojbI2QL6hf6mc0U0Co
nV9YZw+dF1uINk+zoXG+n+hiNH55izCAnBGkt+E+kwFgn3PXf+hpRQbUPa9ojL4n
mOYUb580U83DqXyGolbGeCju3YENQA0SBsZW7n7wDVckVwVXkMBp7U3SJSUXQuDk
l2WJR/66PJZevftBBSqC1NAs/1wu/Rb/7S2Er6L9FVk0OB0sSdwvhV3oFg25MG/H
JTvBvAufQp4SyFSlFd8LtMALKf6791BAnn0tcihpv0aiz7/Ws6r6L/SDsbHZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUUQx/J68/mlM3wKppBeFxJFp7oH0wHwYDVR0j
BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz
NGY3Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h
Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMi8yRjA4Q0VDRDVFNTdDQkEwRTY4
QkNBN0Y3NDAxQkQ1RURCMzg3RkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASupm2Mr2WaOgoMse/Zlo
fiaYMwMuXrse3eKQ7oDaUQLEyKyyK22q4mCdah5cBMeDJDLf73gsqUsMp2lUq8BQ
sLMGGm9wAC2x5+TRXsVWEcppbrF3Kxk6ZF49SocJDIoPeXX8cP5LpsJZTxArNV2m
qrb3E+9iBkn9haflGoziCWREP2ftnGqqOrKgfkTlzbHjFZ3PG1/G1V2jJAq1RBRo
V8rlZEpWYRn8UpJvvLhFBrLaHmB58umtJbRpjzL8IP6RUBOAVIVDyA6Ar+QH9xTO
JTAxQ/J7r4mtp+t4EX2Z/Y18Sk6GAgti5f8Wr8jrr0MoMu9bUFJ3KGs+qvKJVVwa
vg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:11 2025 by rpki-client