Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
File: 3301E959DD39845A0173C08066F1C898EDFF0B7F.mft (raw, json)
Hash identifier: 5NB7Yt0YHJmXPf3tR8mNM/pPaFwVk7sx4qk2az0jd5M=
Subject key identifier: CC:ED:3C:39:A5:1F:21:A3:C7:01:EC:C6:44:5C:EE:F7:F8:AD:D5:39
Authority key identifier: 33:01:E9:59:DD:39:84:5A:01:73:C0:80:66:F1:C8:98:ED:FF:0B:7F
Certificate issuer: /CN=3301e959dd39845a0173c08066f1c898edff0b7f
Certificate serial: 664127C4A14AFA761F4346B9B8D51607FAEC5F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
Manifest number: 11
Signing time: Mon 15 Sep 2025 10:05:30 +0000
Manifest this update: Mon 15 Sep 2025 10:00:30 +0000
Manifest next update: Tue 16 Sep 2025 11:00:30 +0000
Files and hashes: 1: AS206604.asa (hash: p/zkPVwWcYVgSwM7nOTLWujUzSb+MTStj/KStVYsoaM=)
2: 3301E959DD39845A0173C08066F1C898EDFF0B7F.crl (hash: ogbe0B7OiNVcKnSSH1JpFsPKD6GsfoK8UpQZHchdgyo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.crl
rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:41:27:c4:a1:4a:fa:76:1f:43:46:b9:b8:d5:16:07:fa:ec:5f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3301e959dd39845a0173c08066f1c898edff0b7f
Validity
Not Before: Sep 15 10:00:30 2025 GMT
Not After : Sep 16 11:00:30 2025 GMT
Subject: CN=CCED3C39A51F21A3C701ECC6445CEEF7F8ADD539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:91:46:23:53:b2:60:7a:c1:a0:bb:6f:76:
a5:31:9f:d3:92:45:33:07:32:ff:78:01:ac:96:37:
13:9a:cd:96:36:e4:5d:af:38:7b:58:80:7d:a6:3b:
d4:7b:d9:77:41:a6:d4:33:54:89:4c:37:5b:af:1e:
bc:e6:fd:bd:f6:53:53:76:2e:29:b7:94:ed:87:60:
ff:24:0d:dd:70:2e:5c:54:b2:27:ad:f4:38:6c:23:
4c:70:b1:d8:c3:64:3f:14:cc:b3:60:d7:1c:25:0c:
92:c0:81:b0:7c:d3:52:c9:c4:22:44:db:7f:9e:55:
1c:85:2b:48:5d:dc:94:b6:f1:d6:86:6f:fe:64:b7:
f2:a4:97:ba:0e:96:d5:11:1e:3b:18:5d:e1:9e:7e:
75:74:41:ba:ad:9b:15:6f:c5:6d:1c:df:54:04:dd:
a9:59:69:7b:7c:65:ac:86:9a:b1:d6:2e:2d:ee:73:
c1:f1:d9:34:27:12:6b:0c:83:c8:3e:30:d6:c2:1e:
43:da:ee:80:5f:9f:ef:97:66:5d:ce:53:95:ab:46:
99:80:4b:b4:d2:32:ac:12:34:db:f8:be:5e:da:37:
9d:9b:0a:4c:5d:e2:f0:14:fc:a4:a7:be:28:0e:65:
fc:79:a0:c2:50:04:93:00:a1:da:29:bd:db:60:a7:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:3C:39:A5:1F:21:A3:C7:01:EC:C6:44:5C:EE:F7:F8:AD:D5:39
X509v3 Authority Key Identifier:
keyid:33:01:E9:59:DD:39:84:5A:01:73:C0:80:66:F1:C8:98:ED:FF:0B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:af:09:70:39:e6:6b:51:f9:36:87:60:80:b9:ad:34:e4:94:
01:36:73:17:eb:fd:cd:be:32:c8:f4:a7:f8:94:4f:d1:03:fd:
85:33:83:4c:f7:96:1a:16:db:6a:3f:ef:be:e4:f9:46:42:fd:
e3:9c:8a:36:62:f1:d8:49:d0:2c:3d:9c:04:29:34:ff:ae:05:
64:ff:b4:2b:ff:2e:92:8c:0f:6b:8a:cf:5c:d1:63:c6:f0:89:
a6:0b:8d:99:a8:19:81:f4:5e:a2:14:2a:8e:dc:4c:fb:61:f6:
8d:da:e0:c2:7c:e2:c7:40:72:cf:cb:a9:a6:d6:a1:e1:ee:47:
8a:10:76:1e:66:ca:8b:30:71:3d:ec:49:50:3b:59:c4:9a:27:
8f:ea:89:b3:df:5f:42:84:2e:20:69:ec:79:83:04:11:96:33:
ec:49:11:19:0b:13:6d:8a:f8:05:dd:4f:f1:d2:43:a9:78:b2:
7a:d7:04:68:16:4f:77:fc:ae:39:7e:7a:d7:a8:1a:ea:19:76:
01:7c:d3:ae:72:0a:ea:0e:90:b9:34:33:d1:65:59:25:0e:dd:
6b:b3:c3:37:ad:f9:7a:c5:e1:f6:2e:99:cc:8d:ce:38:c3:af:
15:75:9a:e1:37:26:66:14:a4:d6:18:6c:7b:d0:e0:ea:51:18:
57:99:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:30:15 2025 by rpki-client