Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: SG7Vg/w3BhIq524hF5qEw4nLV1f323yuzOz5pXN11a8=
Subject key identifier: D7:1D:8A:9C:E3:C4:ED:B9:63:25:EB:D6:88:49:E9:BA:4D:B3:B6:8C
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 2DCF7665A9B848E1ED7CBE8190CF64648CBF9C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 03A6
Signing time: Tue 02 Sep 2025 15:31:46 +0000
Manifest this update: Tue 02 Sep 2025 15:26:46 +0000
Manifest next update: Wed 03 Sep 2025 18:42:46 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: jhaS/LIusHy7zykydOVyDPJlMvFtui7AuiMQUMgCrk0=)
2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Sep 2025 18:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cf:76:65:a9:b8:48:e1:ed:7c:be:81:90:cf:64:64:8c:bf:9c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Sep 2 15:26:46 2025 GMT
Not After : Sep 3 18:42:46 2025 GMT
Subject: CN=D71D8A9CE3C4EDB96325EBD68849E9BA4DB3B68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:26:8e:d9:8d:49:c3:20:da:3e:b2:4c:bd:
5d:70:43:91:e1:e5:ac:36:80:47:a4:b3:58:af:2d:
3b:63:be:1f:15:6f:99:8e:7a:a2:2b:d1:b2:e2:4f:
68:4e:e7:b0:b7:87:0f:35:9b:e4:54:f1:bd:eb:e9:
85:a7:61:5f:e6:e5:03:35:0a:85:a5:68:71:c3:b5:
10:fb:87:69:72:c8:85:31:2a:e0:43:8b:5a:f8:01:
ff:9c:93:19:0e:a5:8e:57:56:1d:71:e5:b9:fc:b9:
55:e5:dd:f7:c5:d3:6e:3a:6f:46:31:37:08:a5:b4:
bb:10:b5:fc:42:12:66:95:1e:3d:9e:df:77:0b:d0:
2f:b5:20:e1:90:df:23:b1:1a:f9:9d:cb:f3:3c:23:
aa:70:71:22:aa:1c:0b:a4:c8:a6:c1:bb:4a:3b:83:
13:52:92:16:e4:a8:11:8b:cf:78:19:ed:fe:e5:d5:
b3:4b:3b:f2:8f:3a:50:69:ce:95:ae:4b:d2:d1:f6:
fb:ae:21:05:3a:71:72:34:e4:89:fe:1b:03:59:bf:
72:d5:72:d9:d5:93:82:5d:27:6e:e9:3c:8f:94:5b:
66:40:3e:be:81:d8:75:12:3a:86:de:2a:cd:ee:19:
a1:ad:ea:1f:d0:b7:d0:97:9d:7e:f6:e4:28:05:5d:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1D:8A:9C:E3:C4:ED:B9:63:25:EB:D6:88:49:E9:BA:4D:B3:B6:8C
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1a:2a:56:8f:62:1d:63:8b:50:bd:7c:75:db:0e:84:24:26:
a3:ad:5e:e2:ab:2d:39:f0:07:c5:37:72:b0:8a:ed:1b:81:32:
8d:5e:7f:96:96:ea:22:f5:83:ea:c2:c9:8a:a7:ff:35:de:4f:
f5:e1:93:23:30:a4:e0:14:97:50:e0:bc:75:5d:a3:ca:f0:85:
57:3b:d7:ce:76:e5:ea:28:e4:60:ff:13:1a:49:6d:72:53:b7:
89:d5:99:81:90:81:06:24:6f:ab:1e:06:62:59:ca:b9:28:61:
d7:9c:6d:55:ba:61:ab:15:36:03:4e:3e:7d:30:23:29:59:2d:
67:ab:7a:f6:22:f7:2a:bd:81:a2:d8:92:bc:cd:c1:1a:da:e4:
89:20:b8:c6:a7:a8:bf:ad:28:89:8b:4c:22:a1:ff:1a:4b:1b:
39:d3:71:0a:c9:04:10:ae:84:ee:af:6a:a1:d3:8d:fe:f2:2e:
da:b2:45:90:e2:8d:b1:24:20:29:40:f3:b6:a1:15:79:28:0d:
ef:64:dd:a3:0d:2e:d1:8d:18:fc:33:99:65:00:1e:b2:58:c6:
fb:a8:a1:9b:2b:f1:09:0a:a9:0d:00:79:2e:e9:09:f4:6f:e1:
cb:fb:58:24:bd:83:e2:99:c8:3b:1b:06:d3:06:ee:09:46:e7:
e0:d2:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 05:55:21 2025 by rpki-client