Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: 2x/sWhaLEoxJH2ZJh8UT0K5kwvD5qoNw7D3akptbuDg=
Subject key identifier: 3A:02:D2:F5:CB:58:C4:89:4C:C1:60:89:64:5C:0B:B4:FE:32:97:49
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 1C7F8CFB5879E9CBBDA7C7000883A002D92479EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 02F7
Signing time: Thu 30 Oct 2025 10:33:55 +0000
Manifest this update: Thu 30 Oct 2025 10:28:55 +0000
Manifest next update: Fri 31 Oct 2025 10:51:55 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: aLqe366P2H1Yh2Co8VorgdEFnEi0OS2HjqYqUGuA+RY=)
2: AS215828.asa (hash: tAJdKMshiW8Rs4zyrkZEfNW8JfDNYqzPILXGNkubO7o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 10:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7f:8c:fb:58:79:e9:cb:bd:a7:c7:00:08:83:a0:02:d9:24:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Oct 30 10:28:55 2025 GMT
Not After : Oct 31 10:51:55 2025 GMT
Subject: CN=3A02D2F5CB58C4894CC16089645C0BB4FE329749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:51:af:0b:b1:eb:f2:b3:4a:8f:fe:5c:e6:
4b:16:09:d0:a1:63:1e:1c:06:82:91:7c:61:4b:e7:
ba:16:df:30:ab:ef:0f:61:a4:02:01:f7:ab:f0:82:
d8:59:b2:11:50:e7:2d:fe:cc:49:e2:b3:78:08:13:
1e:05:bb:a1:2b:89:94:be:39:8c:22:fd:b9:f4:a0:
0c:49:7e:f6:9a:c0:54:02:d8:0d:6a:76:5e:66:4f:
53:3a:1c:f1:b6:2c:71:fe:9f:bf:bc:ca:96:c3:f3:
3b:f0:e8:2a:35:ba:85:9a:d4:06:6d:be:10:06:e2:
61:1a:2c:60:cf:73:f6:c6:8c:7b:d9:66:59:af:83:
93:a1:e8:32:12:6c:1c:5d:f6:e0:d7:2f:ff:c6:7e:
77:fb:62:46:5d:79:82:db:09:29:b3:dc:36:b1:a9:
e5:66:2e:5d:56:7d:db:1d:cb:e3:2f:07:3c:32:d9:
00:21:de:d5:1e:57:61:52:3d:bc:c4:ba:3c:06:cd:
7c:72:1b:9d:6b:a2:65:a8:19:e2:35:ff:57:ed:6f:
14:e8:ff:c5:b5:c0:ef:dc:5f:2c:28:7c:08:a4:25:
f6:db:51:62:71:cb:3a:43:85:6e:3f:80:11:96:0f:
8b:d2:9f:e2:5d:b4:c3:fe:a7:f0:22:5d:fe:e5:9f:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:02:D2:F5:CB:58:C4:89:4C:C1:60:89:64:5C:0B:B4:FE:32:97:49
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:69:b7:d4:12:4d:32:8e:a6:5d:ae:c3:59:57:8a:c8:26:
9f:77:5e:c5:4e:02:d4:59:ec:ce:3a:d5:a6:c3:f9:9d:53:d0:
ca:b6:ed:75:78:d1:b9:56:4f:26:aa:d9:30:2c:56:1c:3d:65:
58:d6:d1:9d:45:7b:ea:26:43:ec:90:9f:1b:fa:c9:38:ae:6d:
47:8d:5b:64:0f:a3:98:64:36:41:8b:0c:f7:33:e2:0d:46:4f:
e0:ac:58:89:68:cc:a1:42:49:67:be:31:e3:24:cc:57:bc:e5:
9f:8f:69:5f:d5:00:1b:73:f5:79:5c:3f:d1:b7:95:a0:71:60:
29:71:16:cb:8a:34:11:4e:c4:c7:b9:d4:74:0e:d3:d5:c3:db:
0f:d9:af:26:d7:37:26:98:d0:4f:7a:93:6f:18:b4:5d:9a:5e:
4c:1c:94:a9:eb:8f:57:c6:7a:1c:08:ce:80:12:f2:99:e6:fe:
fb:ab:56:13:ea:11:4f:34:41:b5:b9:f8:3b:41:58:c9:99:6d:
ac:8d:5e:48:a8:66:df:01:f2:05:63:b8:fe:9e:e5:55:9d:a9:
d8:9b:a5:59:84:98:8f:23:12:3d:a0:d0:a4:5b:9b:9d:e0:9a:
d7:b3:ef:5b:1b:38:a2:cf:96:88:fb:34:0b:85:06:27:ec:d4:
d7:b4:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 20:21:32 2025 by rpki-client