Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier: u5SOjxZGPnsO8zT7CNaSWBgb9bzYKpxe+zjXi0K88cw=
Subject key identifier: 2C:C5:5E:28:C8:5E:36:FF:C6:84:80:DD:41:04:87:EA:C6:20:8B:73
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 04CC1B710DB6FF1875F4D78EA82E5BCBBF202952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number: A0
Signing time: Tue 21 Oct 2025 07:36:36 +0000
Manifest this update: Tue 21 Oct 2025 07:31:36 +0000
Manifest next update: Wed 22 Oct 2025 10:14:36 +0000
Files and hashes: 1: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
2: AS9304.roa (hash: wzKGLhlN3ACWOUXH/hbqJZQ96pwBrZDb4EZnvVtFgto=)
3: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
4: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
5: AS214025.roa (hash: S+Y7ACmnPyLFx3wUM5GQmFaaoiI/cGnBmul8wsZLMZQ=)
6: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
7: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
8: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
9: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
10: AS207654.roa (hash: ZSFxThGneIBH2yStTA3bBZlpPy8KbeO+royJpbkOmHc=)
11: AS152179.roa (hash: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=)
12: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: 2TXz+9T+CUpiOX1EUyW2Tg6oA9XAPsTATNxfVpBQImA=)
13: AS9009.roa (hash: HeIn3LUbPLqmFMnLZmgQe08tqcX0eAlPHd3caG3Qv+E=)
14: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
15: AS3320.roa (hash: Yr9E4NEO2sJzZFwsOz613kAb9AxoZeahd0Ea69UMrZU=)
16: AS205886.roa (hash: LENT/wAYpNm9hLYbiT8DDeUMFW23AJaip1pjDdcLMrE=)
17: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
18: AS135391.roa (hash: CekNXCKRU+ABH5xrdNUE4vn/Bp+SUCJGnwQYr5NwX6E=)
19: AS16276.roa (hash: zu3ml6ZfajGx7AoDCANIjF68KhNQeRdXxY8h2J6Dlis=)
20: AS834.roa (hash: xkocPYY+mi009W06hZvO4CNFwjYiaPMGAhTitxttoS4=)
21: AS8820.roa (hash: Mdc8odFNQPiW61JF0ebULuFSJ2w2/U693bJg+5MesSI=)
22: AS27463.roa (hash: Qa9G1fyPkPtivskG7RmcNp+V3FFUx0ZZAO5NHVFED+0=)
23: AS396982.roa (hash: wck0Q0rqhEQ5SkcL+goIs+/wb4+g0gW+rKGQFTxR6SE=)
24: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
25: AS393942.roa (hash: 46l3bM7TWiGl0BQ1hT2AGGcKGBGq0dWoMtWX2ZzlhYQ=)
26: AS197537.roa (hash: cJiH56Inady06LVYFGnSVA2pFpnweyE/PUKSOh0efWc=)
27: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
28: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
29: AS21859.roa (hash: XxmvLhTbAec8Ij/dQAKg2E/hJVelKMQkCLMdIsssmrY=)
30: AS63199.roa (hash: 12M/4rDEnNlu6NpcT1coUXqoQ04lDw3cZPaAu5+YbWM=)
31: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
32: AS206781.roa (hash: u5AtvuN8DZoybC5jmpdLGiJIsJAgQ1te19Ty/6LaNP8=)
33: AS214432.roa (hash: BQxrTBE0A/cDkLfmkbSxeUneswUMu8VUv4klEIsDgtw=)
