Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: KgeVbxc2zu5+xRwwj6nCktF2foR2jBdL60kjqd39cnw=
Subject key identifier: 36:45:2D:75:DD:64:A4:12:12:84:CF:0B:83:26:36:62:B3:14:EA:E1
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 362AE1EFF5AC3666EAA9E5572803101F8FA8EEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 02D2
Signing time: Tue 04 Nov 2025 06:07:06 +0000
Manifest this update: Tue 04 Nov 2025 06:02:06 +0000
Manifest next update: Wed 05 Nov 2025 08:38:06 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: T6sW4uDL4Qo8YV2J+4aQe1fid1Qo2NlVhYsUMOdfPio=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2a:e1:ef:f5:ac:36:66:ea:a9:e5:57:28:03:10:1f:8f:a8:ee:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Nov 4 06:02:06 2025 GMT
Not After : Nov 5 08:38:06 2025 GMT
Subject: CN=36452D75DD64A4121284CF0B83263662B314EAE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:dc:b7:25:40:48:01:4f:19:48:f7:0f:41:
da:6e:3d:71:80:c1:f9:17:b8:ce:b0:47:97:f1:45:
92:a9:79:15:74:d6:be:53:2a:34:c8:03:67:35:97:
e7:04:eb:26:30:0e:e0:12:76:6a:ca:58:58:89:c5:
68:ae:46:61:a3:5f:b1:67:a1:ee:a5:42:de:ae:fe:
b8:bf:f7:31:c6:eb:96:14:2e:0b:c0:27:03:df:14:
4d:e6:dd:2f:1b:a2:d2:4b:13:a5:48:39:37:b5:1e:
44:db:cb:96:1a:a7:87:5b:07:62:c3:1b:0c:94:2b:
6d:b5:f9:7b:3e:4e:bc:5d:36:c6:19:ec:97:47:4b:
02:cf:24:77:de:91:93:99:49:eb:c6:9f:f1:5e:62:
cc:2e:6e:df:a1:47:78:a2:78:a6:4f:d4:9c:0f:f3:
b3:ec:95:38:fd:e9:77:1b:63:ed:07:ef:22:3b:a8:
d5:3b:a7:ce:6f:ea:b2:61:c1:10:6f:d2:cb:5e:2e:
cc:b3:44:ed:49:06:2f:15:b4:32:7c:3e:e2:6b:54:
c0:98:f7:ef:fb:af:57:05:f2:a6:61:1b:ba:85:48:
88:78:46:f5:ef:33:1d:23:a5:81:d1:3b:bc:29:8d:
cf:98:85:21:f3:79:95:af:e5:07:71:bd:32:b0:fd:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:2D:75:DD:64:A4:12:12:84:CF:0B:83:26:36:62:B3:14:EA:E1
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:da:12:ba:83:27:7c:4d:eb:2c:e4:1a:d5:80:13:cd:31:
48:2e:a5:1b:c5:53:5e:99:ec:24:c9:f1:ba:d3:ba:d2:22:e1:
96:4e:e8:e6:e8:bc:c8:93:76:2d:cf:35:ef:a7:0b:13:b6:35:
2e:4f:dd:2c:b3:d2:00:0b:4a:95:80:9a:f9:0e:b8:98:4a:57:
41:07:82:19:9b:79:20:1b:9d:62:77:25:f3:be:e0:a9:ca:68:
e0:8b:29:14:e1:b5:71:1c:fa:65:da:7c:de:14:71:1a:c6:4d:
1c:17:80:6e:59:00:3f:9f:43:0c:f8:4f:16:12:6d:7a:b9:59:
84:1b:04:9a:59:2f:5a:6b:b3:1e:7a:4c:67:13:fe:5c:b1:e7:
5d:23:0e:da:dc:cb:4b:51:e2:19:91:45:2a:0a:48:74:91:9a:
ae:e4:6d:41:38:0e:73:93:66:59:a4:ae:e1:29:ea:ce:c2:22:
d1:5c:44:d7:66:5e:2e:b6:9f:2e:c8:d6:e4:8a:63:ec:92:d3:
e0:d4:1a:79:09:81:ce:9f:f4:b4:49:8d:2e:71:35:e0:52:30:
78:38:eb:6b:56:92:90:83:4c:6f:9b:27:c6:fb:f1:e9:bb:9c:
9a:21:2d:c2:d5:d3:55:3f:e0:37:25:6d:72:52:5d:ff:cc:1c:
25:c0:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:05 2025 by rpki-client