Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File: E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier: jlvpCGGZYZgSmBEcmKJh08hCdTpcyW/jj90Xthi533g=
Subject key identifier: AF:E4:52:42:25:F1:1D:69:22:9E:C4:7A:9A:60:B7:26:2F:92:0B:2A
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer: /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial: 46ABCDEC1BEA9E028BB7F32954A9CEB3FCC94980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number: 64
Signing time: Wed 05 Nov 2025 09:52:38 +0000
Manifest this update: Wed 05 Nov 2025 09:47:38 +0000
Manifest next update: Thu 06 Nov 2025 13:04:38 +0000
Files and hashes: 1: AS207529.asa (hash: licDdASBLeqe0NljF+Xouv0y7cZb2l3qr5f0EUjflZE=)
2: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: 2aScpff1cRuyTMUUTZUojSlB9/C3vifvkmruac7uhcc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ab:cd:ec:1b:ea:9e:02:8b:b7:f3:29:54:a9:ce:b3:fc:c9:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Validity
Not Before: Nov 5 09:47:38 2025 GMT
Not After : Nov 6 13:04:38 2025 GMT
Subject: CN=AFE4524225F11D69229EC47A9A60B7262F920B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:c8:ba:67:1b:05:3d:5d:a2:5b:85:7a:34:
96:33:85:a2:49:23:ec:52:10:db:83:cd:5e:77:c0:
a6:a3:56:ef:87:78:8a:cf:e7:5d:93:f4:e3:25:c0:
ad:6c:0e:2f:52:1b:4c:46:86:bf:68:dd:44:d6:33:
4c:e2:c9:77:76:bf:7e:c6:0c:3b:07:c4:23:bb:87:
97:e1:b4:d4:ff:a8:94:8f:1a:e8:89:a9:56:ea:70:
d8:3e:19:c3:ad:ed:69:47:bf:88:ea:a1:cf:c7:8e:
25:11:c4:b1:9a:15:dc:86:12:c3:2e:1c:f9:73:b4:
49:75:a0:03:7f:f6:fd:81:9d:b4:35:d7:fd:e2:aa:
56:e5:1e:d3:0d:03:b8:15:40:60:4b:84:82:8b:c2:
b8:c8:07:b3:a3:50:92:ff:35:c4:0d:79:8d:9b:7b:
c2:aa:53:4b:28:f5:a1:d0:2a:11:c2:fd:d7:ee:7d:
a1:c1:f4:c2:b8:84:50:3e:eb:e6:60:54:83:d4:88:
9c:35:d1:c3:79:82:6b:26:a4:8d:2e:aa:41:b9:8a:
a0:76:9c:59:93:6b:41:eb:1b:cd:98:47:7e:5a:77:
f5:1b:f1:d6:c4:29:13:cf:3b:ad:4e:ed:cf:ca:a2:
0f:a4:6b:85:ae:d8:d8:fe:0b:4a:e9:f4:8a:5e:a9:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E4:52:42:25:F1:1D:69:22:9E:C4:7A:9A:60:B7:26:2F:92:0B:2A
X509v3 Authority Key Identifier:
keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:94:92:4d:a7:8f:ae:ab:0c:fd:70:94:8e:14:e1:24:18:60:
f6:75:3e:46:0e:18:51:75:29:df:89:66:13:7d:29:80:a5:c1:
8c:84:da:97:36:27:ef:0e:44:0e:e1:01:bc:3b:cd:f5:de:bf:
a3:41:e4:8a:a4:b7:85:22:6f:0b:2d:27:67:6a:1c:7a:fb:9b:
3b:df:57:b4:06:b3:59:52:8c:d1:c8:99:15:34:c4:6f:52:d0:
a0:75:c3:72:56:fd:c2:e3:e0:57:3a:77:ad:f0:ec:1b:5f:c9:
31:3d:7b:85:66:68:14:66:4e:3e:44:c2:78:7c:f8:1b:4a:0f:
71:22:8a:16:02:8d:b2:5d:90:9e:f6:20:80:c5:72:85:c3:b6:
e0:40:89:2f:9c:0d:2d:cb:2b:b6:a1:e0:24:e0:96:86:8e:9d:
e9:ac:bd:44:e9:cb:65:d4:eb:2b:d0:bb:52:b8:25:a5:e3:6d:
c6:fe:d9:24:13:18:3d:e1:56:19:32:e9:bd:6e:1d:ca:4f:2c:
9e:1d:93:4f:61:65:44:b0:04:ea:ee:a7:37:4c:92:8d:17:c9:
a2:5d:36:60:e4:84:4b:dc:b9:c9:8e:be:d4:64:57:42:ea:99:
37:21:b8:56:3a:13:f5:a8:ab:09:27:6e:09:a9:87:1b:06:fc:
8b:54:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:18:54 2025 by rpki-client