Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
File: CF7320162773CFFE2866D9712A738E4199536117.mft (raw, json)
Hash identifier: YYw20GFvY2eZz3/Bkc91tbOZjI4JnrrZ1a/nA2mBWAs=
Subject key identifier: 85:9F:A6:7E:CF:90:46:33:56:D0:E1:DC:1B:24:E6:80:48:F1:A5:69
Authority key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
Certificate issuer: /CN=cf7320162773cffe2866d9712a738e4199536117
Certificate serial: 1DBF315F91EFFA892B1181B566D8DFB4983AD270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
Manifest number: 08
Signing time: Sun 07 Sep 2025 03:39:57 +0000
Manifest this update: Sun 07 Sep 2025 03:34:57 +0000
Manifest next update: Mon 08 Sep 2025 04:49:57 +0000
Files and hashes: 1: AS208824.asa (hash: s478gLdubU217wOwz3XVpDSBZ0mET32A4LFnedJpS04=)
2: CF7320162773CFFE2866D9712A738E4199536117.crl (hash: qwqacmlATdn+kReTdRqHZxF4/YTl+s4rmIqcWXQqwSU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:31:5f:91:ef:fa:89:2b:11:81:b5:66:d8:df:b4:98:3a:d2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7320162773cffe2866d9712a738e4199536117
Validity
Not Before: Sep 7 03:34:57 2025 GMT
Not After : Sep 8 04:49:57 2025 GMT
Subject: CN=859FA67ECF90463356D0E1DC1B24E68048F1A569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:b3:e9:84:26:5a:fb:28:fb:d4:06:ac:63:
d3:87:c9:4c:b4:65:37:d4:36:2d:f8:d9:e4:ba:a2:
a9:5c:dd:b9:fb:54:3e:2c:4a:9c:26:da:74:09:d8:
12:3f:68:f9:24:7c:df:07:48:4d:45:be:9b:c3:f7:
ec:4a:89:d8:ee:eb:3f:96:ef:f2:16:e9:a8:d8:71:
f0:ea:95:2d:93:dc:c9:18:f7:1b:52:1a:6d:d3:be:
03:9f:dd:20:6d:3f:99:5b:a2:17:df:0c:2b:25:9e:
28:05:fb:34:5b:c9:87:04:99:68:9d:9f:d8:85:89:
d8:74:8f:d8:3c:bf:6c:e0:99:7c:6f:d5:cf:b7:6e:
64:be:b7:c4:bc:3c:31:d0:fb:37:ee:22:fa:f3:b6:
c6:1f:47:f5:f1:7a:ab:c7:ef:e7:f2:08:c8:4b:21:
4b:69:b7:a2:65:31:a8:e0:f6:12:31:4d:bc:32:73:
55:e0:db:73:2b:39:ff:03:fd:8d:bc:2b:22:bc:36:
f0:1a:7d:a5:e6:cb:8d:c0:51:b5:d2:6d:93:76:f5:
5a:1d:de:62:48:86:44:21:b8:4e:1b:97:72:f2:6b:
3e:76:cc:2c:0a:d1:32:4f:d8:5f:cc:a4:e0:eb:ad:
f1:a7:85:bf:b1:53:b3:ed:41:47:e2:b4:94:74:9c:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:A6:7E:CF:90:46:33:56:D0:E1:DC:1B:24:E6:80:48:F1:A5:69
X509v3 Authority Key Identifier:
keyid:CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:48:ef:fe:b2:5e:06:77:37:b3:b9:1e:2c:a0:f5:49:49:a1:
71:80:ff:7e:1a:25:40:f2:96:c5:ed:49:22:9e:f8:cd:96:a5:
4d:d6:dd:98:17:14:80:44:56:80:ca:f0:83:eb:13:6d:87:9b:
0c:35:89:d2:a4:af:6f:d3:18:24:a8:4c:62:ff:24:ad:4e:b3:
71:20:84:8f:06:dc:f0:21:fd:8a:4f:56:0e:a0:37:ce:a4:2d:
b6:97:a8:d2:ff:d0:bb:16:be:fc:a9:a8:01:90:39:bd:2e:4c:
47:fc:ef:37:ae:50:00:03:7a:24:aa:98:a9:73:d3:de:a1:cd:
60:e1:c3:2c:89:82:8e:4b:b1:0d:57:33:04:99:4a:31:1b:61:
ad:cd:45:d6:bc:cc:cd:7f:0f:5d:ad:26:dc:ed:7b:9e:39:44:
e8:06:6d:aa:78:97:9a:0f:7c:89:9d:f3:6d:de:6b:bb:28:85:
ab:89:d4:3e:01:a1:cd:59:ba:e0:ec:49:dc:e2:f3:d6:e7:0d:
6b:02:07:a4:09:5b:05:a3:c9:ba:5f:14:60:d4:94:e2:18:48:
31:a3:ae:55:37:df:4e:f1:88:b6:4a:eb:fe:fb:b5:cf:09:52:
a8:9a:39:96:39:34:8b:56:de:17:a5:9f:9b:bb:88:9c:a1:93:
2f:cd:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:26 2025 by rpki-client