
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: h6eaPw2FKQ8K8R2v3kF///aL1Jyk+uLzi1LZHl4o/a4=
Subject key identifier: 2A:27:F2:C1:CC:49:76:B9:94:2E:92:26:D1:1E:0E:14:A4:69:CF:CE
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 5FA7547C25A3DE948D4058679F81AFDCDD277163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 05F1
Signing time: Mon 10 Nov 2025 22:06:46 +0000
Manifest this update: Mon 10 Nov 2025 22:01:46 +0000
Manifest next update: Tue 11 Nov 2025 22:49:46 +0000
Files and hashes: 1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
2: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: /Z8vtRl0b/2WD3UiDRGUiIeyxNFSVjYPSdjp+NkF+ew=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 22:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a7:54:7c:25:a3:de:94:8d:40:58:67:9f:81:af:dc:dd:27:71:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Nov 10 22:01:46 2025 GMT
Not After : Nov 11 22:49:46 2025 GMT
Subject: CN=2A27F2C1CC4976B9942E9226D11E0E14A469CFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:b3:62:d1:b6:67:b5:42:1f:3e:09:8f:6b:
ec:49:0c:c5:45:1d:6f:ff:ad:f9:92:f0:c6:2f:e1:
31:59:6e:d8:04:82:33:d6:50:d7:9d:7b:2f:e7:3d:
4b:db:df:77:4f:e3:7a:f6:cf:e3:86:74:54:65:49:
7c:0c:5e:a3:73:b3:58:42:c2:b5:52:be:61:93:8f:
7d:92:e8:94:00:3f:ff:8a:1d:81:7a:15:43:31:2c:
78:32:33:e9:60:78:ee:89:8f:23:21:fc:ca:47:1c:
8a:3d:8c:ac:8a:fb:43:4e:14:1a:61:81:ca:23:a9:
bb:57:e7:0f:f4:2a:7f:79:87:35:12:f4:8e:00:2d:
e4:ce:2e:13:ad:31:76:d6:e1:2b:23:8c:01:db:a7:
cf:96:e6:9e:be:b7:8b:15:53:6d:97:d3:a6:d6:78:
98:6b:33:c4:dd:78:c5:1b:ca:f4:0c:7a:38:aa:3e:
a5:e9:48:7a:da:11:04:2b:89:e8:47:0d:9b:aa:36:
0c:f6:78:51:1d:65:20:c2:ff:cf:b3:1e:2d:17:c8:
38:53:3a:b1:c5:05:46:72:d8:05:10:f9:b4:03:74:
e3:d4:2d:ff:42:c7:96:a6:34:1a:66:bf:62:16:ac:
cf:38:c2:3e:59:a4:2f:5e:6c:b8:d2:01:5c:cb:14:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:27:F2:C1:CC:49:76:B9:94:2E:92:26:D1:1E:0E:14:A4:69:CF:CE
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5a:c6:07:dd:51:65:40:a6:cb:28:f8:01:54:1a:18:54:3d:
52:67:10:8e:3c:01:4d:8f:31:08:9b:4a:13:2a:65:b5:86:1a:
d7:1f:5c:5c:a0:ac:09:f0:f7:5d:a6:c8:97:2b:ec:00:cb:95:
46:3a:ed:2e:4f:1c:5c:36:a1:38:fc:9e:0d:14:0f:89:c7:9a:
d5:80:73:7a:1c:f2:a2:86:49:79:c6:25:20:90:fa:79:de:c4:
c2:92:6f:79:8f:13:e8:66:3f:34:4d:41:41:1b:5e:33:52:c2:
6f:90:b6:05:37:83:ef:e2:59:35:fa:91:d0:88:8c:bf:23:52:
b9:ec:e3:26:62:9e:0c:fd:94:40:55:6b:20:16:65:f7:e1:1c:
fc:fd:02:82:16:00:a2:2a:50:1c:75:a6:97:9c:51:80:aa:28:
3b:8d:d4:ea:05:86:a3:7a:10:9d:c6:34:e9:79:7e:be:b0:54:
a3:f5:74:b8:4c:0a:1a:77:49:31:15:bf:dd:bb:39:5a:10:77:
3c:2e:ed:a7:01:1f:5e:58:9f:a4:40:b3:a1:e9:23:15:49:88:
79:82:3b:8a:9f:ab:fa:5f:c9:4f:41:57:b4:a9:f9:dc:ad:2e:
11:88:06:0c:b2:a8:ae:ee:7c:94:98:20:92:b9:76:98:d7:e4:
7c:4e:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:01 2025 by rpki-client