Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.mft
File: 9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.mft (raw, json)
Hash identifier: fy6QPgTbfyNjWR1ChHhrdTgZt14zdb+lY4UgfGE9Z/g=
Subject key identifier: 28:4A:1B:20:46:CF:76:0F:C7:CC:00:28:2E:21:F5:25:A1:83:49:A8
Authority key identifier: 9A:83:B3:DA:F9:A8:89:7D:7F:B6:FD:17:F2:64:D3:45:3E:1C:5A:CA
Certificate issuer: /CN=9a83b3daf9a8897d7fb6fd17f264d3453e1c5aca
Certificate serial: 2F335B87BBC3B93DCAD265A0686542A5BF3601C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moOz2vmoiX1_tv0X8mTTRT4cWso.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.mft
Manifest number: 17
Signing time: Mon 10 Nov 2025 23:57:47 +0000
Manifest this update: Mon 10 Nov 2025 23:52:47 +0000
Manifest next update: Wed 12 Nov 2025 00:44:47 +0000
Files and hashes: 1: AS206604.asa (hash: XxWNEP0RcW6dznnH21B+BOTSbywUXdGchLuUFg2aZo8=)
2: 9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.crl (hash: CMlnboyvZvHV8h1VdzfV18Oqqh9abExkcUI5ZNUNcXI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.mft
rsync://rpki.ripe.net/repository/DEFAULT/moOz2vmoiX1_tv0X8mTTRT4cWso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:33:5b:87:bb:c3:b9:3d:ca:d2:65:a0:68:65:42:a5:bf:36:01:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a83b3daf9a8897d7fb6fd17f264d3453e1c5aca
Validity
Not Before: Nov 10 23:52:47 2025 GMT
Not After : Nov 12 00:44:47 2025 GMT
Subject: CN=284A1B2046CF760FC7CC00282E21F525A18349A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:c4:92:76:60:f9:d2:0f:12:f7:13:54:47:
b2:ca:94:e3:55:27:7a:0d:b6:f1:77:88:a5:da:4e:
a4:62:26:d8:35:9d:b0:cf:2f:0f:0d:de:b8:06:eb:
21:f2:74:d0:a0:34:9c:dd:55:8d:98:b0:93:20:4e:
b1:44:53:f2:05:cc:4b:4b:0b:0a:45:4e:c9:51:56:
67:5d:ac:84:20:b3:80:39:97:ff:ab:02:79:46:61:
ea:9b:19:ad:6a:d4:0c:e0:24:f6:24:e5:f5:72:61:
10:0e:15:9b:c1:fa:fa:3d:3c:32:47:0c:fa:f6:b0:
4e:4e:6c:31:de:ed:af:1b:f3:d7:a9:54:ee:70:82:
21:95:d3:d7:0d:59:e8:27:97:d7:82:f5:82:94:38:
f5:f9:d8:cf:c3:54:02:0f:9c:40:22:51:22:6c:ea:
a6:76:80:30:79:da:40:0e:5a:52:23:56:5d:40:1a:
f5:fb:fb:06:30:7f:e0:ac:ea:4a:23:02:f6:93:9f:
90:b8:75:46:10:0f:6a:ec:74:50:2e:31:55:6c:18:
73:2c:3c:d8:b9:a6:84:f6:77:58:58:d6:4a:ad:46:
a7:25:26:70:37:9f:15:1e:c2:8a:1b:a3:17:cd:98:
30:e6:ff:38:f3:cf:e1:20:5f:96:6e:61:12:e0:35:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:1B:20:46:CF:76:0F:C7:CC:00:28:2E:21:F5:25:A1:83:49:A8
X509v3 Authority Key Identifier:
