Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
File: D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft (raw, json)
Hash identifier: iOvF32wxFOkLylQrDFqmEXIqig5fiya+xdCRA93fUPU=
Subject key identifier: AF:57:4F:00:FC:1E:38:15:C4:0C:00:A2:B4:CC:30:A2:D1:24:3D:E8
Authority key identifier: D8:35:71:90:AA:93:04:EC:44:27:06:E1:C0:7B:99:BC:4D:7F:5D:A3
Certificate issuer: /CN=d8357190aa9304ec442706e1c07b99bc4d7f5da3
Certificate serial: 31C52FA86C79AA9A52F8E5B11F2200516BB06047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
Manifest number: 10
Signing time: Sat 06 Sep 2025 18:49:19 +0000
Manifest this update: Sat 06 Sep 2025 18:44:19 +0000
Manifest next update: Sun 07 Sep 2025 21:17:19 +0000
Files and hashes: 1: AS205941.asa (hash: KHudH+Jt8A3+kKvSv7l8dEAUwQz3iOCDiAqV54pVtCQ=)
2: D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl (hash: 3AQ8AKg6mCEsz1R23kPzQrLmr0PjTDplEav3Szr751c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 21:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c5:2f:a8:6c:79:aa:9a:52:f8:e5:b1:1f:22:00:51:6b:b0:60:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8357190aa9304ec442706e1c07b99bc4d7f5da3
Validity
Not Before: Sep 6 18:44:19 2025 GMT
Not After : Sep 7 21:17:19 2025 GMT
Subject: CN=AF574F00FC1E3815C40C00A2B4CC30A2D1243DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:c4:3a:99:f8:93:55:48:6a:98:59:15:eb:
ab:7c:27:72:cc:53:7e:71:01:ad:5b:61:af:73:60:
c5:48:6c:71:fd:e7:14:14:8c:ca:d7:f3:37:42:01:
c9:6a:64:5c:9b:7c:aa:98:fe:4a:9f:ad:e0:d2:ad:
10:2c:c6:e4:1a:57:3d:b5:a2:da:7b:d4:2e:8a:88:
66:70:e8:b3:a1:b0:40:99:7f:a7:f6:57:f8:17:77:
c6:d8:b6:19:73:e9:a7:70:15:5c:1f:db:b3:bf:b0:
8d:a2:2f:ec:72:90:79:76:f5:93:9d:65:aa:c2:fc:
0b:9e:45:8b:d5:a8:b5:f5:27:35:4f:14:77:44:fe:
fa:62:47:32:1a:89:19:0a:4a:e5:3d:0f:3f:89:cf:
c8:93:c1:0c:79:b1:08:cf:fe:d5:3b:cd:ee:6a:d7:
7a:0b:75:22:a3:82:c6:a1:99:52:e1:ea:a5:c0:c9:
a5:68:d2:05:1c:8b:16:70:0b:95:12:df:6a:76:22:
39:6c:40:ff:83:90:df:80:49:fa:82:04:eb:ec:36:
ac:fc:c8:db:27:e7:84:51:cd:11:71:47:b4:aa:e6:
f2:8f:ac:88:f5:46:28:8c:ab:cc:1d:40:4c:13:25:
15:7c:58:a8:a4:5e:d2:ec:54:1e:f8:c0:97:e6:d3:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:57:4F:00:FC:1E:38:15:C4:0C:00:A2:B4:CC:30:A2:D1:24:3D:E8
X509v3 Authority Key Identifier:
keyid:D8:35:71:90:AA:93:04:EC:44:27:06:E1:C0:7B:99:BC:4D:7F:5D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:98:92:da:fe:a2:b8:3e:00:89:75:1a:07:da:01:0c:b9:84:
17:4f:1f:a3:2c:62:cc:bb:03:20:02:b6:94:bf:96:1b:7d:d6:
2d:97:31:64:87:de:06:0d:f1:79:d5:bd:0c:19:9e:5c:f5:d2:
50:63:f5:d2:e9:0a:2e:db:14:f0:d5:31:cb:5d:17:60:3a:27:
9d:aa:94:64:be:9a:3b:64:a6:62:39:f4:45:be:ad:e7:e2:c0:
a3:d8:f3:51:ef:c9:c8:fc:bb:fd:09:58:d1:cb:67:95:65:27:
17:b9:7f:f2:12:ea:c5:8f:85:53:b3:60:56:2e:d5:53:ef:ab:
9f:32:4a:23:c9:78:62:be:23:7b:97:0b:37:7a:ca:72:7b:90:
c5:52:b7:40:a3:5b:65:ec:00:0f:ef:f3:16:74:9f:68:15:08:
47:12:dc:4e:09:9a:65:4d:d0:42:6d:44:59:39:72:1a:87:6e:
f2:5a:19:1f:01:d6:44:1d:0d:b7:b7:66:e0:37:17:2c:5d:1b:
bc:8c:be:e1:99:51:20:d0:31:0a:ce:db:f6:bb:f1:29:e9:75:
6e:2b:a6:a1:09:e9:4f:8a:cb:09:75:fa:68:17:05:d2:f5:6b:
c4:2e:7d:63:17:7a:af:13:ec:f8:5f:21:f4:10:c8:98:af:94:
55:4b:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:33 2025 by rpki-client