34: AS174.roa (hash: DaMQTt3FIh4yanc24DJw+nqwU+ihbYdYEHEGuJChWyA=)
35: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
36: AS51202.roa (hash: jaf9+CqmSdD1PtQyT9sqfS5mksQ+Id5vFWrK+ivPIzo=)
37: AS984.roa (hash: QG+vO3eIVnFVeSdGGuecccx/sa9flvva6qr8UCo7GNI=)
38: AS48266.roa (hash: wN58VW25Z+LecojZP+oOAtM/5chfYovrCCO/Cl8gTkE=)
39: AS213495.roa (hash: YZ1wKw/5qvtBkcx8lKmCURA0SCWq9wlYjZq8VsK2DzE=)
40: AS214483.roa (hash: 6RqqmAQfiH5vxDsevnysTOwpoPe3+DXp3DMdAvOkobQ=)
41: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 10:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:cc:1b:71:0d:b6:ff:18:75:f4:d7:8e:a8:2e:5b:cb:bf:20:29:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 21 07:31:36 2025 GMT
Not After : Oct 22 10:14:36 2025 GMT
Subject: CN=2CC55E28C85E36FFC68480DD410487EAC6208B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:24:bb:6c:80:f5:ec:ee:1c:db:e6:8e:b6:
f3:03:ef:09:3b:80:71:f2:a1:02:7d:d9:c3:8e:47:
bb:c3:d7:71:a7:90:9a:4b:43:cd:ee:4f:d6:8e:70:
32:a5:75:3b:80:62:7b:c3:d6:14:c1:e4:81:61:d4:
52:93:d5:39:e6:96:b5:43:d7:99:dd:d2:97:db:51:
60:46:67:7e:b8:49:82:1b:62:47:c1:29:a4:ab:d9:
ea:76:52:26:90:33:a3:1d:ba:c8:3c:dc:27:85:98:
f9:1b:2e:99:70:97:ab:4c:a6:4c:87:a5:f0:17:af:
89:e2:c3:86:cc:5d:ca:64:bc:3d:6d:36:1d:b6:72:
09:df:9b:75:ae:f7:b2:f2:1d:15:89:bd:ba:c4:b2:
d6:f6:5e:4c:7b:64:e7:db:c8:06:31:d1:99:cd:a1:
cd:6a:70:63:e5:e9:4a:ba:c4:3e:2b:5d:f2:42:b7:
7e:67:09:4e:18:b3:4e:1e:2e:ec:96:04:00:e7:17:
2b:00:77:fc:30:37:e3:26:54:e7:a6:8a:64:42:e3:
8a:62:c1:01:09:b4:b2:92:f9:b5:0d:58:79:ab:dc:
d8:6f:d5:08:df:08:65:fa:24:1b:dd:a3:8e:93:09:
62:74:f4:f1:79:c1:76:00:4f:06:8b:cf:88:13:7d:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:5E:28:C8:5E:36:FF:C6:84:80:DD:41:04:87:EA:C6:20:8B:73
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5e:5e:dc:da:e9:f3:09:60:05:b1:e2:23:ec:40:22:63:47:
bc:31:14:3f:8c:d8:1a:2e:72:c4:e5:d1:1b:fa:45:dc:ec:26:
bc:60:02:35:6b:99:a4:e6:64:10:7f:a3:4d:34:36:3e:b4:a4:
10:1d:d0:74:13:6b:09:3c:38:b9:bf:ed:14:59:d9:bf:6f:3b:
b1:44:39:51:8f:64:20:21:45:5f:3c:c9:1e:4f:a1:eb:04:c2:
d8:94:ac:50:20:43:fa:59:3c:e9:4c:dc:4a:74:8f:bb:65:6f:
67:86:a0:96:8f:75:31:21:d4:23:c0:93:07:01:94:6c:cc:30:
5e:d0:6a:e0:26:a2:e4:ea:f8:1b:07:af:07:aa:47:69:17:41:
5b:eb:df:33:c8:f7:ef:73:ba:ae:b4:94:53:d2:4a:2f:d1:ca:
2f:cc:07:0b:c7:5a:13:23:bb:84:ef:e0:f1:93:1f:4c:2a:88:
56:be:33:d7:fd:9b:56:62:5f:6d:dd:a1:8a:c2:d4:54:76:d4:
6c:6c:65:80:a1:61:f9:2b:fa:9e:b4:5d:1f:8a:68:27:e0:3e:
37:46:4f:48:af:59:db:df:fa:5a:52:55:df:0b:91:9f:04:ca:
2f:70:b7:df:8b:52:6a:28:dd:a0:13:8c:bc:af:70:82:92:12:
d5:6e:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:00:43 2025 by rpki-client