
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: igXv4kT0JIzH4/HfmoK/RGDEXa+e7BdQ4h6/rPcBJ8I=
Subject key identifier: 74:19:31:E5:69:0E:B2:4C:40:36:46:17:E3:71:4A:03:7C:74:BB:8C
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 26A6D2E95E38FF3D8A5EC7262D28A53E157DBB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 72
Signing time: Fri 17 Oct 2025 07:58:09 +0000
Manifest this update: Fri 17 Oct 2025 07:53:09 +0000
Manifest next update: Sat 18 Oct 2025 10:54:09 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: ubnezMmIJq6BiRDiZwUEtsCq6/5ni4dj6mXJ0whjgog=)
2: AS211575.asa (hash: nPJ1LprS9/u9GgaDNqu2HsXaB9B+xrAoBi5odzSyQpQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 10:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a6:d2:e9:5e:38:ff:3d:8a:5e:c7:26:2d:28:a5:3e:15:7d:bb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Oct 17 07:53:09 2025 GMT
Not After : Oct 18 10:54:09 2025 GMT
Subject: CN=741931E5690EB24C40364617E3714A037C74BB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:6f:ec:03:5d:aa:fc:4e:48:86:c1:bb:9d:
1f:e3:a2:0a:ef:60:6f:b6:fd:86:c9:b4:ff:82:e6:
2e:55:51:95:a4:d1:74:93:d1:00:10:4e:14:50:77:
38:2a:f7:01:01:50:3c:04:75:1a:08:2f:94:eb:cb:
53:33:ff:91:75:9a:3e:df:ec:f9:4c:48:2a:06:1a:
b9:3a:e7:e9:05:e2:c3:be:cb:1c:f7:25:85:2f:71:
8c:53:05:74:54:87:2e:f5:9f:a5:99:c5:92:2d:d5:
06:4f:f8:35:88:d8:8f:85:88:49:3c:ee:5c:13:c5:
5d:6b:98:cf:b2:ad:d4:68:d4:2d:96:91:6e:6e:5d:
5f:f7:35:d5:2d:c8:98:ab:90:d1:da:9a:5b:a7:a8:
cb:96:41:9b:bf:09:a6:58:62:65:9b:3f:6c:7b:ae:
0a:8f:bd:d0:2f:45:b4:ec:51:21:47:81:7d:2a:bb:
90:0d:c6:23:e4:c7:2d:79:90:98:5d:ed:45:c5:97:
22:32:31:a6:1d:a1:ad:f3:15:e3:6f:d4:ae:6e:a9:
a0:2e:05:c7:2f:ab:8e:cc:a2:54:14:ea:b4:60:31:
b6:39:3b:8e:63:ee:28:76:2d:cb:f7:e2:be:c2:46:
57:3d:68:e2:7f:3d:56:3b:46:58:41:18:b6:86:8f:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:19:31:E5:69:0E:B2:4C:40:36:46:17:E3:71:4A:03:7C:74:BB:8C
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:da:32:7f:a1:22:09:3e:76:38:51:b9:ed:f7:6d:1b:4a:d7:
f0:fc:8a:e4:40:b9:c9:99:db:8f:12:67:5c:03:c5:26:a5:13:
e2:28:09:86:3a:a3:f8:eb:51:f6:48:0e:47:0f:c6:b8:af:50:
8a:93:d3:f6:5e:ca:2e:e3:25:23:5b:b5:33:8b:5e:ae:47:05:
87:0e:0c:7e:c2:91:5a:b6:bd:64:1e:5d:31:2a:29:16:44:a8:
03:67:f2:6c:e7:67:ea:e8:aa:51:03:86:3f:97:51:6f:d7:fd:
88:4e:87:d2:25:b3:7e:79:10:28:3f:f7:0e:73:c9:f9:7d:9b:
5a:47:09:31:3f:4e:19:12:4f:fb:9a:0d:90:9a:97:08:54:62:
de:71:b3:07:6e:41:ea:e9:81:7f:5b:f9:71:bf:79:9b:5b:ea:
a0:cd:b7:6c:2f:72:b8:be:1c:be:af:ed:e1:77:cd:a7:57:e0:
f1:a4:10:ed:53:6e:8e:9c:da:8a:07:df:67:8d:4d:53:40:7c:
74:e1:c5:04:90:d9:7c:9d:68:83:33:57:e1:fa:e7:08:f3:7a:
67:f6:1a:ea:87:82:17:25:bc:e6:b2:74:95:83:7f:2e:24:92:
93:5c:29:44:5b:ac:94:65:85:5b:19:af:0b:36:12:07:10:3f:
c7:c8:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:31:20 2025 by rpki-client