Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: 2wyBreUpU+Vsk0j6jR7J7Y8AL+zWq7+sMcnMB2du4zs=
Subject key identifier: C0:7A:F7:D7:B6:B3:3F:2E:23:DF:12:76:6C:7D:69:5F:D1:58:6F:B2
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 0A80702A7BC2336149C3FF34C15CAEF7169C08B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 03F1
Signing time: Tue 28 Oct 2025 21:50:16 +0000
Manifest this update: Tue 28 Oct 2025 21:45:16 +0000
Manifest next update: Thu 30 Oct 2025 00:12:16 +0000
Files and hashes: 1: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 5jxVtHN6TqYnmc8He9wLGc8+426U2Zu//dHYPdcOSWM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:80:70:2a:7b:c2:33:61:49:c3:ff:34:c1:5c:ae:f7:16:9c:08:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Oct 28 21:45:16 2025 GMT
Not After : Oct 30 00:12:16 2025 GMT
Subject: CN=C07AF7D7B6B33F2E23DF12766C7D695FD1586FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:09:64:d8:9b:d0:7b:1c:b0:3a:c2:99:84:
f6:0d:3d:92:37:c0:9b:d6:49:6b:3e:ad:5a:e8:39:
89:25:e4:bd:8d:33:f4:ee:de:af:c8:fc:bf:37:c4:
e1:1b:fb:89:6b:bd:e7:81:5e:0e:b4:30:fd:fa:73:
b6:33:96:20:96:10:93:4a:84:b7:a7:fc:40:c2:44:
2b:2e:7b:30:cf:65:25:dc:f5:0a:22:11:41:aa:c7:
53:ec:2f:af:60:86:32:a7:7c:fd:a1:58:ca:d2:44:
15:04:eb:80:ef:23:98:ad:45:97:18:7f:a0:6a:ee:
40:06:ff:97:4c:3a:8b:bb:8f:2e:bd:93:61:32:4a:
fc:d6:aa:f3:93:5c:e2:f7:34:4f:75:38:56:99:ef:
30:ae:f8:31:9f:2c:7f:49:8e:90:83:03:da:47:c1:
2f:47:be:ef:48:ba:c9:4c:b7:5a:81:8e:f6:96:00:
89:96:b1:f6:4b:fb:cc:d4:61:47:95:1d:5d:71:8c:
f0:60:39:ea:af:53:d7:0e:a9:76:59:a5:19:74:70:
2c:28:ba:37:1f:ad:2f:67:cb:08:58:78:15:46:25:
50:5b:92:18:5b:f7:33:21:e5:bd:fd:d2:c4:00:b8:
76:05:3f:72:d8:1e:d8:16:4a:3f:63:33:0f:c9:4e:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:F7:D7:B6:B3:3F:2E:23:DF:12:76:6C:7D:69:5F:D1:58:6F:B2
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:4f:96:d3:5a:f1:9b:5d:88:87:c4:66:b6:2d:4e:3a:bd:
63:5c:05:ac:77:fc:0a:a7:96:09:38:81:a6:03:75:eb:3f:8d:
8e:ec:1e:48:c0:a8:cb:ab:c6:c6:ef:ee:18:73:e5:67:7a:67:
c4:4e:66:b9:26:28:6a:82:cc:52:91:38:46:ce:49:db:d7:56:
ce:55:6a:ed:bf:b2:05:8b:18:de:c8:07:05:a9:9b:95:43:54:
b8:7c:13:4e:1b:0d:6b:70:5e:c5:2d:13:c0:32:b9:17:3e:c4:
72:40:6a:c0:d7:2c:8e:a5:1a:0b:e7:5e:ba:a9:a3:bf:e9:7e:
cb:92:f0:70:16:54:40:37:7c:c6:ef:f3:82:59:ea:88:c9:88:
f2:32:dd:13:d6:4c:3e:42:eb:25:ee:b2:31:75:b9:4c:30:b7:
32:b7:36:e9:ae:85:a3:78:b2:c2:5d:2f:4f:8f:4d:d0:8b:af:
e3:0b:d3:7f:a2:a6:38:f2:5d:a2:36:a8:6d:65:08:ec:64:0c:
2e:d4:c8:cc:38:ad:b9:a2:26:3d:47:cf:20:66:4c:5f:a8:15:
81:42:a5:81:59:fb:2d:8d:34:36:23:94:39:7a:ea:0a:6b:1b:
e5:02:a1:a4:0c:b0:e6:da:56:f6:8d:b3:74:b1:b4:9b:38:45:
ac:fb:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:05:15 2025 by rpki-client