Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier: I/cxeOsXZRaYu7M3MWUullo5p9gTnP91CIacLRzWXnI=
Subject key identifier: CD:6B:63:5F:69:5B:EB:D5:71:01:A8:F3:DE:F7:7C:D7:28:A1:CD:E7
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer: /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial: 0A8142E978BD8DF9576569EBB7D6E7741B454EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number: E7
Signing time: Tue 02 Sep 2025 17:22:07 +0000
Manifest this update: Tue 02 Sep 2025 17:17:07 +0000
Manifest next update: Wed 03 Sep 2025 19:05:07 +0000
Files and hashes: 1: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
2: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: mfXzhksUXYEqU2J9+mkGQuiXZQHMfga+zLS0QoTDBIs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Sep 2025 19:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:81:42:e9:78:bd:8d:f9:57:65:69:eb:b7:d6:e7:74:1b:45:4e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Validity
Not Before: Sep 2 17:17:07 2025 GMT
Not After : Sep 3 19:05:07 2025 GMT
Subject: CN=CD6B635F695BEBD57101A8F3DEF77CD728A1CDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:8a:d0:49:65:ae:75:93:8f:49:34:b9:cd:
08:ed:60:bc:6d:cf:53:b1:e8:0b:9d:16:ee:ca:2e:
28:f0:b7:90:9b:20:1f:8e:d7:81:c2:04:4c:b7:56:
84:81:7f:65:5c:d4:5e:1d:91:4e:be:f5:99:68:3c:
a9:bf:24:da:63:1d:4e:61:cd:8a:31:30:ab:aa:d7:
a3:89:47:81:8c:1b:34:6c:f0:7a:7b:43:47:59:dc:
0b:f3:34:6b:e5:1b:6a:9a:08:4b:18:e6:ee:5f:74:
95:8d:b0:6a:b2:ab:bb:0e:4b:16:d8:90:c7:a7:33:
95:52:f2:56:62:89:2d:6d:67:2a:10:7f:ef:f4:26:
f7:c9:ee:ab:dd:0b:0d:89:83:a3:08:a6:bf:2f:ba:
a4:65:d7:58:27:d6:84:f0:eb:21:69:f0:25:94:e0:
9f:4c:fa:c3:75:d9:7e:c7:d0:19:8e:0a:9e:fa:ba:
3e:a1:f9:2d:da:92:1b:fc:93:c2:86:23:ae:ac:2a:
8f:89:ef:f3:15:66:b9:74:2d:d1:36:5e:d7:82:e0:
72:23:94:b4:7e:63:95:dd:78:0d:44:a2:5b:b3:5a:
59:47:c2:53:15:42:b2:3d:9f:ff:4d:27:44:91:e2:
d9:05:d6:6d:e4:78:1a:0e:bd:c1:6d:c4:87:f2:01:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:63:5F:69:5B:EB:D5:71:01:A8:F3:DE:F7:7C:D7:28:A1:CD:E7
X509v3 Authority Key Identifier:
keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:97:a3:d4:e5:22:6d:b6:0f:1d:8b:84:a8:f1:91:af:07:e6:
da:05:6a:a1:c6:e2:89:0a:f0:73:71:bc:10:4b:7f:71:d2:90:
4d:fa:15:9a:e6:a6:62:15:5c:c4:b2:0d:a3:35:d1:6b:ae:b1:
d5:ed:f1:32:ca:25:9e:3b:d4:66:3b:82:e0:86:14:aa:2a:9c:
4b:c3:2d:76:e6:29:b2:fb:be:76:a9:81:68:32:67:c1:a8:69:
96:86:7e:ce:94:90:40:b6:79:20:fe:61:48:a2:16:bd:81:01:
65:1a:7b:0c:61:20:f1:d3:de:fc:e4:a9:a8:c2:7c:4f:d2:60:
4d:6c:5b:22:39:08:4a:62:3e:32:79:87:fe:d0:85:9c:38:e4:
33:74:65:39:dd:ee:66:7f:ba:b1:49:c2:d3:24:b8:e6:c3:c3:
68:63:68:fb:08:fb:45:d5:d5:f8:48:67:0e:96:7d:23:c8:84:
b9:39:9e:7d:c4:af:0c:51:d3:be:f7:c4:64:3a:f4:ce:c6:8d:
d8:08:55:1d:e9:80:f5:da:a1:4a:fe:9c:8f:2a:a9:95:1d:26:
5c:0f:cf:b7:f5:50:8b:99:3b:d5:e6:ab:f2:d1:cc:4c:f8:30:
90:8e:a6:bf:61:4e:37:65:be:d0:4d:ea:94:35:5c:07:af:f2:
97:d5:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 05:57:30 2025 by rpki-client