Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier: /1j/dU0IFHWholoYFImDwoxhkpfZXa5mLOac9uUK30o=
Subject key identifier: 09:8B:7C:56:E5:13:6D:F0:19:69:16:B3:E6:80:EB:EE:91:F7:CF:8D
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer: /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial: 18F2D1D24492621F32309BFFF64CBC609BEF903D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number: 0231
Signing time: Sat 01 Nov 2025 10:45:47 +0000
Manifest this update: Sat 01 Nov 2025 10:40:47 +0000
Manifest next update: Mon 03 Nov 2025 14:31:47 +0000
Files and hashes: 1: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)
2: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: za6RtY4crOFV97Wi4zwQ6XvG9mxr5zX3j9c2No4RupU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 01:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f2:d1:d2:44:92:62:1f:32:30:9b:ff:f6:4c:bc:60:9b:ef:90:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Validity
Not Before: Nov 1 10:40:47 2025 GMT
Not After : Nov 3 14:31:47 2025 GMT
Subject: CN=098B7C56E5136DF0196916B3E680EBEE91F7CF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:18:22:c6:df:29:b3:3a:75:8c:f8:49:99:
38:ce:bf:2f:da:85:57:1b:d2:e0:6b:d7:c0:e8:a1:
6c:d4:ca:eb:73:d1:6c:b4:ac:94:fb:e0:07:48:7a:
e5:23:d8:56:83:71:24:55:77:e1:d2:a8:9d:6a:dd:
9f:db:05:ab:35:c9:2b:59:ae:86:91:ae:c9:a3:dc:
7c:21:33:a6:71:2b:a1:5f:81:9f:8c:ad:83:ec:e5:
4f:37:67:62:c7:d9:cf:d1:a4:35:0f:34:d9:41:7c:
b4:30:00:c2:b8:6f:18:f9:94:0f:5c:6a:20:13:bc:
43:b8:e7:6a:a2:59:e1:33:5a:ef:83:ae:02:6f:bc:
48:15:9f:b3:7d:6c:11:44:94:dc:d1:50:df:10:4c:
b3:2c:55:9d:5a:95:39:f7:47:19:18:8a:8d:ac:67:
42:48:c7:7d:aa:d4:3b:52:b5:aa:5c:18:cb:e8:4a:
34:98:44:3f:ae:50:2b:f3:4a:77:16:28:17:84:a4:
c6:71:0d:12:d9:f3:12:fe:35:19:7f:03:bd:f3:b1:
7b:9d:df:70:24:d0:a2:05:df:8b:45:2d:b6:d8:4c:
f8:54:11:de:7d:7e:91:9b:7d:e2:bd:c5:aa:35:cc:
3f:bf:70:6d:b5:62:fc:35:01:ec:cf:d8:d1:1d:8e:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:7C:56:E5:13:6D:F0:19:69:16:B3:E6:80:EB:EE:91:F7:CF:8D
X509v3 Authority Key Identifier:
keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:88:88:4a:e3:b4:18:f1:42:dd:90:5f:2a:b0:99:59:34:2f:
10:bb:57:b7:50:59:36:58:a6:03:fe:3c:62:c8:3d:44:30:75:
b4:b6:bd:eb:ed:f9:0d:0f:b1:58:a5:88:2e:52:85:1e:d5:28:
a9:1c:4b:80:bb:2a:6a:8d:7a:44:9e:ba:2c:c9:4e:a6:a2:16:
fe:f1:24:fb:25:8a:1d:6e:25:6d:5d:67:37:fc:28:b0:1a:75:
02:44:af:23:52:f6:34:1d:73:f5:86:cb:16:a0:cf:24:6b:3f:
c1:8f:90:4f:c0:e6:73:18:3c:1a:7e:aa:be:3c:78:e9:67:84:
fd:53:a3:d3:e5:ec:b4:fa:79:cb:72:b4:8a:a9:17:b9:f7:56:
22:51:96:94:f5:44:41:da:2a:24:36:c1:28:b0:eb:28:c4:e2:
04:2d:4b:f8:35:55:6c:27:91:05:45:dd:8e:76:8b:11:36:56:
f0:b7:ef:9b:33:3a:23:3b:db:84:26:bd:39:5e:92:53:6b:14:
9a:08:05:ec:e7:f1:8f:90:f3:9b:7f:e3:2c:91:6a:8c:df:35:
6d:05:1c:90:bb:de:a5:61:1e:c1:23:03:f2:85:27:6a:88:55:
1c:fa:b1:cc:c9:f6:a9:83:9a:1e:aa:72:85:d5:ca:e9:cd:a3:
a8:2b:2a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 06:59:59 2025 by rpki-client