Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier: BYyIl+sXsMaDHXrAcqBgfiKP9Y7BVlxCPaIsD4LiI/o=
Subject key identifier: 98:48:EB:2B:0E:F1:0A:33:34:6F:5E:78:88:13:B8:F2:2E:42:95:53
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial: 034DB61F64D716F1E548A9FBAC69A110D7534E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number: 042D
Signing time: Mon 21 Jul 2025 15:47:36 +0000
Manifest this update: Mon 21 Jul 2025 15:42:36 +0000
Manifest next update: Tue 22 Jul 2025 16:48:36 +0000
Files and hashes: 1: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: BBFGO2hX96UtW0fiVQV8xHUAmRGUANrO/1SMvPgiJVA=)
2: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: PeKrYlxO9aJzSjjq2GCsehA7RgIXos16I20n9tzXipg=)
3: AS51019.asa (hash: RqQYQxP2LlV4zO7/d8ske+S6p2B1SREg+ga188kx8/8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4d:b6:1f:64:d7:16:f1:e5:48:a9:fb:ac:69:a1:10:d7:53:4e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Validity
Not Before: Jul 21 15:42:36 2025 GMT
Not After : Jul 22 16:48:36 2025 GMT
Subject: CN=9848EB2B0EF10A33346F5E788813B8F22E429553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:35:a3:e8:ea:77:1c:c2:e7:8a:2f:e0:01:
5c:2a:d3:47:38:9d:8d:98:6e:b4:97:09:92:5d:3c:
b8:36:b8:c4:2a:6e:3d:52:13:59:a2:d0:34:3a:27:
a8:d6:46:ea:e0:eb:08:dd:c0:78:6d:9d:ec:16:fe:
2e:71:32:02:74:d0:6e:9a:22:8f:de:0d:05:f1:be:
f4:21:69:d3:3d:be:c1:0a:67:01:9d:b9:60:02:99:
55:20:15:7e:fc:65:b5:7d:7c:43:de:ab:49:de:38:
3e:6c:13:45:ac:95:11:54:76:8b:66:8d:46:f8:b6:
4f:c8:71:0a:e5:3e:a3:4d:c9:16:25:9e:f5:c0:35:
3c:64:cd:57:e5:15:61:ff:ee:f8:5e:38:ca:db:22:
2c:0f:a5:41:c4:d9:2d:48:8f:9b:19:cf:00:a3:38:
cd:2f:f4:3f:7b:2e:d2:4a:d9:2c:32:25:26:b2:3b:
39:31:2e:20:cc:ee:f4:6b:79:25:98:0d:38:91:d6:
b4:57:de:8e:39:d0:8d:c0:90:76:bc:e1:4e:ec:4f:
86:6d:f9:bc:49:29:9d:af:e4:66:0b:1a:bc:2e:7b:
ba:7a:3b:7a:9b:8a:7d:7a:31:79:0a:c5:2c:66:e5:
62:e1:69:ee:12:b8:18:e2:c0:e2:29:8c:f3:16:80:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:EB:2B:0E:F1:0A:33:34:6F:5E:78:88:13:B8:F2:2E:42:95:53
X509v3 Authority Key Identifier:
keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5f:66:ed:55:e0:3f:3f:d1:b7:59:2e:d8:06:ec:a9:76:11:
bb:c7:77:8e:7c:13:ef:9b:e6:52:6d:61:1f:1c:dc:ef:26:67:
ce:ee:0c:0a:11:6f:e7:83:95:09:0e:20:e1:79:c6:c6:a3:7d:
b8:2e:a3:4c:fb:e6:01:ae:a3:a0:5b:69:11:58:d2:33:5e:97:
83:bb:b0:f4:17:6e:58:76:06:e7:84:99:91:82:f0:f4:d6:f3:
bf:78:ed:49:10:05:1a:73:3d:30:96:5a:bf:bc:91:4d:7f:f2:
ed:93:98:e1:a7:55:99:62:7d:04:7e:72:73:42:4b:43:47:6c:
28:93:e7:41:8b:f3:4e:cc:10:21:e8:1c:7e:e9:50:b9:dc:c7:
23:87:32:39:67:9e:de:fe:49:bf:91:82:2b:74:aa:9d:c0:2f:
b5:0a:50:71:41:1a:a8:88:fb:52:30:da:b7:99:58:f3:79:55:
1f:25:2f:36:8b:e5:ee:d3:1a:06:62:11:3c:15:c2:da:d2:f1:
be:f1:48:ea:bb:a6:0a:7e:4a:07:20:5c:6a:b8:ec:4a:61:7d:
f8:2e:dd:8a:1c:aa:c2:97:34:73:a3:7f:32:e2:36:b6:41:a9:
e7:57:d2:cd:fe:a9:5b:ef:85:19:9c:1f:85:b0:d1:d2:f1:6d:
89:ba:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:23 2025 by rpki-client