Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: yD+09kkfqrWUh71bF6m2qO6Fq+uQSYQt4cntKf8w/OM=
Subject key identifier: 46:CA:61:5D:E8:C6:8E:7A:2E:61:C1:75:6F:01:89:47:9F:EE:D8:47
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 7B2113465C4E9DC77C654947D208F1D815C7E3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 025D
Signing time: Sat 09 Aug 2025 05:42:23 +0000
Manifest this update: Sat 09 Aug 2025 05:37:23 +0000
Manifest next update: Sun 10 Aug 2025 06:09:23 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: QlpzGW00P0r+r/4ouPJecqSMVKvyqOFFvRNqm0OvgFo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:21:13:46:5c:4e:9d:c7:7c:65:49:47:d2:08:f1:d8:15:c7:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Aug 9 05:37:23 2025 GMT
Not After : Aug 10 06:09:23 2025 GMT
Subject: CN=46CA615DE8C68E7A2E61C1756F0189479FEED847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:94:d1:92:d5:c8:bb:c3:2f:b1:1f:2a:fe:
4a:9f:09:3e:3d:b4:0a:20:26:73:5a:2a:bb:f5:f7:
0a:29:c5:3d:da:d6:7a:cb:4b:4f:ed:97:9b:14:b6:
c1:4d:b6:6b:16:fc:9e:8b:0b:d4:01:23:47:f8:f3:
d2:02:68:0e:77:cd:42:ca:b6:50:f9:28:79:9f:6e:
bc:2e:ec:8a:34:78:e0:56:83:d9:a5:62:a9:19:24:
5c:1e:1c:0c:0b:12:2c:35:3c:d7:1d:70:3b:f5:20:
ec:7a:c8:7e:a9:b8:08:ba:f2:4f:c5:86:04:eb:9e:
dd:cb:4c:ea:b9:1d:90:54:09:f6:4b:69:0a:93:de:
95:bb:9f:23:aa:61:64:c0:eb:f6:eb:29:3d:51:5e:
52:a6:7b:8c:79:7e:9c:6e:89:66:9c:4f:0c:b3:73:
aa:98:02:c3:16:ec:c8:10:97:08:24:b4:9c:3b:61:
e1:5f:3e:0d:af:9a:e9:0d:b9:c5:eb:ca:47:11:17:
39:d0:54:61:02:aa:f3:a3:ba:66:e0:f4:b6:b2:4b:
f6:a1:6b:dd:26:4e:3d:6d:ef:2d:d2:94:b7:87:6c:
cf:01:0c:19:f6:c0:8a:c9:db:34:18:b5:50:bb:7b:
39:48:bc:29:c1:58:98:ad:48:ad:90:b1:aa:d2:e0:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CA:61:5D:E8:C6:8E:7A:2E:61:C1:75:6F:01:89:47:9F:EE:D8:47
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9f:8c:fb:f2:c2:2b:55:34:6c:a4:92:d5:6b:17:c3:9a:df:
68:18:53:9c:ed:5c:b5:40:1f:2a:49:83:c5:0a:b2:f6:4e:9c:
f8:18:b1:2a:c5:9f:95:f7:ce:54:32:b4:9b:e5:e7:8f:c3:e5:
1d:18:d3:7c:68:4b:7d:d1:00:4d:d7:9c:30:46:1f:b0:f6:7c:
3e:74:9d:ba:94:96:66:40:58:bc:56:b2:aa:e0:45:c6:6d:bd:
39:bc:a3:2f:09:60:0c:50:f0:05:df:cb:a2:c1:76:8b:fc:be:
83:ed:99:50:52:57:45:f0:0e:3f:bf:9b:7e:09:fe:af:6d:4d:
c0:84:9e:db:e2:0e:66:ac:c7:6e:73:61:fc:98:51:c3:35:1b:
ef:31:65:b6:8e:6f:b9:9c:36:f7:56:29:4d:2c:0e:f7:11:bf:
d9:4b:9a:9e:39:6d:a7:1a:dc:9d:e6:ae:72:41:8a:ed:eb:92:
7a:68:3f:3b:7f:72:b4:6c:2f:e6:46:fe:b2:0d:1a:95:88:60:
d1:6d:2c:1a:c9:ba:04:fc:1a:0e:07:f9:95:3d:81:e0:63:0e:
db:0a:c4:a5:70:f8:33:68:cd:5b:41:f4:ee:c3:40:6f:2f:f3:
ed:82:e7:fc:62:5d:ff:31:b7:b6:67:8e:f4:c1:1a:55:68:69:
7e:7b:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:13 2025 by rpki-client