Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: eflTxWDtTtzv9NZocJ2yWXYQnq8kKRiW+G4bVPoANPM=
Subject key identifier: E2:2E:94:49:CB:11:6A:A6:C1:F4:E0:1B:00:98:77:A4:E2:9C:FE:61
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 5F60237DEB05D8B47643BACA96D12D32715C1E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0258
Signing time: Tue 01 Jul 2025 02:01:32 +0000
Manifest this update: Tue 01 Jul 2025 01:56:32 +0000
Manifest next update: Wed 02 Jul 2025 05:09:32 +0000
Files and hashes: 1: AS215828.asa (hash: uQ+YK669tBC5z5j2OQrbgc8CEpxaRIg0bOMT/R+U3ro=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: sa849/N+aOq2zZhov/8PqdJ4c5dyB3hRdR4H426PqlY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:60:23:7d:eb:05:d8:b4:76:43:ba:ca:96:d1:2d:32:71:5c:1e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Jul 1 01:56:32 2025 GMT
Not After : Jul 2 05:09:32 2025 GMT
Subject: CN=E22E9449CB116AA6C1F4E01B009877A4E29CFE61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:a5:65:c1:a2:3e:56:65:60:2a:80:f9:86:
91:60:c0:7f:21:bb:37:62:fa:b5:d7:8b:c3:46:9f:
f1:10:b3:98:4c:fe:ef:6b:c4:39:2a:12:b2:7b:9d:
36:fe:d2:e3:aa:09:16:23:08:9d:75:b5:01:7e:08:
ad:2e:3f:ce:84:f8:07:5b:54:7b:f6:a5:4a:d1:70:
35:e1:72:a7:91:43:7c:00:c8:37:3a:8f:26:e9:c8:
f2:4c:63:d1:e7:a0:ac:30:82:1d:9d:27:08:fd:3c:
c5:60:86:91:17:a4:35:8e:41:59:29:cc:5b:ff:a6:
28:53:5c:a7:ec:43:62:67:d3:bb:93:f5:11:2e:1a:
d2:ec:c2:f1:f6:4f:c6:b7:3c:d4:c0:6f:60:b8:3e:
94:e8:2f:cc:4a:d4:26:df:4c:42:f9:b7:2a:c9:ac:
85:2a:de:56:35:c6:12:c9:8c:44:c5:8c:ba:78:eb:
03:7b:c2:7b:ad:2a:fc:09:4f:bd:b5:29:2d:2d:6e:
e1:5c:66:99:73:1a:d4:7f:55:18:d1:ef:74:01:56:
d7:67:bc:ce:56:9e:78:0f:c3:de:27:cd:5b:f7:ab:
03:47:93:80:19:49:01:f4:9a:e6:73:52:2f:b4:a2:
b0:b6:00:83:b8:3d:6d:0c:8d:e8:b1:44:d7:2c:79:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:94:49:CB:11:6A:A6:C1:F4:E0:1B:00:98:77:A4:E2:9C:FE:61
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c4:87:42:c7:2e:a3:0b:de:f7:5f:ff:8e:be:99:b8:87:0d:
bd:c2:2d:ff:12:0f:be:83:37:99:1c:b1:6b:2e:35:1b:b1:11:
81:9f:65:4b:3a:7e:ec:13:53:60:a2:7d:b6:7e:99:83:94:84:
72:e5:e7:56:13:de:5e:1b:4d:14:68:d2:26:89:f1:a3:4e:8d:
91:0b:2a:bb:f0:bd:6d:da:84:b6:50:bb:90:cd:3f:0d:72:3d:
dd:eb:a0:bb:5e:53:80:f3:6e:df:53:0f:83:9b:45:08:c8:e7:
ea:9a:dc:93:dc:a2:2d:73:94:f8:b2:a1:61:ae:25:29:6d:91:
76:f4:83:cc:d9:df:a6:c3:6f:9a:d9:0b:4d:21:a5:cb:77:3e:
bf:aa:8a:83:1f:c4:27:76:55:50:94:e1:a0:c0:54:55:c9:ec:
1a:be:e5:c5:8b:e2:81:d8:b3:24:56:aa:99:e1:3f:8a:cf:7a:
66:3a:f3:87:fe:af:a6:7d:64:70:12:da:55:9f:9a:a7:ea:e2:
d7:c1:ab:39:8c:21:21:9d:18:d2:f2:d0:af:c8:d6:40:da:b6:
40:4c:50:29:5d:67:ff:6a:63:82:81:fa:67:d7:2c:08:cc:85:
4d:2b:cf:4c:17:09:7d:40:0b:46:13:60:0e:20:16:77:1c:20:
84:2c:2d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:19:42 2025 by rpki-client