Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: rXPrlAlJXj4W8TVQZZoaNVAioPV7g1h1EXPt/VavHHQ=
Subject key identifier: 53:7D:99:24:61:C1:FD:1C:36:67:52:28:F5:0C:A3:B5:93:6A:F6:FC
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 0520F383AF967A19B3465A509F580DB5C700E9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 2D
Signing time: Sun 31 Aug 2025 02:28:57 +0000
Manifest this update: Sun 31 Aug 2025 02:23:57 +0000
Manifest next update: Mon 01 Sep 2025 05:52:57 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: ge3YyisDqERE5lVT7zUHtFnwXGtlBJJ9DUpOJUnjxm8=)
2: AS211575.asa (hash: CGXB/lWUv/3ldNLhyv9C3Fi4+ChYG3HvGuuCwAM2wt4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Sep 2025 05:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:20:f3:83:af:96:7a:19:b3:46:5a:50:9f:58:0d:b5:c7:00:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Aug 31 02:23:57 2025 GMT
Not After : Sep 1 05:52:57 2025 GMT
Subject: CN=537D992461C1FD1C36675228F50CA3B5936AF6FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:04:f8:5b:47:11:39:c6:fc:e8:79:58:51:
d7:a8:32:e9:57:bd:71:d0:9b:4c:3b:ae:a9:af:dd:
76:57:cc:af:8f:87:ad:25:c9:d3:1b:f4:02:33:26:
ba:50:c3:11:70:9f:49:f8:a5:e2:5f:cd:1c:84:51:
8a:98:e2:24:28:91:4f:7a:99:b3:50:a2:b9:17:b4:
7d:45:2b:7c:0e:ee:da:e7:f9:b9:eb:b1:6a:67:6a:
bd:0b:e3:fe:3d:76:0d:a2:67:e3:ab:70:82:7e:c4:
8c:c7:d1:27:9c:36:09:05:4a:15:6a:d2:74:79:2a:
53:29:24:79:a6:7f:b2:d8:cc:3b:70:a2:81:9f:d8:
f7:13:36:2b:b0:4c:00:c6:93:c8:5e:21:8d:a8:63:
af:4e:cd:d4:e8:1d:24:03:95:48:54:72:70:cc:48:
c5:e5:6c:c6:1c:ae:31:0e:00:bf:21:1b:73:e6:3c:
64:4c:bd:e1:c2:03:0c:9b:61:b1:1f:4a:af:f9:f9:
94:b9:ed:7b:2e:83:f9:ed:a3:56:40:5e:f2:de:88:
2f:9e:ab:07:b0:5e:19:5f:5c:bb:cb:06:dc:aa:34:
4d:cc:24:d1:36:42:6e:46:58:c8:64:75:fe:05:75:
07:de:ba:c9:23:92:25:fd:dd:ab:63:f6:7e:16:0b:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:99:24:61:C1:FD:1C:36:67:52:28:F5:0C:A3:B5:93:6A:F6:FC
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:12:51:5d:b1:3a:14:57:74:83:ce:88:65:8c:69:17:50:41:
80:88:6e:00:44:80:79:6b:d3:ea:ac:d7:82:6d:15:6c:fa:79:
19:83:dc:e1:17:3d:b9:69:0c:3e:c3:75:d2:a8:d0:f2:f1:d9:
de:da:88:75:89:d7:57:21:2b:7a:91:63:af:32:f3:aa:29:5e:
52:81:32:ea:47:15:74:0d:e9:24:29:a4:41:08:dc:30:c8:44:
1c:99:a3:85:e9:4c:cb:e0:1a:63:33:6b:91:27:69:22:7f:4a:
7b:06:5b:0e:44:5c:25:47:82:2e:dc:d2:68:3b:ad:03:5b:34:
e6:c0:db:c8:9c:8f:0c:48:81:4f:bf:60:76:38:37:39:7a:47:
41:08:ac:7b:40:8c:d7:4d:aa:cd:49:c3:41:cf:2a:d2:bc:d3:
d3:38:34:61:e0:8d:ff:e9:96:28:38:34:71:dc:1d:f2:82:bd:
79:c9:fe:f5:b7:59:18:49:c5:2c:99:60:18:4d:a1:96:c4:d4:
85:84:7f:c1:5e:4c:93:9a:d9:f6:b8:55:c7:a0:66:0a:69:7e:
3b:10:af:42:9c:a7:e5:a0:77:67:23:0d:14:10:8f:d0:85:65:
c0:3f:24:ae:a7:b5:94:f5:d0:79:05:ef:52:bf:63:01:f6:c5:
53:70:0f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 17:09:51 2025 by rpki-client