Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
File: B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft (raw, json)
Hash identifier: 7m+lUuw8U+SIzJJJfy40cFtU+nEAQt6bBUHGbs/DGVA=
Subject key identifier: 27:5A:31:FB:44:D0:93:0B:32:EE:7E:28:3B:04:05:1D:A2:EE:8C:91
Authority key identifier: B4:E7:A6:ED:B9:E7:28:7B:9A:C7:96:24:F5:73:F4:48:DB:88:01:5D
Certificate issuer: /CN=b4e7a6edb9e7287b9ac79624f573f448db88015d
Certificate serial: 669C3A343D5959EB0792CB6B5356E8F0C5606528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
Manifest number: 14
Signing time: Thu 09 Oct 2025 11:43:04 +0000
Manifest this update: Thu 09 Oct 2025 11:38:04 +0000
Manifest next update: Fri 10 Oct 2025 12:41:04 +0000
Files and hashes: 1: AS210796.asa (hash: DX1AoDPK1cM489HWvmZexK7UjV2p14LhFQl4Gowg9ew=)
2: B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl (hash: eMBP255eO8vbfdeb6iiQm4MCnOjN2+JYuhHvsTpA16s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:9c:3a:34:3d:59:59:eb:07:92:cb:6b:53:56:e8:f0:c5:60:65:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e7a6edb9e7287b9ac79624f573f448db88015d
Validity
Not Before: Oct 9 11:38:04 2025 GMT
Not After : Oct 10 12:41:04 2025 GMT
Subject: CN=275A31FB44D0930B32EE7E283B04051DA2EE8C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:c8:4b:6f:2e:e4:a9:37:e0:4a:ab:7e:13:
5f:6f:22:87:fc:3b:03:77:11:09:d2:24:36:b8:b8:
ef:ae:40:ca:b1:72:42:fa:a9:fd:3e:f4:d8:74:d9:
93:a4:82:8c:ba:af:b7:44:a3:d0:68:03:ff:3a:12:
33:54:7e:f3:09:8e:98:be:55:d0:7b:dc:9b:74:58:
d6:8f:1f:c9:4e:8c:1c:80:a5:bf:a9:8f:6e:ed:67:
9e:5f:ea:65:fa:03:c1:d1:12:84:9c:81:1f:16:61:
a0:41:47:19:3c:55:77:33:e1:ce:0e:8d:d5:fd:db:
87:9f:33:a9:7f:da:d6:66:31:3c:ce:fd:28:30:a8:
50:11:a0:df:ec:ba:a7:60:21:9f:d9:a3:09:b2:e1:
26:1a:eb:5b:b3:eb:3e:48:64:39:ad:ef:72:8d:1f:
fc:dd:13:9a:33:fa:71:8d:c7:6c:f9:39:13:d3:a1:
67:5a:13:c2:95:67:69:1b:0d:54:e6:2c:30:7a:ef:
2c:55:b7:f2:60:63:41:0e:2b:82:f6:61:16:a2:05:
6b:bc:a1:30:44:ca:0e:49:14:32:1f:b0:4a:a2:0c:
8e:33:6e:59:aa:67:11:f5:c7:d3:b5:c2:e3:e8:79:
c3:c2:93:b9:09:c0:34:28:7a:7b:d0:52:f9:f8:30:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5A:31:FB:44:D0:93:0B:32:EE:7E:28:3B:04:05:1D:A2:EE:8C:91
X509v3 Authority Key Identifier:
keyid:B4:E7:A6:ED:B9:E7:28:7B:9A:C7:96:24:F5:73:F4:48:DB:88:01:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOem7bnnKHuax5Yk9XP0SNuIAV0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/9/B4E7A6EDB9E7287B9AC79624F573F448DB88015D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:24:5f:0d:f2:04:36:bb:b1:7e:bf:f9:1c:29:82:d3:0b:a1:
a1:1b:d1:ba:59:7d:82:8b:be:9d:42:f4:16:1d:64:66:77:3c:
59:78:91:4f:f0:4e:b7:d5:fd:16:db:c7:a5:80:fd:01:35:79:
90:69:c6:55:e0:63:31:ee:26:4a:c1:1b:bf:06:de:8a:71:1a:
e5:a1:de:50:60:6a:b0:07:42:93:d5:de:f4:00:e3:2f:f3:25:
b3:fa:61:f1:ef:94:2f:fd:44:05:48:3c:01:af:4b:43:fd:20:
a5:43:09:b9:96:67:60:dd:30:78:dd:d9:8d:b5:5b:a8:76:aa:
ee:77:54:b6:03:b6:52:ac:63:3b:c9:88:9a:42:0e:d1:5c:ed:
25:a4:8c:f8:11:3f:19:fe:06:92:69:90:98:bc:1e:bf:6c:c1:
db:98:bb:5c:87:d0:2c:73:52:a1:da:58:6e:a5:14:7f:49:56:
02:a6:29:91:c3:cd:8d:36:ff:c5:29:d0:b1:d3:de:df:5f:0f:
3b:0f:a8:59:64:72:34:2b:07:a5:e5:a3:23:8e:3a:21:94:19:
04:f4:72:58:37:61:1d:f4:1f:7b:18:8d:1a:26:68:f6:45:34:
ab:4f:21:96:bf:11:11:39:f4:f3:29:6d:87:15:ec:4a:db:fc:
41:e4:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 14:51:17 2025 by rpki-client