Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: T+2Icqsqe3h1yGETdImfwoAVjRh9ooK0XXzSYLJfhAU=
Subject key identifier: E3:A6:5B:74:94:D2:88:21:84:F6:5B:C8:EB:49:7D:56:9B:14:43:F5
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 459D8AD4C90448A7A8E3AD0455233400F83AD0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 016A
Signing time: Thu 31 Jul 2025 04:47:50 +0000
Manifest this update: Thu 31 Jul 2025 04:42:50 +0000
Manifest next update: Sat 02 Aug 2025 07:40:50 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: tiGsTjZkFNN9X7hl72FYWHhi0vs7Y2fqJRxe6GUAaEM=)
2: AS44355.asa (hash: Xqrm1wO+FssiB7AfsRuBPzY6P43VBGzRC2JyHRAKeh4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9d:8a:d4:c9:04:48:a7:a8:e3:ad:04:55:23:34:00:f8:3a:d0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Jul 31 04:42:50 2025 GMT
Not After : Aug 2 07:40:50 2025 GMT
Subject: CN=E3A65B7494D2882184F65BC8EB497D569B1443F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:63:dc:8f:85:39:b2:91:1e:5f:b4:6e:86:
4a:79:1c:7d:c6:df:52:42:38:ba:8c:c4:d9:78:da:
f1:ba:60:25:69:cd:f4:d2:d2:eb:4d:3a:79:fc:51:
5c:80:b4:46:f6:6d:dc:5e:eb:a4:a6:43:cb:05:14:
7b:34:ac:62:30:81:e0:9b:34:ed:1d:af:16:8b:72:
ae:55:ea:25:5d:9c:e6:8b:cb:00:f7:54:a4:78:89:
fe:8f:8d:40:58:34:75:32:d1:34:b3:cc:c7:0c:11:
2f:18:21:6b:88:db:ad:9c:84:17:ed:e9:05:6f:4d:
c8:02:2f:5f:8a:3c:e1:a6:1d:23:bc:f8:44:f5:09:
24:e4:5b:bc:a5:49:8e:c6:19:d5:7a:d3:1d:91:08:
8b:81:d3:ba:53:cc:1e:ff:a8:6c:f3:90:22:83:87:
bb:d9:77:3b:cb:a2:57:75:b4:4c:cf:a0:1a:af:7c:
4f:c3:68:2e:31:90:9c:51:7f:f6:d2:ac:65:e7:a2:
96:10:5b:d5:76:c3:c6:88:6f:34:2c:17:f3:97:2c:
bd:68:cf:16:33:9d:47:db:67:0c:bf:de:3f:1d:d2:
34:d1:1a:a4:37:cb:21:03:73:f0:6e:cf:d4:e4:f5:
37:70:60:da:06:55:e2:8f:14:7e:7a:5c:33:8e:2f:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:5B:74:94:D2:88:21:84:F6:5B:C8:EB:49:7D:56:9B:14:43:F5
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:a8:b7:ac:77:f2:82:4e:39:0e:13:2b:6c:03:61:d3:5d:
40:23:33:4b:a4:77:9e:ce:4f:6f:00:0c:a6:67:6b:56:0c:15:
f5:68:a0:5a:e0:6d:ef:04:6e:0e:dd:a5:cd:aa:66:e0:31:fb:
cc:73:62:62:ac:f8:9a:fb:fb:d5:02:d7:bd:c1:c4:6f:12:f0:
fc:90:c9:c4:75:c9:6f:5c:a6:ca:28:01:d7:c5:68:c5:0d:0f:
5a:95:77:e5:ae:80:f2:e4:94:33:d4:a0:f1:2b:0a:f7:00:63:
09:4e:34:7e:2d:b0:4f:cb:23:c0:cc:06:5d:1b:44:66:8a:37:
db:e9:60:37:19:82:8e:28:de:06:26:e9:aa:a1:56:2b:1e:0e:
da:c7:39:60:f6:be:a0:a8:7c:5c:fd:4c:98:dd:08:2d:ba:b4:
42:94:f0:e0:f4:39:47:83:51:31:5d:2c:a0:20:4a:15:6a:7f:
38:07:1d:ea:4a:15:e9:8c:ce:1f:d5:a6:33:26:d9:22:11:bc:
7f:28:45:63:c9:93:97:5b:29:cf:c2:3e:ee:38:12:6c:21:9d:
01:ae:5e:22:df:14:57:80:dd:8f:a6:08:d8:f1:90:7e:2d:d2:
f2:dd:dd:16:af:f0:9b:35:77:16:f9:58:dd:52:9c:8e:c3:8f:
15:93:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 18:29:38 2025 by rpki-client