Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier: ihs2JmbwHuTc03PVhCdL8pSCXQOwaWbSST4+mbkfvRo=
Subject key identifier: 57:D0:2F:A0:6B:6A:25:B7:5A:76:A5:F8:D5:D0:C8:F4:00:65:F8:18
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial: 1A287154D759C42E141811AFE24501F1DAAA33F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number: 4A
Signing time: Tue 11 Nov 2025 00:49:34 +0000
Manifest this update: Tue 11 Nov 2025 00:44:34 +0000
Manifest next update: Wed 12 Nov 2025 02:16:34 +0000
Files and hashes: 1: AS214757.asa (hash: jL3ZHZO2rDPBy7IkoORDXI20p2/dpY2J7HmBqd/Xf+4=)
2: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: OTJXjYT2aqn3Ey74FvfmRFrLGZnD/S1IrqNWIghRrmE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:28:71:54:d7:59:c4:2e:14:18:11:af:e2:45:01:f1:da:aa:33:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Validity
Not Before: Nov 11 00:44:34 2025 GMT
Not After : Nov 12 02:16:34 2025 GMT
Subject: CN=57D02FA06B6A25B75A76A5F8D5D0C8F40065F818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:ab:d9:24:33:cf:fe:ab:3e:6d:1f:35:c5:
d0:16:7e:40:10:be:13:3a:f8:d9:d1:41:21:fa:c8:
43:03:b1:4b:d3:0c:31:d0:be:60:a8:bf:bc:a6:93:
a3:a5:08:6c:10:93:37:81:55:17:f2:33:a3:20:d3:
b1:53:83:03:dd:2e:8b:b8:4a:22:37:ac:24:36:25:
27:af:54:0e:94:81:5d:b5:eb:6c:3b:ed:21:b4:94:
97:9d:33:d2:27:3c:91:0f:6d:79:50:9e:da:d3:84:
bf:3c:e1:92:33:00:3d:b3:a0:21:a0:17:e5:5c:a5:
92:2d:29:3e:59:18:8e:51:84:79:04:8d:59:30:b8:
2e:69:aa:8e:d8:07:ca:61:63:4c:a7:a0:7c:ca:12:
a6:0d:a5:d8:33:99:a6:0b:09:1d:08:04:14:e0:a3:
ec:8e:62:6f:d3:fa:8a:37:e1:73:4c:2e:69:64:06:
ac:c6:a7:fb:a0:2b:1d:61:37:1b:c8:ff:cf:25:25:
89:76:95:f8:1b:44:57:45:28:d4:55:3b:26:d6:4f:
3f:87:ed:ab:91:59:d0:42:8e:46:b9:8b:49:e1:c3:
4d:68:f7:9e:41:db:e3:b5:eb:26:71:b2:31:20:e5:
89:02:17:45:68:ea:69:87:55:e1:16:d2:94:35:bc:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:2F:A0:6B:6A:25:B7:5A:76:A5:F8:D5:D0:C8:F4:00:65:F8:18
X509v3 Authority Key Identifier:
keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:05:de:ca:a8:22:f1:bd:5e:46:d9:fc:dd:17:93:12:7e:66:
3a:b1:0e:f4:22:69:87:77:f6:08:44:74:f3:3a:de:83:a9:04:
c1:88:a0:2c:18:40:f6:2c:16:3d:41:ac:6f:cf:2d:44:0c:0c:
68:d9:ab:d6:3c:c7:a1:f3:66:9a:9c:11:66:75:59:57:1f:1e:
ce:fd:12:2c:f8:0b:2a:8d:56:e2:30:a3:07:18:15:0a:2b:a8:
6e:6b:d7:e3:ae:ad:8e:2c:78:05:f5:bb:97:e8:98:b6:8a:ed:
b8:c2:1b:62:50:54:ae:ac:92:cb:20:7f:67:43:6c:0a:aa:74:
f8:c0:a3:f7:bf:01:23:74:bc:ec:d0:28:c4:2f:83:2a:10:e6:
85:2b:bc:e0:f1:24:30:fd:a1:dc:9b:12:66:f2:3f:98:ee:52:
1f:d3:95:0d:98:f9:63:29:59:7e:99:43:9d:a1:55:de:f3:ae:
c9:9b:87:a9:a8:08:96:4b:13:a7:93:d9:a6:89:1f:bf:63:0f:
8b:f9:7e:b3:36:bf:80:3b:37:d6:d4:82:6a:d5:07:fb:88:ff:
bd:b8:1e:66:a5:35:92:07:50:bf:ab:1a:34:24:04:7b:a4:b7:
e9:61:91:cd:e3:8a:1d:cc:c8:3a:43:fd:1c:46:9e:cb:ad:2c:
77:f6:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:25:01 2025 by rpki-client