Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: 1bB6hFbZ03FmOgKI9e6WldnQOm42AcA/qQOESPWcu/Y=
Subject key identifier: FD:48:2D:EB:12:C0:EF:CE:31:01:31:96:5F:42:91:B7:53:5A:9B:1D
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 6F2CF7B173AE5FED409D9103CBA7C6F3165E22CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 0242
Signing time: Mon 10 Nov 2025 22:47:16 +0000
Manifest this update: Mon 10 Nov 2025 22:42:16 +0000
Manifest next update: Wed 12 Nov 2025 23:07:16 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: KYCv/skVC/wh+kDolPTgUjwFu7oBNOCQ9iaAeufCD2Y=)
2: AS44355.asa (hash: noT3NQk7rtD6jNk1GY90L8a80oYtiLLuAlQV7OyslJk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2c:f7:b1:73:ae:5f:ed:40:9d:91:03:cb:a7:c6:f3:16:5e:22:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Nov 10 22:42:16 2025 GMT
Not After : Nov 12 23:07:16 2025 GMT
Subject: CN=FD482DEB12C0EFCE310131965F4291B7535A9B1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:4d:66:74:fd:13:07:83:b0:28:2f:f0:bc:
60:05:90:77:6a:38:28:ac:4d:2e:13:b0:0d:fb:ad:
f2:f6:40:7d:31:c4:a6:41:2f:f8:80:55:10:aa:34:
77:bf:53:83:83:c2:05:f0:c9:e4:dd:11:e1:26:fd:
28:0a:ef:ab:e1:fc:04:2a:e4:df:87:93:a0:bb:49:
5c:93:34:5c:0e:46:ea:82:1c:b8:06:1a:84:ec:ef:
d9:c4:54:15:f6:10:2b:b4:dc:d3:16:ef:c7:01:1b:
de:8a:8c:6e:a2:16:cb:4e:5a:68:72:99:f2:e2:5d:
b3:06:48:bf:6d:43:cd:6c:2b:ef:de:a4:cf:ee:3b:
82:23:8f:68:c0:dd:23:41:59:6c:95:63:75:87:a1:
94:76:9b:70:f1:da:74:93:f3:6f:48:ab:bf:81:fb:
d6:e9:ca:a6:6a:ed:16:6d:53:48:ab:03:fd:a4:a5:
87:9c:7e:7a:66:a1:fd:fd:5f:69:a8:3c:38:53:83:
c8:92:b0:3c:e1:8e:98:71:16:3a:be:5c:9f:23:b4:
d0:64:ce:0e:fa:6b:0d:70:9c:fb:39:d9:49:ee:6f:
71:d6:33:f9:62:05:23:95:f0:ef:cc:e6:1c:3e:dc:
5a:65:d5:23:e5:bb:b5:e9:ff:12:e4:3f:8b:0f:47:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:2D:EB:12:C0:EF:CE:31:01:31:96:5F:42:91:B7:53:5A:9B:1D
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c5:4c:e2:5d:d4:a0:2d:8a:5b:eb:92:91:c6:85:5d:f4:4e:
c6:db:7c:f9:15:36:73:84:84:4d:02:16:b8:26:eb:c1:7c:1a:
65:0a:df:36:d5:99:8d:ed:80:da:24:a4:7d:7a:59:1e:e1:57:
83:c1:2a:4c:d1:bc:1b:9f:91:eb:5a:62:77:4f:16:65:8e:8a:
bd:cc:50:c4:b7:6f:12:14:d3:65:bd:a8:ed:95:d3:02:09:9c:
62:77:de:1c:c5:6e:c2:c5:67:f0:ab:69:85:39:1e:5f:79:46:
42:45:fc:d1:4e:68:1d:1d:02:00:e4:e8:54:f3:f4:21:76:4d:
0f:5f:16:2c:92:5f:70:30:17:93:bf:94:ef:5f:82:e5:89:84:
88:e7:82:8c:e7:56:bc:90:9d:81:05:8f:3b:d2:4a:40:f4:07:
37:9c:98:77:87:5c:45:58:0b:7c:2c:b2:04:f8:44:7f:eb:3d:
9c:1b:27:b5:d5:aa:3e:cd:d7:a2:fd:be:4e:e7:3b:ae:88:5d:
fa:de:4a:42:94:91:68:de:20:7a:fa:12:98:8d:2e:ec:2b:c5:
42:df:0c:e7:ab:8e:f4:9b:5d:e4:7b:dd:03:09:27:c4:bf:0e:
23:7a:3d:05:ff:36:57:07:4c:f2:35:ec:93:78:c5:78:8d:d2:
45:02:75:82
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbyz3sXOuX+1AnZEDy6fG8xZeIs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWRmZmQ0Nzc4NTdkMWU5YmU5NWI4MjcxN2E0MjdmMzVh
ZmE5YTdkNjAeFw0yNTExMTAyMjQyMTZaFw0yNTExMTIyMzA3MTZaMDMxMTAvBgNV
BAMTKEZENDgyREVCMTJDMEVGQ0UzMTAxMzE5NjVGNDI5MUI3NTM1QTlCMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOk1mdP0TB4OwKC/wvGAFkHdq
OCisTS4TsA37rfL2QH0xxKZBL/iAVRCqNHe/U4ODwgXwyeTdEeEm/SgK76vh/AQq
5N+Hk6C7SVyTNFwORuqCHLgGGoTs79nEVBX2ECu03NMW78cBG96KjG6iFstOWmhy
mfLiXbMGSL9tQ81sK+/epM/uO4Ijj2jA3SNBWWyVY3WHoZR2m3Dx2nST829Iq7+B
+9bpyqZq7RZtU0irA/2kpYecfnpmof39X2moPDhTg8iSsDzhjphxFjq+XJ8jtNBk
zg76aw1wnPs52Unub3HWM/liBSOV8O/M5hw+3Fpl1SPlu7Xp/xLkP4sPR8BZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/Ugt6xLA784xATGWX0KRt1Namx0wHwYDVR0j
BBgwFoAUrf/Ud4V9HpvpW4JxekJ/Na+pp9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzIvQURGRkQ0Nzc4NTdEMUU5QkU5NUI4MjcxN0E0MjdGMzVBRkE5QTdENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JmX1VkNFY5SHB2cFc0Snhla0pfTmEt
cHA5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x
OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMi9BREZGRDQ3Nzg1N0QxRTlCRTk1
QjgyNzE3QTQyN0YzNUFGQTlBN0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8VM4l3UoC2KW+uSkcaF
XfROxtt8+RU2c4SETQIWuCbrwXwaZQrfNtWZje2A2iSkfXpZHuFXg8EqTNG8G5+R
61pid08WZY6KvcxQxLdvEhTTZb2o7ZXTAgmcYnfeHMVuwsVn8KtphTkeX3lGQkX8
0U5oHR0CAOToVPP0IXZND18WLJJfcDAXk7+U71+C5YmEiOeCjOdWvJCdgQWPO9JK
QPQHN5yYd4dcRVgLfCyyBPhEf+s9nBsntdWqPs3Xov2+Tuc7rohd+t5KQpSRaN4g
evoSmI0u7CvFQt8M56uO9Jtd5HvdAwknxL8OI3o9Bf82VwdM8jXsk3jFeI3SRQJ1
gg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:28 2025 by rpki-client