Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
File: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft (raw, json)
Hash identifier: y6CRJ2TDr9unXT7fxJvcf4sZ84+haxNZzix2Ryap+UQ=
Subject key identifier: A7:1E:47:14:3E:8A:E0:16:E2:49:74:B0:76:3E:57:81:40:E3:8E:1C
Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
Certificate issuer: /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Certificate serial: 53FAC13C73E2FADC05389004F15170A708CFA0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
Manifest number: 21
Signing time: Fri 05 Sep 2025 02:26:46 +0000
Manifest this update: Fri 05 Sep 2025 02:21:46 +0000
Manifest next update: Sat 06 Sep 2025 04:56:46 +0000
Files and hashes: 1: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl (hash: 4c6tRnZcFBnxZsq5W7PKRm48H7i6yFNUlWR74pV+U78=)
2: AS213605.asa (hash: nB1VvqJdp3LTMxPZWJRw8GApNiisVibKM3k1IThtEvk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:fa:c1:3c:73:e2:fa:dc:05:38:90:04:f1:51:70:a7:08:cf:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Validity
Not Before: Sep 5 02:21:46 2025 GMT
Not After : Sep 6 04:56:46 2025 GMT
Subject: CN=A71E47143E8AE016E24974B0763E578140E38E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:23:42:f5:e0:b0:13:60:78:20:84:0a:b8:
be:c5:cb:18:2d:c7:ae:31:5d:2a:92:21:8e:27:1c:
cf:67:f6:8f:82:b3:c0:16:c5:28:32:dd:22:46:49:
a2:65:20:0f:cf:ed:38:08:d4:a9:8d:df:f6:8b:50:
f7:d2:1f:62:23:1e:31:fe:76:d6:ee:84:61:d7:87:
d0:57:cf:b4:54:2b:a9:d7:a9:73:f7:9c:04:e2:13:
d8:25:6e:5d:0f:1e:7d:33:44:00:bd:73:3b:95:59:
9c:9d:7a:68:7f:0f:83:32:28:d4:16:72:24:eb:61:
a8:cd:3b:e9:62:65:ea:45:00:50:0d:54:c5:a7:5b:
a1:19:88:7e:cf:be:89:3b:53:70:3b:18:25:b5:cf:
b2:e4:39:97:d4:df:f1:cb:28:44:4f:77:3a:c8:7b:
79:d0:4b:92:1b:ec:83:2e:b8:0d:fb:e7:97:41:30:
cb:76:e2:80:49:14:e3:f8:6f:5a:54:68:b7:d3:9f:
4e:b5:f7:84:27:3b:07:85:ff:2f:01:58:26:e3:79:
10:0f:6c:a4:3e:ac:3b:cb:8d:76:8a:ee:57:ba:4a:
b8:83:be:f8:80:22:d0:c8:5b:0c:45:d2:f9:39:f9:
78:69:a9:bc:82:b5:ac:09:c9:bb:48:5e:86:7a:64:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1E:47:14:3E:8A:E0:16:E2:49:74:B0:76:3E:57:81:40:E3:8E:1C
X509v3 Authority Key Identifier:
keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:29:e7:b1:e9:b2:58:84:b7:29:23:cf:7b:e6:b8:d0:ae:0c:
f0:b9:3b:97:13:fe:f5:50:ed:7f:fc:f4:28:7c:34:61:50:bc:
d2:c3:66:45:6b:82:f1:13:cc:bc:14:04:83:1f:0c:0f:9c:64:
59:b6:76:1b:0d:c3:25:41:9a:aa:3b:aa:42:69:c6:78:ed:09:
3e:0d:b3:bd:fa:4c:82:f3:07:b1:65:1d:c7:02:c9:34:2e:a0:
e4:00:ea:ab:b3:ea:ef:13:41:97:c5:90:3c:8e:7c:a1:41:3e:
e0:d7:5a:ab:2b:bd:24:f9:b0:e4:f5:8c:b7:97:a3:92:26:4f:
94:19:04:b8:55:00:23:12:04:d4:b7:c7:b6:2a:bb:29:fe:bb:
f5:ee:17:1c:5c:46:1f:98:47:4a:da:c8:e0:4d:4a:f0:7d:dd:
29:35:d2:7f:d3:b3:61:6e:80:25:e0:61:e6:da:29:31:a9:53:
94:50:9d:d0:e9:59:ad:f2:26:b0:13:c3:e6:78:e4:00:da:93:
42:e2:a6:ac:d4:3d:6e:56:ce:e2:6c:18:8d:fa:b0:66:e7:f9:
e3:5b:53:b5:be:29:13:22:c1:f7:0c:bf:4f:07:d4:e0:d7:4d:
9f:5c:14:a5:68:d9:79:46:78:c6:13:0e:a5:f2:c3:a2:e7:64:
ce:df:37:3e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUU/rBPHPi+twFOJAE8VFwpwjPoLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDJlYTYyODBmZjI3ZWExNGJjNzNhNmIyNjc5NTNjYTFl
NmY5ZjUwNzAeFw0yNTA5MDUwMjIxNDZaFw0yNTA5MDYwNDU2NDZaMDMxMTAvBgNV
BAMTKEE3MUU0NzE0M0U4QUUwMTZFMjQ5NzRCMDc2M0U1NzgxNDBFMzhFMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsySNC9eCwE2B4IIQKuL7Fyxgt
x64xXSqSIY4nHM9n9o+Cs8AWxSgy3SJGSaJlIA/P7TgI1KmN3/aLUPfSH2IjHjH+
dtbuhGHXh9BXz7RUK6nXqXP3nATiE9glbl0PHn0zRAC9czuVWZydemh/D4MyKNQW
ciTrYajNO+liZepFAFANVMWnW6EZiH7Pvok7U3A7GCW1z7LkOZfU3/HLKERPdzrI
e3nQS5Ib7IMuuA3755dBMMt24oBJFOP4b1pUaLfTn06194QnOweF/y8BWCbjeRAP
bKQ+rDvLjXaK7le6SriDvviAItDIWwxF0vk5+XhpqbyCtawJybtIXoZ6ZGdTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUpx5HFD6K4BbiSXSwdj5XgUDjjhwwHwYDVR0j
BBgwFoAU0upigP8n6hS8c6ayZ5U8oeb59QcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl
M2ZhLzAvRDJFQTYyODBGRjI3RUExNEJDNzNBNkIyNjc5NTNDQTFFNkY5RjUwNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB1cGlnUDhuNmhTOGM2YXlaNVU4b2Vi
NTlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1h
NWJlLTQ2NGMtYThiOS04YjdiMzc0YWUzZmEvMC9EMkVBNjI4MEZGMjdFQTE0QkM3
M0E2QjI2Nzk1M0NBMUU2RjlGNTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjynnsemyWIS3KSPPe+a4
0K4M8Lk7lxP+9VDtf/z0KHw0YVC80sNmRWuC8RPMvBQEgx8MD5xkWbZ2Gw3DJUGa
qjuqQmnGeO0JPg2zvfpMgvMHsWUdxwLJNC6g5ADqq7Pq7xNBl8WQPI58oUE+4Nda
qyu9JPmw5PWMt5ejkiZPlBkEuFUAIxIE1LfHtiq7Kf679e4XHFxGH5hHStrI4E1K
8H3dKTXSf9OzYW6AJeBh5topMalTlFCd0OlZrfImsBPD5njkANqTQuKmrNQ9blbO
4mwYjfqwZuf541tTtb4pEyLB9wy/TwfU4NdNn1wUpWjZeUZ4xhMOpfLDoudkzt83
Pg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:43:07 2025 by rpki-client