
Manifest
$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
File: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft (raw, json)
Hash identifier: DLm6iE3HtSvxvj/lqh2NY/51ohsx/bqjBBcvPST4De4=
Subject key identifier: 9D:7F:49:88:57:23:56:8A:AE:72:BE:F3:C9:8C:93:38:3C:D6:3E:F1
Authority key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Certificate issuer: /CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Certificate serial: 39CFE4B47587358DBDA180794F7B0B329092BAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
Manifest number: 5E
Signing time: Thu 30 Apr 2026 08:34:19 +0000
Manifest this update: Thu 30 Apr 2026 08:29:19 +0000
Manifest next update: Fri 01 May 2026 10:05:19 +0000
Files and hashes: 1: AS214749.asa (hash: rtjvYN0k7vmh5PkcG3ccW4AvhB2PUVVt+8Gkfr1HOH0=)
2: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl (hash: WlOzt3atX1mFknbPhqF+qKEnfIc+gxEeXAGQpijj4kQ=)
3: 323030313a3637383a313230633a3a2f34382d3438203d3e20323134373439.roa (hash: qD58tjRXh1Sgzaanz8hHs0X4Bt+9XwLVW6v6y8GKf0Q=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cf:e4:b4:75:87:35:8d:bd:a1:80:79:4f:7b:0b:32:90:92:ba:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Validity
Not Before: Apr 30 08:29:19 2026 GMT
Not After : May 1 10:05:19 2026 GMT
Subject: CN=9D7F49885723568AAE72BEF3C98C93383CD63EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:5e:9e:ba:61:34:b1:43:1b:b2:0f:ea:a0:
65:0a:3a:e1:d9:88:c2:bd:ac:ab:ac:46:21:f7:d3:
35:64:d9:e8:2b:76:9d:b5:bb:67:c4:b2:98:ad:e9:
9d:c1:ed:ba:f9:c9:61:b8:1a:11:74:8d:96:67:05:
3b:db:52:c4:36:43:32:1e:81:57:b1:7b:28:29:4a:
b2:5c:62:93:fb:0e:4d:ac:54:0f:67:22:1d:a8:25:
89:e9:bd:e2:30:ff:ec:be:4d:ba:a0:55:4d:6c:67:
36:20:3b:f0:5d:f2:b3:4b:bd:d7:07:64:61:e7:3f:
d6:89:db:6e:eb:ea:68:09:a2:5c:14:13:09:ba:43:
fe:21:b8:8c:dc:cd:e0:12:9f:e6:ff:93:11:9e:f8:
ef:1d:f5:ca:2e:09:64:43:f7:03:68:ea:d8:4d:c9:
52:a9:58:93:33:ba:66:ab:1b:cb:13:58:f7:c6:f0:
07:43:97:1c:29:48:c8:d7:94:b3:a8:6d:36:c4:72:
fb:15:37:9f:ff:b1:17:4e:98:bc:a8:46:5e:ff:05:
ce:67:85:fa:bf:9f:48:35:c6:25:d8:93:55:db:40:
55:ea:10:55:e8:64:c1:f2:c0:e0:d5:60:a5:86:0e:
c1:88:f9:9a:22:ba:d4:f4:28:96:b6:c6:b1:26:52:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:49:88:57:23:56:8A:AE:72:BE:F3:C9:8C:93:38:3C:D6:3E:F1
X509v3 Authority Key Identifier:
keyid:35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a5:49:28:26:d6:47:38:17:dd:f6:50:fa:4c:2b:b4:dc:65:
8e:c8:a5:4e:2a:03:87:b7:29:74:99:f6:20:d9:4c:d2:cb:e1:
bc:bb:5c:47:56:fe:d3:7c:ee:38:29:ac:09:ef:63:86:1c:2a:
79:aa:2f:d4:3c:f5:0f:28:cb:5e:44:f7:14:c5:d6:64:c8:11:
a9:63:4f:a0:84:46:39:be:01:97:b1:85:04:21:ea:6d:71:90:
54:0d:92:14:bd:54:ef:cf:72:82:de:0a:3c:31:95:2c:cf:7f:
ee:82:2f:f7:d4:fb:d3:4a:c5:1c:46:ba:e9:76:6e:75:02:92:
91:86:a4:15:b7:c5:1d:d5:1a:e1:c1:ea:d3:3a:03:d0:2d:10:
19:5b:16:ee:16:df:c8:6d:55:cf:dc:45:fc:8e:07:69:79:da:
1b:38:27:98:60:ac:1c:a4:e6:24:45:55:d5:a9:08:6c:e3:23:
2f:0a:13:b5:ef:1a:15:7f:60:e6:da:2d:16:70:e9:12:02:fd:
ce:69:2e:2c:57:06:8f:d1:fc:ea:74:1b:d4:e7:03:4b:6d:9f:
f1:1e:de:92:01:36:12:95:b2:39:06:5c:ce:fb:de:15:a7:05:
f1:5e:5b:85:c2:a7:0e:d0:fd:a9:5d:f3:f9:89:7d:d8:29:54:
9d:f2:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:55:05 2026 by rpki-client