Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier: 57hagUtJ508up7fslHQK1UEmHmrpaqIwmRTcA8p2d4c=
Subject key identifier: 2A:80:BF:2B:FE:61:CA:AD:D6:D6:DC:F5:58:A5:63:D0:21:20:01:3E
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial: 4C889CD45AD999744542307B94B720871A4B045F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number: 04B6
Signing time: Wed 29 Oct 2025 17:39:04 +0000
Manifest this update: Wed 29 Oct 2025 17:34:04 +0000
Manifest next update: Thu 30 Oct 2025 19:33:04 +0000
Files and hashes: 1: AS51019.asa (hash: WryIkbk/NUiWkCGjmvwR10LorzE/G+iVXJIWS/l2CjI=)
2: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: WwIB1vpX/Ksy3lM5t4KklPIgz20phM5/z2U20FASusY=)
3: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: CKSlSquyKpLTagAuQfP4MikzQalyznHuhnFiecNeljU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 19:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:88:9c:d4:5a:d9:99:74:45:42:30:7b:94:b7:20:87:1a:4b:04:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Validity
Not Before: Oct 29 17:34:04 2025 GMT
Not After : Oct 30 19:33:04 2025 GMT
Subject: CN=2A80BF2BFE61CAADD6D6DCF558A563D02120013E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:6c:cf:9c:8e:04:00:7b:ec:df:8c:22:3d:
8e:fb:d0:e8:38:41:f6:18:d4:c7:a9:b4:9b:9b:4e:
16:a6:c3:c9:7c:40:5a:8f:ff:49:40:f4:f9:cf:69:
7b:a8:f7:cc:c9:80:83:52:5a:32:70:25:d3:a9:67:
95:a0:7c:a5:d2:a4:ea:b8:1f:fa:39:21:53:76:64:
96:27:8e:ee:0d:8b:6b:bd:00:39:a0:11:c0:4a:83:
cd:e3:f5:40:1f:2a:c7:15:4b:c4:b4:2a:5b:de:08:
06:91:7c:71:cf:1e:85:7f:b3:44:b7:8f:d5:1a:be:
50:12:c6:99:4f:e0:e7:74:79:cd:05:cd:9c:4e:a9:
a7:6a:50:30:7b:dd:29:71:5c:d0:da:bf:c7:47:66:
47:14:a7:3a:23:d5:6c:f5:70:3c:dd:45:21:ea:3e:
d0:57:d1:c6:4c:75:e7:12:c3:07:a2:26:2f:ed:11:
ef:fc:b9:d4:50:12:31:25:d8:7b:48:19:66:1a:7d:
aa:b0:b2:e6:49:e5:4e:e9:cc:3c:38:08:34:0e:16:
2b:06:9b:9d:50:4f:e1:8b:b8:8a:c4:05:11:8f:4d:
7b:c9:04:44:08:ea:ae:bc:3d:4d:19:2f:cd:c4:58:
5c:78:c4:5c:2a:a4:98:9f:85:d8:de:d9:cb:1a:7a:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:BF:2B:FE:61:CA:AD:D6:D6:DC:F5:58:A5:63:D0:21:20:01:3E
X509v3 Authority Key Identifier:
keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:81:18:dd:d2:9b:e6:86:64:7e:e4:f7:8e:38:ac:0d:7f:cd:
4d:a4:11:89:f4:2b:51:cb:7d:97:83:6d:83:88:1f:9e:b3:f3:
34:e6:9c:12:a3:e9:ba:2e:9e:0c:3b:37:69:07:75:ee:51:05:
cf:95:de:cd:24:44:60:8e:32:33:47:5d:89:68:3d:58:98:f6:
59:05:89:99:16:f8:0e:cc:1e:52:b2:c6:ad:c1:37:a0:20:7a:
87:75:88:6f:19:df:7e:9c:da:eb:d7:dc:c7:8a:24:01:99:e0:
08:68:de:53:8a:c1:fa:a9:bd:fc:c4:f5:ee:61:b9:67:d7:76:
9d:d6:0b:a3:db:2b:32:54:f2:b3:a3:9b:cb:b3:2f:c3:20:46:
27:38:8b:8c:6c:00:94:c8:b9:77:9b:a0:3e:3f:da:8f:e2:84:
1f:8e:1c:18:2a:21:fe:b4:49:ed:9d:5e:d5:46:d5:9c:4b:3b:
b9:a7:e8:07:0b:08:18:d4:12:0e:54:28:72:1f:b7:fd:e9:54:
66:f6:69:f6:11:66:41:ed:35:cc:62:24:80:5b:a3:ad:3b:96:
b6:5b:fb:2a:11:8f:13:ca:2a:72:7d:73:76:41:06:fe:27:72:
92:9a:e7:88:31:06:1e:c6:e6:be:ff:6c:3c:34:be:b6:7b:88:
24:6c:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:09:28 2025 by rpki-client