Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File: 84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier: tb9YpNsel7Cb543b1bGJ7OsssoNsaJGa6CPTggdnSkM=
Subject key identifier: 96:65:83:6B:AB:26:E6:E2:EA:F0:F5:F7:92:0D:D9:53:DD:E4:65:D5
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer: /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial: 6630E567696B1BFC379898FC0C65FE6F4001C1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number: CC
Signing time: Mon 08 Sep 2025 00:23:19 +0000
Manifest this update: Mon 08 Sep 2025 00:18:19 +0000
Manifest next update: Tue 09 Sep 2025 03:21:19 +0000
Files and hashes: 1: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: Il2n1WwOww7KejKtLZXLsBiPrHZR08OBexsJq7382gY=)
2: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 03:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:30:e5:67:69:6b:1b:fc:37:98:98:fc:0c:65:fe:6f:40:01:c1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
Validity
Not Before: Sep 8 00:18:19 2025 GMT
Not After : Sep 9 03:21:19 2025 GMT
Subject: CN=9665836BAB26E6E2EAF0F5F7920DD953DDE465D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:d9:9f:2b:32:db:dd:85:79:2b:8b:63:86:
03:2a:62:65:41:cf:b9:c0:45:3c:3e:c5:bd:9f:2c:
f5:d3:3b:e6:82:ef:57:3f:3c:6c:b7:41:a2:66:9d:
17:78:dc:fa:d7:b4:ba:f0:d5:ce:75:bf:a0:5d:0a:
53:48:cf:38:ba:a1:79:c2:46:59:5e:34:07:59:87:
fa:3f:8a:f0:e7:f6:02:3b:98:11:bc:54:1a:12:f4:
cc:68:e3:76:bf:1a:0d:2f:25:86:70:d3:8d:ad:f0:
fc:f8:2c:de:39:81:06:14:b7:9b:62:43:1e:94:0c:
25:29:9a:34:db:15:e1:cc:79:32:aa:fe:12:a0:b2:
65:a6:6e:4b:62:f9:ed:41:b5:ce:a1:93:20:8b:6a:
d8:c2:76:0c:0c:8d:4a:81:bc:5e:79:c3:e0:56:55:
46:1a:13:ee:a6:f8:3b:6f:91:1e:2b:89:60:d8:6f:
9c:d7:b6:79:6a:ac:84:cb:b8:43:01:f0:74:59:52:
74:14:f0:06:4b:b7:28:97:8f:d8:d2:fe:ac:a9:01:
80:37:98:17:6d:f2:b2:64:8a:65:f4:54:d8:62:e7:
93:1b:4b:5c:15:5a:0e:ac:1d:6c:b8:64:b8:f0:21:
d8:31:4e:ca:90:db:a6:9d:c3:c7:09:f1:94:47:df:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:83:6B:AB:26:E6:E2:EA:F0:F5:F7:92:0D:D9:53:DD:E4:65:D5
X509v3 Authority Key Identifier:
keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:87:40:38:f8:6b:a3:80:40:3a:20:91:cf:6a:e3:75:ef:
e5:e7:49:00:a4:d0:71:a9:c8:6e:cd:78:e2:b6:a1:c1:55:53:
a3:05:55:cc:08:99:1e:37:32:e6:45:a9:c7:6d:4f:57:39:97:
0f:57:11:f4:5c:75:99:e0:9e:84:8e:e1:3f:cb:6f:be:3f:8b:
95:2e:94:ce:22:3e:bb:cb:bd:ef:a0:25:09:46:ae:58:00:8e:
25:6f:5d:fc:ad:3a:75:be:51:52:1d:6a:95:62:5d:e1:33:95:
6b:c2:7d:cd:56:96:3b:67:45:55:81:33:ca:b7:20:40:e7:c8:
23:a6:77:df:0e:cf:b5:03:55:53:83:f7:9d:82:96:8c:08:f5:
33:d1:6f:45:10:14:6b:05:c0:1f:30:bc:fb:f7:03:5c:12:39:
67:b9:78:ed:e1:f4:96:38:4f:eb:ef:f1:bb:d6:bd:d1:e6:8a:
1d:be:d8:97:dd:ad:7c:45:b1:1b:32:05:07:59:0c:49:76:c8:
d3:3d:7b:ad:00:96:3c:f1:9c:ee:4d:ce:69:57:8e:13:08:46:
58:95:ab:ff:55:e7:4d:81:61:72:f1:41:33:f4:f4:6d:23:c6:
72:e7:3f:4a:38:87:e4:58:7e:9f:5f:4c:ed:1c:bd:01:24:11:
63:b2:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:11:19 2025 by rpki-client