Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier: Nxmpy3sFGs8mWSVftcPBufE5BJGvr4ybSS/WJZzZYi8=
Subject key identifier: 53:A1:1C:5B:8F:BF:5A:FA:65:ED:23:3B:84:D2:37:6C:21:FB:88:21
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial: 1CC591CD9B6E2DF7F52DA4B883B2A2E9AC9D9374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number: 0477
Signing time: Sat 13 Sep 2025 12:32:10 +0000
Manifest this update: Sat 13 Sep 2025 12:27:10 +0000
Manifest next update: Sun 14 Sep 2025 13:39:10 +0000
Files and hashes: 1: AS51019.asa (hash: WryIkbk/NUiWkCGjmvwR10LorzE/G+iVXJIWS/l2CjI=)
2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: vmHFeWaOJyHl09eTJBGNkPqaSbf1rUsAdfqvY/BH4u4=)
3: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: WwIB1vpX/Ksy3lM5t4KklPIgz20phM5/z2U20FASusY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c5:91:cd:9b:6e:2d:f7:f5:2d:a4:b8:83:b2:a2:e9:ac:9d:93:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Validity
Not Before: Sep 13 12:27:10 2025 GMT
Not After : Sep 14 13:39:10 2025 GMT
Subject: CN=53A11C5B8FBF5AFA65ED233B84D2376C21FB8821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:7a:bd:06:0e:55:3d:6a:0e:66:08:e2:f3:
e1:68:61:9e:97:e8:57:8c:0a:63:3a:8e:7c:11:f3:
39:e6:74:3f:7c:54:00:26:23:f0:d0:38:8e:16:e9:
04:37:36:90:9e:3a:8c:ab:0b:f7:d9:65:3c:ab:b1:
a6:e8:07:aa:df:af:b0:01:54:da:c1:0a:d6:ea:5b:
7f:01:2d:43:af:f9:f7:16:b7:f1:dd:72:f9:56:37:
3b:dc:af:5b:86:b3:05:51:02:74:01:f6:fc:ef:22:
09:f2:75:3d:f5:ea:3e:d7:4a:a2:85:b1:c4:f4:85:
69:0d:03:0d:38:3d:e3:54:68:ea:6d:25:f2:36:8a:
b1:7b:fe:da:82:fd:07:8d:2f:66:d7:e6:43:aa:06:
b8:c9:5f:ae:ad:d6:0c:63:78:e4:5b:d8:7f:ce:d7:
f6:99:d8:e1:88:7d:1c:6e:74:20:3c:35:78:eb:93:
d5:1a:9d:95:dd:86:48:d3:e6:9c:a7:ac:3a:28:80:
c4:52:89:5d:24:0d:de:c0:d9:90:ee:ad:9c:36:40:
34:48:f4:52:26:7b:1f:6c:0d:40:e8:aa:32:b4:eb:
1c:94:d3:ab:bc:4f:44:ce:1d:16:71:ec:ec:81:cf:
a0:f2:e0:41:4a:36:de:d2:e5:37:b7:75:a2:c3:78:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A1:1C:5B:8F:BF:5A:FA:65:ED:23:3B:84:D2:37:6C:21:FB:88:21
X509v3 Authority Key Identifier:
keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:76:bd:8b:6b:88:55:2e:e9:d3:d3:ff:d2:36:91:05:2c:
08:18:26:db:40:44:0a:e5:ad:9a:d7:1b:af:73:0a:61:35:95:
af:b0:45:16:1c:9e:5b:f2:07:5c:cf:2b:a3:dd:a6:45:e5:49:
67:94:0e:aa:7c:20:e8:fc:ae:8e:81:5d:9e:26:2e:9a:8d:c6:
13:f5:58:ac:a7:f2:54:1f:81:fa:70:17:24:52:98:b0:de:a3:
e6:a0:35:fb:29:e8:91:cd:db:b7:bc:0d:43:6b:2b:90:04:2d:
a2:d4:36:1b:1c:d7:3a:18:39:f6:0b:8c:b8:a7:f7:5b:fc:d2:
9e:64:f5:fe:bd:6e:cc:14:b1:f3:91:f3:ff:d2:a3:f7:07:ef:
d8:b7:43:e2:69:ec:8a:c3:ee:5c:d1:27:40:e7:81:c7:b3:11:
87:5d:2f:63:45:ec:cd:b2:d9:8f:cd:02:ce:1b:0f:8c:34:a9:
3e:d4:9a:d0:14:ef:e0:31:cf:66:89:08:94:2c:b4:c0:b5:c7:
d6:3f:41:ec:8e:ed:ac:ec:c8:e0:fe:a9:76:e9:be:99:25:55:
bd:93:89:3c:54:3f:8f:90:ee:70:c9:50:54:c2:d4:d6:8b:f3:
35:8c:a4:8b:7d:4e:94:e6:1f:d7:be:57:c4:89:10:86:ae:24:
60:b7:e0:5b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHMWRzZtuLff1LaS4g7Ki6aydk3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz
M2UwMmVhZDAeFw0yNTA5MTMxMjI3MTBaFw0yNTA5MTQxMzM5MTBaMDMxMTAvBgNV
BAMTKDUzQTExQzVCOEZCRjVBRkE2NUVEMjMzQjg0RDIzNzZDMjFGQjg4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbD3q9Bg5VPWoOZgji8+FoYZ6X
6FeMCmM6jnwR8znmdD98VAAmI/DQOI4W6QQ3NpCeOoyrC/fZZTyrsaboB6rfr7AB
VNrBCtbqW38BLUOv+fcWt/HdcvlWNzvcr1uGswVRAnQB9vzvIgnydT316j7XSqKF
scT0hWkNAw04PeNUaOptJfI2irF7/tqC/QeNL2bX5kOqBrjJX66t1gxjeORb2H/O
1/aZ2OGIfRxudCA8NXjrk9UanZXdhkjT5pynrDoogMRSiV0kDd7A2ZDurZw2QDRI
9FImex9sDUDoqjK06xyU06u8T0TOHRZx7OyBz6Dy4EFKNt7S5Te3daLDeBbpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUU6EcW4+/Wvpl7SM7hNI3bCH7iCEwHwYDVR0j
BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ
Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00
MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2
NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApH92vYtriFUu6dPT/9I2
kQUsCBgm20BECuWtmtcbr3MKYTWVr7BFFhyeW/IHXM8ro92mReVJZ5QOqnwg6Pyu
joFdniYumo3GE/VYrKfyVB+B+nAXJFKYsN6j5qA1+ynokc3bt7wNQ2srkAQtotQ2
GxzXOhg59guMuKf3W/zSnmT1/r1uzBSx85Hz/9Kj9wfv2LdD4mnsisPuXNEnQOeB
x7MRh10vY0XszbLZj80CzhsPjDSpPtSa0BTv4DHPZokIlCy0wLXH1j9B7I7trOzI
4P6pdum+mSVVvZOJPFQ/j5DucMlQVMLU1ovzNYyki31OlOYf175XxIkQhq4kYLfg
Ww==
-----END CERTIFICATE-----
Generated at Sat Sep 13 14:15:20 2025 by rpki-client