
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier: HmZJt6ca++YdAqV13UDJjAvtwDvM/gO257/H2yP1VSM=
Subject key identifier: 90:1C:E3:60:0E:8A:F4:E4:48:4A:82:06:D5:1B:A7:05:00:FC:DB:A0
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial: 4C310E49E3ECD907E30F19EB974474715F41B7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number: 025A
Signing time: Tue 11 Nov 2025 07:47:24 +0000
Manifest this update: Tue 11 Nov 2025 07:42:24 +0000
Manifest next update: Wed 12 Nov 2025 07:54:24 +0000
Files and hashes: 1: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
2: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: 2+trebBhhMKgMMV7otRrhv4+QTFhkq0QZFa9cZmgCmA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:31:0e:49:e3:ec:d9:07:e3:0f:19:eb:97:44:74:71:5f:41:b7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
Validity
Not Before: Nov 11 07:42:24 2025 GMT
Not After : Nov 12 07:54:24 2025 GMT
Subject: CN=901CE3600E8AF4E4484A8206D51BA70500FCDBA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:d7:e7:26:42:6e:2f:a8:88:d1:08:99:1e:
b1:72:e2:54:65:0a:85:04:80:b6:e5:0d:09:48:d9:
03:f8:cb:a1:08:60:81:a4:41:9f:b9:bd:67:7c:ae:
7d:c2:e6:1d:e3:a0:90:89:e0:11:e9:f9:e2:c7:08:
ea:d8:b5:a0:30:50:3a:e5:f2:4c:de:f6:ab:65:09:
ef:fa:9a:a3:3b:d5:83:cc:70:51:44:ec:58:6c:74:
f7:f0:43:45:47:b1:b9:2f:e9:92:17:c2:d0:5e:10:
ed:61:c4:c7:ed:a7:14:25:28:bc:bf:46:23:93:e7:
f4:ec:bd:9f:ef:8f:0f:fd:74:95:f0:29:bf:4a:d1:
20:51:9d:3e:23:28:4a:c9:9d:8c:79:14:01:d8:5a:
33:53:e8:37:6a:9f:53:34:0a:e5:c8:db:77:89:1d:
f1:a8:1f:4c:73:38:d4:1b:43:bc:46:09:9a:8e:e9:
57:84:94:d6:34:0d:b2:9e:ab:48:6e:2a:22:03:be:
79:28:5e:4b:53:be:8a:84:de:67:18:45:7c:e5:30:
dd:3e:31:51:0e:8b:18:30:bf:ed:85:5e:b2:c4:f0:
93:94:7b:cf:d0:63:d0:01:66:fd:c5:aa:3c:59:77:
bc:71:06:9a:16:4c:40:93:db:3a:64:3b:6f:d2:d6:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:E3:60:0E:8A:F4:E4:48:4A:82:06:D5:1B:A7:05:00:FC:DB:A0
X509v3 Authority Key Identifier:
keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:72:32:3b:29:9d:33:ad:fe:5f:da:c7:df:55:b8:ad:4c:de:
2a:f6:b3:ff:3f:59:4d:c6:c1:ad:9d:aa:15:67:78:67:c0:be:
f2:e2:f3:2d:22:0f:d0:1c:16:14:88:5e:cf:21:01:e6:d6:23:
54:05:c7:50:8a:3a:34:b0:67:12:55:1c:bc:eb:0e:c5:8d:37:
49:0e:d0:04:af:34:e9:55:0a:d2:2f:38:7e:70:4c:6c:1c:03:
e1:f0:32:93:72:25:82:5d:be:82:a2:37:c3:27:54:5b:7f:40:
b5:bd:9e:06:b9:3d:da:aa:f1:b3:88:95:3a:ca:a4:64:2a:b0:
6c:65:f0:f8:ac:8e:ee:42:8a:5c:84:21:3c:d3:0a:aa:56:68:
58:13:c0:8e:b9:2a:ec:97:73:60:86:6e:8d:30:e5:73:db:4d:
46:08:f1:91:cf:66:1e:44:a1:14:e2:4c:2d:7e:56:ec:72:4d:
a7:50:d9:2f:e7:e4:de:27:44:97:93:ca:f1:a3:af:28:65:89:
5b:f8:6c:1b:49:d7:b2:44:29:c5:58:6b:cb:df:e2:44:41:02:
7c:42:4b:1c:1d:c7:4e:8a:d1:91:a7:ce:0b:59:01:2a:2d:73:
99:d0:d8:21:59:bc:f0:5a:c6:aa:96:77:31:59:9d:18:f0:15:
d3:dd:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:27 2025 by rpki-client