Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: 1yaV/4f47TAbOX0nCEuM24HcKgbuKe3Ry7VcjZaqfXg=
Subject key identifier: A1:7E:AB:55:CF:C1:E4:79:51:14:13:1E:70:55:49:08:39:57:57:15
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 169C73F436414AC567A25D7D1521EB8C8C7D9C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0298
Signing time: Wed 20 Aug 2025 19:22:40 +0000
Manifest this update: Wed 20 Aug 2025 19:17:40 +0000
Manifest next update: Thu 21 Aug 2025 20:00:40 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: pE+WBz6qbGUXuHWOd2bvwxdwidsI5MukAGWdLHZMgC4=)
2: AS215828.asa (hash: jurRDln6QuNpc6IoJAhmodpiRmmi0pbj8mD4CWgxSRA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9c:73:f4:36:41:4a:c5:67:a2:5d:7d:15:21:eb:8c:8c:7d:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Aug 20 19:17:40 2025 GMT
Not After : Aug 21 20:00:40 2025 GMT
Subject: CN=A17EAB55CFC1E4795114131E7055490839575715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:a2:77:db:64:ce:03:2d:36:b4:94:2f:0f:
b3:0d:a7:09:a7:35:57:fb:9d:16:74:74:68:bb:0e:
73:97:49:fc:b6:f4:dd:67:1e:2b:5d:59:97:f3:8a:
68:37:73:cc:e6:9f:99:74:90:27:81:15:df:58:d3:
22:c6:60:7d:29:86:43:6d:ca:2f:98:da:90:3b:c9:
04:97:87:3f:70:80:38:5e:01:67:fe:fc:cc:88:ac:
77:88:79:29:44:77:83:a4:21:9e:56:84:64:88:de:
4a:44:89:68:0e:4c:04:10:e5:ac:18:c5:9d:40:5b:
28:0c:7b:bd:52:87:d0:32:25:d4:cd:71:0a:53:f7:
24:11:c6:6a:eb:03:f7:2c:16:2e:6f:2e:e2:31:c6:
2a:64:31:ab:e3:d3:8f:b6:4e:a1:a3:80:e1:18:f6:
74:e7:1c:1b:59:2b:80:23:2c:40:a2:5d:33:87:5a:
a3:24:2a:d7:24:ea:af:ed:d8:65:50:ce:28:02:de:
7b:a4:e2:5c:c3:c9:de:a8:21:7e:6d:19:3a:1b:26:
ca:7b:a2:72:ff:73:57:aa:c7:c4:90:49:31:0e:95:
0c:1d:7d:f5:c4:10:0a:83:ad:24:ff:b8:bc:d1:cd:
93:14:09:67:32:1e:6a:89:c1:8f:b9:45:d9:7a:14:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:AB:55:CF:C1:E4:79:51:14:13:1E:70:55:49:08:39:57:57:15
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6f:6e:cc:75:3f:f6:f3:ff:9d:3d:4b:b2:97:d9:41:fb:50:
cd:2f:86:24:e1:93:ff:fc:af:95:ff:7f:5e:fa:75:d1:cf:f0:
51:f8:bd:b4:59:12:28:ae:ea:98:b6:49:45:18:b9:85:02:e8:
86:b3:46:4e:e8:eb:d0:3c:f6:3f:da:f7:43:58:f7:f8:b2:8d:
21:bb:44:9e:8a:1d:61:e3:22:24:10:e0:68:ba:59:5c:da:0a:
62:a2:7e:41:89:ed:08:5a:a0:26:3a:56:6c:ea:75:61:3f:87:
34:1a:da:9e:27:ff:47:6e:85:32:1e:5a:35:31:6a:9c:4e:4a:
6d:19:f9:cb:28:4f:91:c1:ea:da:69:92:5b:ed:78:68:10:48:
eb:3f:67:9e:19:17:da:7f:5b:ea:72:de:2c:cc:14:74:bb:8a:
f9:9d:95:e9:9c:34:56:c0:74:9a:40:f2:07:a6:a6:3d:ae:7a:
0c:dd:8f:3d:97:5c:78:58:08:c4:7d:09:3b:a3:38:00:cb:26:
31:95:96:28:85:f7:34:9c:33:4c:fb:eb:bd:a8:63:2e:a0:63:
d8:d7:cf:e1:9b:4a:27:08:bc:a8:5f:1d:8e:e7:a8:6a:7f:f6:
43:4f:0f:e8:9e:94:a7:9c:cd:1d:29:b2:7c:9a:a6:41:56:79:
b9:33:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:56:40 2025 by rpki-client