
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: YeOhojGdOc2Cvupn+EZdMTI/wp+pDAZ3Km38e1tCoHE=
Subject key identifier: 8E:39:A0:AA:89:BF:71:41:48:33:A2:00:E1:30:C6:95:FF:E6:BE:A2
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 28C5E3960AA410E354B0556735EF8561791C8267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 01E6
Signing time: Mon 15 Sep 2025 13:34:55 +0000
Manifest this update: Mon 15 Sep 2025 13:29:55 +0000
Manifest next update: Wed 17 Sep 2025 14:17:55 +0000
Files and hashes: 1: AS44355.asa (hash: Xqrm1wO+FssiB7AfsRuBPzY6P43VBGzRC2JyHRAKeh4=)
2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: vvJhV/9dE208LbfzUYBkO1gM3kEyHBYBFBnr5Dz1lAE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c5:e3:96:0a:a4:10:e3:54:b0:55:67:35:ef:85:61:79:1c:82:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Sep 15 13:29:55 2025 GMT
Not After : Sep 17 14:17:55 2025 GMT
Subject: CN=8E39A0AA89BF71414833A200E130C695FFE6BEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:03:06:ec:d5:21:ec:23:5a:69:7e:a4:5c:
bc:30:8b:d1:7d:f3:55:a7:8b:10:07:c4:1c:ee:fb:
19:a9:34:7e:7f:49:dd:99:b2:3e:2e:75:d6:b8:9f:
d6:2e:cd:54:78:84:55:62:d4:9f:b6:bc:72:b8:d7:
22:e9:94:1e:38:a3:7d:7a:1a:ee:ef:66:74:d6:9a:
10:d1:fe:7a:5f:d4:5c:06:d4:fc:41:c3:15:93:2c:
ed:d1:ea:ed:88:33:30:68:93:ce:22:3e:c6:07:a3:
52:74:d2:29:ab:fd:81:2d:5e:f4:59:92:50:b8:b6:
af:f8:b1:e4:f1:4c:ba:3e:27:a6:c9:4a:e5:2e:c1:
71:7e:f2:41:45:61:70:d3:38:b0:ce:23:2a:d0:87:
2b:37:b8:f3:f2:b6:4a:44:76:c7:34:f8:4e:87:70:
57:9b:09:6f:98:fb:5b:aa:fb:f3:a6:54:2e:e0:6b:
c3:79:48:a8:97:09:02:97:50:b6:8f:3f:73:78:0e:
5a:1e:d5:d7:8e:ed:d0:05:2b:2f:29:f2:c9:3f:51:
4e:24:a6:28:74:69:60:68:65:7e:f8:3a:46:2f:b6:
61:f8:1b:3f:d7:d1:fc:c3:52:d7:5c:2a:b7:6f:fd:
1b:22:9f:a6:16:51:39:54:7e:d5:c6:f8:cb:24:98:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:A0:AA:89:BF:71:41:48:33:A2:00:E1:30:C6:95:FF:E6:BE:A2
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f9:99:42:99:bf:48:f5:37:c9:a4:7f:51:6c:30:fc:58:c3:
d4:84:e4:6c:98:b2:78:a4:eb:d1:73:7f:5a:ce:f2:1c:8a:5c:
23:17:99:28:02:0a:3f:4e:2c:6e:2d:73:c6:b1:24:4e:51:f3:
ad:4f:8c:b3:da:5c:b3:01:a4:67:30:5d:ea:24:57:de:39:20:
19:37:a3:c3:5e:5d:9b:b3:b2:a8:10:a4:11:2a:72:ca:e2:80:
35:78:7b:9c:0c:8d:37:be:7b:ad:38:80:b0:ce:f5:3f:a8:10:
78:06:8c:4c:62:4e:9f:9b:8e:19:f7:0a:5a:b2:5c:ad:81:5f:
a8:df:12:bf:02:93:b9:cd:e0:28:e4:93:e3:51:ce:17:f2:21:
46:32:a8:b8:f2:19:2c:02:77:0d:54:42:a1:46:67:cd:a4:96:
ba:1b:fd:76:37:7e:c0:09:8f:41:38:af:9c:3b:1e:e9:ea:ad:
86:e5:3c:35:56:1a:c3:e6:9a:81:44:76:72:a3:50:e8:5b:68:
61:46:27:6c:21:ba:2d:9f:92:74:b7:35:39:ae:e1:04:c9:df:
7e:2f:5e:97:7f:c7:74:6a:3f:d3:a9:de:d3:2a:cd:cc:d3:89:
23:ee:3a:56:5c:fb:14:be:b9:c3:4d:8b:f4:6a:18:62:49:16:
4d:fc:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:46:47 2025 by rpki-client