Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
File: 2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft (raw, json)
Hash identifier: GZfwZPSjkZZPFlhgzTzEfHOjZdXfmaV6XTfUwcl2H04=
Subject key identifier: 48:BC:19:8B:8A:78:67:1E:FB:ED:25:A2:2D:82:0B:F2:77:A1:F6:8D
Authority key identifier: 23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79
Certificate issuer: /CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
Certificate serial: 23CAA8174C25D873AFE3348A5045857816CE24B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
Manifest number: 27
Signing time: Fri 17 Oct 2025 10:54:28 +0000
Manifest this update: Fri 17 Oct 2025 10:49:28 +0000
Manifest next update: Sat 18 Oct 2025 12:18:28 +0000
Files and hashes: 1: AS210352.asa (hash: 8B5fRsalKzWmsY9soLcMVaaAVp6xTo+ejKH88jUtZzw=)
2: 2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl (hash: Lm+GcckxHXwkDEQy5FoFZydB6ao1w6xTI88cliOagk0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl
rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 12:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ca:a8:17:4c:25:d8:73:af:e3:34:8a:50:45:85:78:16:ce:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
Validity
Not Before: Oct 17 10:49:28 2025 GMT
Not After : Oct 18 12:18:28 2025 GMT
Subject: CN=48BC198B8A78671EFBED25A22D820BF277A1F68D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:b5:36:90:03:70:72:e5:9a:1c:2f:9f:db:
65:c8:ed:d6:f2:ee:66:c8:05:bd:79:1f:86:c3:d5:
44:c4:92:30:a4:f0:b7:6a:44:c9:90:b0:ea:7e:9f:
22:16:af:ec:79:30:28:6a:2f:46:7e:15:3a:8b:9a:
f2:02:b7:0e:e2:db:25:19:1c:d4:7a:a7:11:b5:6a:
a3:35:83:2d:d1:56:81:76:16:a4:d1:e0:b8:ff:f0:
d4:ef:d0:b7:fb:3e:d7:0f:34:06:3e:a8:5f:c9:f4:
a0:69:04:73:37:27:13:ff:37:d5:20:cf:37:b4:ee:
20:56:ab:92:ff:60:9c:77:79:58:44:26:37:e3:c1:
a6:75:46:8f:b8:cf:50:fb:53:ea:b0:bc:5c:36:7a:
08:56:c0:37:38:8e:7b:6f:11:b9:b9:43:39:01:5f:
d8:c7:65:14:4f:7e:82:8e:ce:90:19:f6:29:ba:ee:
68:cf:94:de:dd:fb:fb:b4:74:44:51:da:22:0a:ca:
76:b1:0e:e9:7b:18:1e:ac:7a:ee:fa:be:9a:ad:5b:
e5:37:e7:50:35:12:05:d4:bb:eb:1f:d7:88:db:83:
ea:4e:e4:74:e1:d8:f6:1e:60:1a:bf:b4:c2:e9:0b:
d7:35:6d:63:ed:e7:24:09:59:8e:34:46:91:aa:21:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:19:8B:8A:78:67:1E:FB:ED:25:A2:2D:82:0B:F2:77:A1:F6:8D
X509v3 Authority Key Identifier:
keyid:23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a0:58:f9:99:8d:d8:dd:84:dd:d2:5d:27:47:3f:f1:a9:7b:
53:fa:2b:47:cd:bb:79:a8:5c:f6:90:3f:c6:4b:ef:0f:bd:25:
b5:81:ae:49:fc:46:2c:45:66:bf:81:b0:ba:6a:42:05:bc:b5:
a5:a4:46:2e:10:12:69:f4:82:8b:43:88:c0:b9:21:67:d2:d1:
d7:5e:39:2c:f3:86:9b:c8:8f:3d:43:9a:4a:02:6b:ff:d0:18:
a8:79:4c:22:88:7b:9d:48:a6:5a:8a:e8:51:c4:f5:46:ba:0a:
6a:7f:d9:ee:c3:90:18:d5:9c:97:53:d6:dd:06:c1:f6:c0:7c:
18:ce:a1:07:5d:32:62:b4:01:af:0f:7f:3d:f7:0e:e8:e2:1e:
69:cf:d9:70:d2:6c:f6:26:c4:dc:2e:e0:ac:fd:bb:23:25:38:
50:df:a8:25:34:ac:42:72:ca:56:c4:52:1e:bd:d5:1f:66:32:
23:c1:03:4b:90:df:66:10:9c:bf:c0:02:b7:eb:3e:9e:8a:f0:
e6:97:12:c6:52:55:d2:05:61:30:80:4e:72:ec:6c:f1:d7:27:
85:c1:ef:3f:84:a3:2b:b5:d8:92:20:b0:c6:9d:82:31:91:bb:
b8:f2:c9:64:a0:f0:46:49:2d:5f:f6:d2:d4:1c:49:ec:e0:c0:
35:c7:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:10:00 2025 by rpki-client