Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/0/8A278448396CAB5BB95B68E80312DCC7B82AB15F.mft
File: 8A278448396CAB5BB95B68E80312DCC7B82AB15F.mft (raw, json)
Hash identifier: d94LnDFkAW9ERXtWqfEQzt8sXY6msHocGZE0Y4prHuc=
Subject key identifier: 64:1A:AF:71:F5:F9:67:08:88:2D:09:FB:4E:AB:57:BD:C3:BD:24:16
Authority key identifier: 8A:27:84:48:39:6C:AB:5B:B9:5B:68:E8:03:12:DC:C7:B8:2A:B1:5F
Certificate issuer: /CN=8a278448396cab5bb95b68e80312dcc7b82ab15f
Certificate serial: 643830032E6F9CA9061A2F86F156855B2AEA85C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iieESDlsq1u5W2joAxLcx7gqsV8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/0/8A278448396CAB5BB95B68E80312DCC7B82AB15F.mft
Manifest number: 28
Signing time: Sun 20 Jul 2025 11:36:37 +0000
Manifest this update: Sun 20 Jul 2025 11:31:37 +0000
Manifest next update: Mon 21 Jul 2025 12:29:37 +0000
Files and hashes: 1: 8A278448396CAB5BB95B68E80312DCC7B82AB15F.crl (hash: imHkzkBbeftK0df/2KsCGVZ8bEtIqQQyMVhSZyk0FL8=)
2: AS206604.asa (hash: CrxZ1bjbBafiXTrYybP181BRfVChterxIEadwwWjiuY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/0/8A278448396CAB5BB95B68E80312DCC7B82AB15F.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/0/8A278448396CAB5BB95B68E80312DCC7B82AB15F.mft
rsync://rpki.ripe.net/repository/DEFAULT/iieESDlsq1u5W2joAxLcx7gqsV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:38:30:03:2e:6f:9c:a9:06:1a:2f:86:f1:56:85:5b:2a:ea:85:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a278448396cab5bb95b68e80312dcc7b82ab15f
Validity
Not Before: Jul 20 11:31:37 2025 GMT
Not After : Jul 21 12:29:37 2025 GMT
Subject: CN=641AAF71F5F96708882D09FB4EAB57BDC3BD2416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:70:52:8f:6b:3a:ed:1c:57:75:af:16:02:
4a:6c:a9:96:82:b6:82:8f:40:85:c9:48:24:fe:72:
a4:af:be:43:f2:6e:2b:c9:3c:80:87:c4:42:57:70:
5f:06:02:17:29:7b:a3:e4:6d:17:5e:88:2d:5d:4d:
67:d1:cb:99:31:17:b0:6c:48:b3:fc:04:20:0a:e8:
62:9b:fc:eb:2f:3b:7f:bc:70:2f:9b:6f:1a:cc:ea:
57:6f:7c:4c:c7:7d:be:32:c4:76:bf:ce:d2:27:b4:
95:45:d1:48:af:a7:af:74:bc:4e:8f:98:3c:9a:44:
91:a5:cc:f9:07:99:d5:0e:b9:1c:7f:07:e5:1a:2c:
31:e1:a0:be:67:19:54:3c:4a:78:d3:7c:11:a2:6b:
9f:4f:7b:06:2b:5d:c0:8a:a4:23:b9:df:f5:6c:df:
26:8e:d1:ad:2a:38:24:9b:dc:e0:07:b7:76:55:c2:
8c:eb:b5:bf:94:f6:b1:ef:ee:cc:6b:c5:7d:2f:d0:
b6:d2:a1:d8:3f:aa:99:11:d4:2c:53:d3:8a:3c:31:
a2:6d:97:b0:7c:5e:a9:0e:18:40:3e:33:ec:e2:da:
93:f4:f3:a4:58:e9:8e:a3:12:d6:08:00:25:8e:fa:
60:fd:8f:73:af:0b:95:09:2b:8b:5e:22:e0:00:16:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1A:AF:71:F5:F9:67:08:88:2D:09:FB:4E:AB:57:BD:C3:BD:24:16
X509v3 Authority Key Identifier:
keyid:8A:27:84:48:39:6C:AB:5B:B9:5B:68:E8:03:12:DC:C7:B8:2A:B1:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/0/8A278448396CAB5BB95B68E80312DCC7B82AB15F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iieESDlsq1u5W2joAxLcx7gqsV8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/0/8A278448396CAB5BB95B68E80312DCC7B82AB15F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8e:51:79:19:8a:96:f9:6a:8e:12:81:2e:26:46:49:72:28:
d9:83:4c:de:4d:08:e2:44:1c:ef:b2:a6:f5:42:a9:be:43:7e:
5c:fb:c5:32:10:1c:08:3d:fd:f5:4f:59:19:a8:6b:7c:7d:b6:
8a:9b:dd:bf:ee:15:99:0b:9e:8b:b1:ef:f6:50:b3:27:bf:48:
e7:90:5a:08:88:19:78:27:99:e1:d3:37:92:55:69:fe:60:af:
8f:d6:5b:c1:a8:cf:bc:39:58:5b:81:a2:ae:de:4f:6c:6a:de:
8d:7e:54:46:6e:09:80:09:2f:ef:00:18:db:90:1c:24:07:8d:
b2:9c:4f:4a:d5:7b:41:9f:0a:d2:a4:00:7b:f5:d2:ee:31:8b:
63:13:91:b4:f7:25:14:3f:52:9c:9a:22:7d:3e:3d:98:50:ef:
f7:eb:3a:6f:7f:92:57:93:eb:7e:7b:ad:6f:7e:4d:11:e7:ae:
97:a2:73:13:49:36:da:35:c5:4b:a1:03:76:ba:86:0e:d7:39:
11:e7:0c:a7:cb:69:b3:ce:a6:1b:a4:04:44:ff:e5:64:2c:4b:
aa:f4:68:90:76:5d:d5:7f:48:0c:4a:39:98:74:01:76:3a:ff:
94:68:5d:ca:fa:7a:a7:19:f4:a0:36:5c:e6:dd:eb:96:29:6a:
08:a2:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:49 2025 by rpki-client