Manifest
$ rpki-client -vvvf rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
File: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft (raw, json)
Hash identifier: 3N+Y/WbAvmQp7S55w0Egg2jNZ+4qwA5KEqZ+3VRl4qo=
Subject key identifier: E9:62:5E:53:93:DF:54:A5:B4:64:0B:8C:A3:B7:5B:07:0A:27:F7:7A
Authority key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Certificate issuer: /CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Certificate serial: 6753CA90C5725309571D9AFF2DE6258B60C8C062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
Manifest number: 0147
Signing time: Tue 20 Oct 2026 22:34:52 +0000
Manifest this update: Tue 20 Oct 2026 22:29:52 +0000
Manifest next update: Thu 22 Oct 2026 00:10:52 +0000
Files and hashes: 1: 323030313a3637383a313230633a3a2f34382d3438203d3e20323134373439.roa (hash: qD58tjRXh1Sgzaanz8hHs0X4Bt+9XwLVW6v6y8GKf0Q=)
2: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl (hash: oPydvsj5gFuWJxWsfYRhmDdUdZWxDcqj9OaF5IWMiNY=)
3: AS214749.asa (hash: P1PAJj8FCISVY9D7d5RHoczjCsEinVsl6zRTS2N8cWk=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:53:ca:90:c5:72:53:09:57:1d:9a:ff:2d:e6:25:8b:60:c8:c0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Validity
Not Before: Oct 20 22:29:52 2026 GMT
Not After : Oct 22 00:10:52 2026 GMT
Subject: CN=E9625E5393DF54A5B4640B8CA3B75B070A27F77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:1a:cb:c0:17:8a:4f:c2:ed:d1:08:52:41:
17:ff:8a:0c:69:14:68:c1:0c:c7:a3:93:9c:41:1c:
77:90:2f:95:9f:2b:d4:c1:b0:e9:7c:c9:af:15:d3:
35:ba:ee:b1:94:26:74:f4:e0:77:e0:88:da:85:7a:
46:cf:77:01:1f:71:fb:b6:77:88:be:1e:fa:01:dd:
26:08:5e:62:b1:b4:a6:4e:6c:8a:b0:c8:cb:bf:db:
38:55:bc:14:eb:4d:c9:3e:b3:9c:50:45:60:80:61:
e3:91:71:e3:31:e2:e1:f8:78:1e:2d:e3:dd:63:1d:
64:8c:ec:16:25:3d:96:fb:5c:f1:00:89:ce:38:35:
fd:00:fd:02:1d:4b:0e:d8:c6:be:4c:e9:bf:70:f5:
dc:4d:9e:af:f9:bd:70:e8:5a:d2:21:71:08:14:00:
51:5c:ec:fa:95:4e:53:5d:06:51:61:9e:bf:1e:98:
32:87:74:4a:c5:a4:c4:98:ce:8c:c9:61:56:c5:9b:
bf:a4:f0:fe:96:97:ce:29:97:53:60:16:e7:95:0e:
a5:e1:a2:35:7e:5b:b7:ef:dc:cb:31:4c:b3:db:92:
34:91:05:6f:92:f9:84:23:c2:45:8b:c6:cd:16:1f:
dc:9c:3c:cf:9a:2c:50:0e:63:c5:91:89:ad:b8:3e:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:5E:53:93:DF:54:A5:B4:64:0B:8C:A3:B7:5B:07:0A:27:F7:7A
X509v3 Authority Key Identifier:
keyid:35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:70:14:9e:7a:9e:9f:1f:7f:c1:9f:3c:3b:09:46:0c:c1:e4:
5b:78:26:db:4b:d8:1f:91:de:29:a3:43:5e:33:f5:97:06:04:
10:e9:9d:56:ea:1c:12:23:17:1c:90:71:c8:44:c2:06:eb:e2:
5a:e7:6c:dd:5c:b9:b5:cc:56:40:0a:db:62:fd:7e:2e:2a:63:
96:92:96:57:d5:0c:07:ae:0c:34:c6:0c:26:5f:ef:d3:71:54:
d9:40:6b:ed:a7:bb:8c:e4:4f:90:6c:40:5f:1d:30:3d:34:d0:
d2:fa:aa:e7:c3:0e:2f:e8:c9:20:eb:4f:a0:3d:be:63:5b:be:
c0:22:48:05:6f:6d:cb:3c:29:a6:4a:c8:19:c0:d4:da:b5:54:
7c:54:de:7b:98:80:da:aa:21:ac:b8:b4:3d:fb:1f:00:8c:8d:
4b:77:34:b1:f4:a3:87:41:9b:c9:23:f5:78:82:e3:8b:ca:4f:
cb:94:07:de:5b:cd:94:37:96:7d:cd:f4:74:36:4f:47:58:d0:
3e:51:34:6a:8b:82:5b:3d:5b:18:66:0e:cd:05:93:4b:de:b4:
1c:51:5b:46:12:ac:08:90:ee:fe:35:7b:80:63:9a:dc:f3:3f:
18:ba:b3:39:78:db:0c:9b:ed:94:3e:db:df:58:98:2c:d5:e9:
cc:14:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:34:53 2026 by rpki-client