Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier: YfmHAw9xhJTVYZDiTmRFyNpvisTp5gn/+EEy+1uEn7M=
Subject key identifier: 95:D2:06:70:38:17:FF:9A:21:B5:4B:09:2B:A8:99:02:89:07:6A:1B
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial: 31910CA25539016F2A6FD0C03578072F38113767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number: 03E2
Signing time: Wed 04 Jun 2025 15:24:29 +0000
Manifest this update: Wed 04 Jun 2025 15:19:29 +0000
Manifest next update: Thu 05 Jun 2025 17:17:29 +0000
Files and hashes: 1: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: PeKrYlxO9aJzSjjq2GCsehA7RgIXos16I20n9tzXipg=)
2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: SxtVgkMpxOK2Jx3PPnPFeSl76R0+qRyAYBtbXP7qLvA=)
3: AS51019.asa (hash: RqQYQxP2LlV4zO7/d8ske+S6p2B1SREg+ga188kx8/8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 17:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:91:0c:a2:55:39:01:6f:2a:6f:d0:c0:35:78:07:2f:38:11:37:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Validity
Not Before: Jun 4 15:19:29 2025 GMT
Not After : Jun 5 17:17:29 2025 GMT
Subject: CN=95D206703817FF9A21B54B092BA8990289076A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:b6:6d:f7:7b:6a:23:cf:75:17:76:24:f3:
1f:f6:7d:b3:b6:b4:1f:1c:d7:f1:8b:6d:c5:d1:50:
87:bb:6c:a5:77:bf:6e:77:a1:97:d4:b0:7d:52:60:
62:51:57:07:a4:69:2d:e6:6f:31:e5:61:33:0f:cb:
e8:2d:4c:08:09:db:ac:dd:74:b9:09:13:51:e2:2d:
a6:b2:ad:80:40:73:82:0f:5c:72:22:d3:51:76:37:
3c:c1:73:f2:bc:8f:ea:1b:78:d2:c1:c6:4f:0d:03:
0d:63:a0:46:20:3e:6a:9a:12:91:f6:fa:87:23:11:
b8:0a:39:77:6d:a0:e6:d1:56:a8:f0:9d:89:40:95:
4b:a4:b0:ae:49:b2:04:b2:7f:48:8b:a9:ee:dd:d8:
7d:5a:af:da:ab:7b:29:41:c2:f3:de:fe:40:ef:82:
30:ef:b7:bb:c4:39:1e:9d:b0:48:9e:e1:0b:65:19:
eb:85:b8:36:49:34:c2:7f:f4:10:28:f5:1a:3e:db:
5b:9d:90:65:5c:25:4b:cf:12:ec:27:bf:bc:c8:01:
80:2c:9a:1f:7c:f3:cf:0d:45:f4:a3:8c:97:ac:ac:
16:a3:e5:25:2e:75:55:bc:14:2c:c1:f7:2f:70:e4:
0b:1e:d5:c3:96:1c:7f:e6:cd:87:08:9d:11:d5:d9:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:06:70:38:17:FF:9A:21:B5:4B:09:2B:A8:99:02:89:07:6A:1B
X509v3 Authority Key Identifier:
keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:35:32:cc:9c:65:a6:13:b8:fa:d7:4e:56:f4:b8:de:20:e5:
b7:a6:06:2e:19:6c:90:be:04:7a:f7:17:31:5d:80:08:e4:38:
a2:19:fd:55:8e:cc:b6:b5:e0:7a:9f:58:f1:e0:5b:30:e7:16:
fd:02:e4:da:1b:da:69:22:32:04:ca:86:fa:b3:86:7f:a0:ec:
0d:e0:7e:3c:10:f3:07:46:ed:68:5a:66:3e:72:bd:2c:cf:d3:
a3:88:19:58:c5:03:01:3a:0c:c5:11:01:9b:7e:b3:77:04:49:
b6:5c:c3:66:8c:6c:e5:c7:8b:f4:d2:cb:32:f8:fb:33:32:9d:
d8:ec:88:1c:04:61:aa:b1:c9:8b:d1:03:71:6a:f6:0f:44:a4:
9e:87:ca:5d:91:69:db:01:cd:a4:e4:39:7d:0a:47:f4:51:62:
18:1e:f6:25:30:bf:17:20:76:15:68:a9:88:91:2c:43:f8:86:
c5:a4:ba:c1:c0:5b:ab:30:58:e4:ee:27:06:f3:2c:b1:4f:79:
09:9e:91:6e:17:b9:f2:aa:c2:b2:88:c2:10:51:05:05:f7:9a:
6e:6c:4d:73:1c:be:c9:d3:95:02:0c:6d:f9:ec:ec:f4:5b:49:
20:ec:bc:9e:3c:d4:5d:c4:9f:19:b7:9a:82:88:c9:fe:97:f4:
99:42:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 21:47:35 2025 by rpki-client