Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
File: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft (raw, json)
Hash identifier: eFnaVo5ruDH8g7dhITt87OU1it1VNLvcwVFtgA14y1k=
Subject key identifier: D8:CD:54:BB:37:C9:5C:73:12:99:F1:A1:26:51:F9:F8:D8:1C:5E:A6
Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
Certificate issuer: /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Certificate serial: 465687E46EFA2016034862CC042213ED3714FD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
Manifest number: 6C
Signing time: Tue 28 Oct 2025 19:36:47 +0000
Manifest this update: Tue 28 Oct 2025 19:31:47 +0000
Manifest next update: Wed 29 Oct 2025 21:54:47 +0000
Files and hashes: 1: AS213605.asa (hash: I3Z4blf/4PqskT2+0zpqCX/QLx8+W39EW2amMQefWD8=)
2: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl (hash: tKGzljvxkk2/oBuaKrN56indj9oBeinaG2ej4HUQOZM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:56:87:e4:6e:fa:20:16:03:48:62:cc:04:22:13:ed:37:14:fd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Validity
Not Before: Oct 28 19:31:47 2025 GMT
Not After : Oct 29 21:54:47 2025 GMT
Subject: CN=D8CD54BB37C95C731299F1A12651F9F8D81C5EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:a9:db:41:7a:93:94:62:45:04:c6:25:93:
03:1c:45:35:58:6f:26:b5:81:d0:d2:ce:bf:fd:04:
2d:65:0f:49:0c:79:18:3a:0e:28:20:a2:2c:1e:6f:
04:11:4b:78:ff:74:c4:58:dd:c1:fb:5f:91:63:5e:
0b:0f:8c:de:2d:e5:52:ea:d5:66:29:36:d6:12:92:
17:77:10:d9:50:cf:bc:fc:44:13:7b:40:ff:bf:a8:
44:82:87:b4:eb:3b:6d:f3:f4:4e:a6:57:85:51:3a:
e2:59:f7:67:cf:0e:9a:32:6f:8a:ae:4d:14:03:2d:
5e:b2:4c:8e:a2:74:1e:2b:a0:5e:a0:ef:5d:12:ad:
99:c7:ac:31:26:2f:4f:5a:e7:9f:ef:23:c5:63:bd:
f3:56:17:d4:9f:bc:1f:14:e7:3f:e7:4f:59:cd:01:
aa:3e:7a:8d:09:2e:87:59:87:06:ba:8c:ee:90:ec:
45:89:86:b8:e4:9d:bf:6c:53:a8:84:48:ff:41:95:
43:e6:d4:b4:7c:e9:b8:0b:ae:af:6c:7a:db:aa:ce:
7b:b8:9e:5a:4d:53:52:52:ae:0d:b9:07:d4:56:1c:
8b:64:e2:9f:b5:4f:00:bd:01:1f:2c:0f:9c:d8:53:
4e:74:c9:c5:00:a5:57:3a:de:25:ac:59:7d:a5:e4:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CD:54:BB:37:C9:5C:73:12:99:F1:A1:26:51:F9:F8:D8:1C:5E:A6
X509v3 Authority Key Identifier:
keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ca:d2:c0:81:a4:8b:cb:28:9d:98:ee:03:dd:8c:b9:d9:e2:
92:39:e5:fa:e5:c6:98:72:8a:43:24:12:34:35:4a:b6:9e:df:
8f:67:cf:95:4e:f0:0d:e1:9c:ee:6f:e8:de:bf:17:d3:ad:bd:
6a:ff:6d:da:d2:5f:ec:76:d7:e6:f1:86:e8:1e:45:9a:b7:d2:
98:b9:ad:61:63:18:59:06:6d:88:b2:e0:43:7d:55:51:10:7b:
7e:9c:cc:87:09:47:6e:c4:de:16:21:e7:25:05:b4:31:b3:b8:
84:3c:40:6c:2e:db:7a:bb:b1:49:d4:27:a6:bb:d2:7b:c9:83:
53:a2:ac:8d:9d:3a:ad:63:61:bb:bf:aa:27:21:65:1d:0e:5b:
f5:34:ad:20:9b:e9:9c:6d:f7:57:af:55:32:44:84:5f:7a:d2:
7c:09:5e:bf:43:36:fc:a6:d9:2a:93:9f:42:e7:42:ac:0b:f4:
de:56:4d:36:ba:7a:5b:2d:3d:fd:c7:03:2e:e1:2d:03:82:5b:
a0:f6:e2:7e:04:67:55:09:27:e3:65:05:22:92:bc:e8:d8:11:
70:52:39:dc:54:42:9b:c5:72:6e:e4:05:c7:90:46:f0:4b:25:
cf:ad:e7:be:15:9d:1c:23:70:f7:1a:6b:a9:b8:f1:0b:66:a1:
2d:7f:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:04:58 2025 by rpki-client