Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
File: CF7320162773CFFE2866D9712A738E4199536117.mft (raw, json)
Hash identifier: wJzX0nPSe0NasrhtAy/QvKOGOgcWC4FS64IDJhcZUz8=
Subject key identifier: 32:FE:6D:09:64:2A:FD:06:BB:DF:6B:E9:17:CC:60:DA:6D:56:D2:56
Authority key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
Certificate issuer: /CN=cf7320162773cffe2866d9712a738e4199536117
Certificate serial: 5AB1A3F4674CB7874F803C99379DAB2542557E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
Manifest number: 5F
Signing time: Tue 11 Nov 2025 00:31:32 +0000
Manifest this update: Tue 11 Nov 2025 00:26:32 +0000
Manifest next update: Wed 12 Nov 2025 01:30:32 +0000
Files and hashes: 1: CF7320162773CFFE2866D9712A738E4199536117.crl (hash: asUlN/EElo5uaDv06rMYBtCC6WWVFOoShNzdcLPplDI=)
2: AS208824.asa (hash: pO2oqucndlObtPTLzYJvUNtIOdgCmd6bYfZzGJi1V2k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b1:a3:f4:67:4c:b7:87:4f:80:3c:99:37:9d:ab:25:42:55:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7320162773cffe2866d9712a738e4199536117
Validity
Not Before: Nov 11 00:26:32 2025 GMT
Not After : Nov 12 01:30:32 2025 GMT
Subject: CN=32FE6D09642AFD06BBDF6BE917CC60DA6D56D256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:41:1c:67:74:77:05:2c:fe:f1:3f:8d:63:
51:e4:13:7f:82:c4:b4:92:21:28:16:b7:74:3e:96:
69:f7:65:3b:cf:9d:aa:b7:a3:7c:57:7a:9c:97:1e:
f9:10:e2:e2:2e:74:00:5e:3c:3b:2c:09:f4:c7:cd:
d2:cb:c6:b0:75:2f:cc:74:ce:47:a2:c2:a1:9f:b3:
08:a3:e4:52:4a:e8:92:f8:d8:df:7d:9e:96:d9:cf:
6f:e0:90:00:13:cf:d6:a8:e9:34:b1:07:d5:22:83:
85:ad:83:fa:a9:e9:4f:67:67:71:ad:c3:80:00:90:
5e:a8:c4:fb:c0:ee:96:59:33:56:17:37:7e:38:e7:
31:71:c0:9c:7c:8c:27:8e:c0:2e:e6:f7:1f:59:a4:
d4:dd:7c:db:c3:f2:06:a7:60:5a:f8:ad:47:72:7c:
63:cd:1f:ed:e5:78:44:a9:6d:a6:93:3e:1d:54:c3:
95:a2:76:49:09:0f:ae:f4:21:44:d1:73:72:b4:1a:
00:4e:d2:41:69:ad:0e:e4:98:d3:f1:a0:fd:cf:78:
c8:76:07:ef:6d:00:a1:37:df:02:3b:24:97:a4:f3:
b3:85:ff:41:54:98:a6:d8:37:c2:72:92:40:89:ae:
fe:3c:aa:9e:2a:81:5b:df:76:dd:f7:6d:9c:a6:b8:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:6D:09:64:2A:FD:06:BB:DF:6B:E9:17:CC:60:DA:6D:56:D2:56
X509v3 Authority Key Identifier:
keyid:CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e4:af:02:fd:b5:35:30:b6:e3:cf:8a:82:a0:70:b7:05:54:
30:1b:ca:44:42:20:16:88:07:e8:d6:c4:d2:b2:19:57:c2:fe:
1a:00:79:0b:da:b9:b6:a9:48:73:0d:16:54:93:51:72:83:87:
93:03:8c:f3:17:07:74:81:fd:05:db:d9:aa:32:12:84:cf:2d:
52:36:a6:97:85:28:5f:c3:93:9f:ef:d7:e5:5b:5d:63:cd:60:
7f:32:7f:da:17:bf:cc:0d:28:5d:45:cc:30:f0:10:de:20:7f:
11:93:82:66:c6:26:f1:8c:27:1d:2b:de:c9:a7:b2:5a:39:fa:
b2:3d:62:7d:32:87:05:b0:3e:18:92:ae:ba:cd:e7:ca:48:df:
31:24:7d:a8:e6:ef:03:fe:53:8a:ca:68:d6:05:b1:7d:bd:04:
d4:be:da:d8:5e:28:51:58:49:36:0b:cb:9f:1d:d9:2e:d0:7c:
b8:f0:a6:91:ce:55:be:ee:80:29:24:50:a1:05:9f:aa:47:88:
52:17:6d:63:34:63:ed:7f:53:88:fe:66:5d:e8:a2:6e:69:c2:
96:e2:c5:8d:be:47:94:6e:50:98:e0:db:69:16:9b:ae:29:f8:
25:9c:bd:fd:47:5d:9e:7d:44:40:a3:4b:97:0e:d5:89:2e:14:
4f:c2:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:25 2025 by rpki-client