Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
File: D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft (raw, json)
Hash identifier: McMaHA0frE0CA0k4NAzaeaq51Zo7ab2GrttFOIPhMsY=
Subject key identifier: 97:91:75:63:31:51:78:8C:7D:40:F1:E0:6D:FF:86:D3:BC:60:6C:0D
Authority key identifier: D8:35:71:90:AA:93:04:EC:44:27:06:E1:C0:7B:99:BC:4D:7F:5D:A3
Certificate issuer: /CN=d8357190aa9304ec442706e1c07b99bc4d7f5da3
Certificate serial: 3713D9C4FBE20A460E4CAC772CEF6DEA079A875C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
Manifest number: 74
Signing time: Sat 08 Nov 2025 12:40:55 +0000
Manifest this update: Sat 08 Nov 2025 12:35:55 +0000
Manifest next update: Sun 09 Nov 2025 13:58:55 +0000
Files and hashes: 1: D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl (hash: lWgH8tdP2ICr/AED6T4UnmmoMwaSM/uc5LOcmp8cGTs=)
2: AS205941.asa (hash: 9spObUbHpAkXIM7YZ+50YqknkOiwFm1d8mVPPIYo0uo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:13:d9:c4:fb:e2:0a:46:0e:4c:ac:77:2c:ef:6d:ea:07:9a:87:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8357190aa9304ec442706e1c07b99bc4d7f5da3
Validity
Not Before: Nov 8 12:35:55 2025 GMT
Not After : Nov 9 13:58:55 2025 GMT
Subject: CN=979175633151788C7D40F1E06DFF86D3BC606C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:93:0e:aa:7c:6b:4c:d5:72:4b:b7:66:54:
0e:9b:0b:46:76:f0:ff:64:f6:22:9c:fe:e0:cd:90:
cf:38:b6:7f:a5:0b:8c:6a:11:ce:3a:bd:d2:c3:15:
2b:ce:fc:cb:12:be:3d:94:24:07:18:9f:b7:24:0a:
8e:86:9c:64:74:68:f0:41:8a:65:72:3f:5a:63:24:
7b:4c:94:78:9c:31:ef:fb:f6:49:45:df:70:5d:97:
75:f7:91:05:05:46:f9:97:41:72:63:2d:52:99:ae:
19:f4:1e:8e:1c:7c:e7:15:71:03:a0:0a:9d:37:3f:
10:52:a3:77:af:cc:0e:5e:f5:16:28:4a:02:5b:81:
4a:35:85:7f:a4:d1:bf:3b:a6:5e:90:32:7f:54:da:
35:e2:0b:fe:f4:f9:bd:1e:86:b4:27:38:09:a8:e5:
a1:aa:8a:67:c9:aa:9d:5c:b5:f1:c8:c6:4d:07:e2:
bf:71:ee:4c:bb:61:2b:bb:e6:7b:10:9e:2b:16:ca:
cd:e7:95:b2:f1:d0:4b:08:bc:1c:ab:3b:ec:d9:56:
ec:de:22:6f:7b:e1:ea:5c:10:25:bf:c0:f3:3d:89:
6b:b2:3f:22:23:33:b3:99:86:37:d4:d5:6b:c2:df:
7c:2e:71:f6:16:95:70:9e:f4:4f:d3:88:96:b8:3c:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:91:75:63:31:51:78:8C:7D:40:F1:E0:6D:FF:86:D3:BC:60:6C:0D
X509v3 Authority Key Identifier:
keyid:D8:35:71:90:AA:93:04:EC:44:27:06:E1:C0:7B:99:BC:4D:7F:5D:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DVxkKqTBOxEJwbhwHuZvE1_XaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/7/D8357190AA9304EC442706E1C07B99BC4D7F5DA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ac:bb:8b:d4:e9:b7:e4:6d:93:d7:39:ff:a9:6e:9c:34:8d:
4b:39:7f:f4:1e:22:5d:89:de:28:3d:5b:5a:f6:ce:b3:dd:67:
cc:cb:7c:2c:22:d0:3c:fb:52:7a:96:58:79:cb:53:ca:c4:2b:
96:02:97:2c:78:09:d1:f9:9e:90:b9:e1:b7:43:57:d5:51:a5:
de:bb:2f:9b:af:75:0c:b2:ac:93:9e:5c:5a:72:fd:19:cb:e5:
79:fc:72:e3:3c:f5:4f:9e:a2:97:36:af:7a:5b:32:a1:d4:f4:
9d:fe:3c:4d:ce:ed:69:81:88:9e:c7:19:0d:f9:eb:0e:87:03:
c7:cf:d4:4f:4f:65:35:13:ac:7d:9d:c6:54:88:d1:1d:db:dc:
bb:5a:86:94:f3:73:24:56:f6:a3:7a:d6:3a:86:02:76:14:9f:
4f:2f:8c:4a:e8:22:7b:1c:6d:e5:e0:93:85:83:aa:7f:1a:6d:
4a:d0:18:42:95:69:6e:bd:06:7e:fd:01:53:c6:1b:4e:d0:5a:
79:d0:61:27:88:aa:c3:53:63:a3:04:93:21:50:fa:bc:06:48:
d0:0f:66:1d:0f:a9:3b:e3:8c:be:49:a1:e4:71:92:17:cb:9f:
74:b4:0f:65:bc:40:60:ee:37:74:9a:de:b7:2f:15:95:b5:34:
87:0a:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 06:41:05 2026 by rpki-client