keyid:9A:83:B3:DA:F9:A8:89:7D:7F:B6:FD:17:F2:64:D3:45:3E:1C:5A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moOz2vmoiX1_tv0X8mTTRT4cWso.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/0/9A83B3DAF9A8897D7FB6FD17F264D3453E1C5ACA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1f:48:41:17:50:98:cc:ac:84:67:02:54:f3:53:00:3f:01:
48:72:de:a1:25:8e:37:ca:f0:f4:f0:c8:e2:5e:e7:f4:0d:7c:
72:15:66:54:c8:16:6b:69:82:84:ef:b5:af:6e:a6:f4:a2:41:
fd:e2:af:ee:1c:9b:48:73:13:38:29:ed:48:00:4b:48:2b:16:
3c:66:f6:95:f0:93:86:20:9d:65:5f:1e:c3:a1:7e:9e:1c:94:
d0:a7:78:91:0c:ea:c4:f4:9c:a5:bb:ee:2a:a3:07:0a:6d:6c:
00:b9:76:4b:e5:12:66:f3:94:a4:d8:4d:b4:47:83:ee:4d:0e:
57:b1:cb:0a:7b:de:80:49:01:f3:07:92:72:cb:d7:84:a6:1b:
2d:5d:8c:b1:bd:2a:e6:7d:46:c4:83:26:14:c8:3e:d6:e5:a0:
2a:1b:25:94:b3:a1:2b:7e:fd:67:a4:ce:7f:d1:e3:ea:30:42:
c0:f7:c7:dc:e3:81:5c:ac:a0:0d:7d:ce:94:f1:fb:ec:60:0e:
27:4c:98:dc:f8:1b:d8:7c:94:4f:2c:9c:04:51:a2:92:7c:1f:
14:7a:d4:a4:7a:f7:c0:f6:be:54:92:6a:63:e9:27:75:00:c9:
ac:30:22:f1:fe:47:23:bd:df:98:1f:90:28:43:6c:02:72:4e:
f2:3d:16:c6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULzNbh7vDuT3K0mWgaGVCpb82AckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWE4M2IzZGFmOWE4ODk3ZDdmYjZmZDE3ZjI2NGQzNDUz
ZTFjNWFjYTAeFw0yNTExMTAyMzUyNDdaFw0yNTExMTIwMDQ0NDdaMDMxMTAvBgNV
BAMTKDI4NEExQjIwNDZDRjc2MEZDN0NDMDAyODJFMjFGNTI1QTE4MzQ5QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gMSSdmD50g8S9xNUR7LKlONV
J3oNtvF3iKXaTqRiJtg1nbDPLw8N3rgG6yHydNCgNJzdVY2YsJMgTrFEU/IFzEtL
CwpFTslRVmddrIQgs4A5l/+rAnlGYeqbGa1q1AzgJPYk5fVyYRAOFZvB+vo9PDJH
DPr2sE5ObDHe7a8b89epVO5wgiGV09cNWegnl9eC9YKUOPX52M/DVAIPnEAiUSJs
6qZ2gDB52kAOWlIjVl1AGvX7+wYwf+Cs6kojAvaTn5C4dUYQD2rsdFAuMVVsGHMs
PNi5poT2d1hY1kqtRqclJnA3nxUewooboxfNmDDm/zjzz+EgX5ZuYRLgNX4DAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKEobIEbPdg/HzAAoLiH1JaGDSagwHwYDVR0j
BBgwFoAUmoOz2vmoiX1/tv0X8mTTRT4cWsowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI1MWIxYjItNWUxNC00YzM2LTg2YWEtYWIxYWQxZDdk
ZDMwLzAvOUE4M0IzREFGOUE4ODk3RDdGQjZGRDE3RjI2NEQzNDUzRTFDNUFDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21vT3oydm1vaVgxX3R2MFg4bVRUUlQ0
Y1dzby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYjUxYjFiMi01
ZTE0LTRjMzYtODZhYS1hYjFhZDFkN2RkMzAvMC85QTgzQjNEQUY5QTg4OTdEN0ZC
NkZEMTdGMjY0RDM0NTNFMUM1QUNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh9IQRdQmMyshGcCVPNT
AD8BSHLeoSWON8rw9PDI4l7n9A18chVmVMgWa2mChO+1r26m9KJB/eKv7hybSHMT
OCntSABLSCsWPGb2lfCThiCdZV8ew6F+nhyU0Kd4kQzqxPScpbvuKqMHCm1sALl2
S+USZvOUpNhNtEeD7k0OV7HLCnvegEkB8weScsvXhKYbLV2Msb0q5n1GxIMmFMg+
1uWgKhsllLOhK379Z6TOf9Hj6jBCwPfH3OOBXKygDX3OlPH77GAOJ0yY3Pgb2HyU
TyycBFGiknwfFHrUpHr3wPa+VJJqY+kndQDJrDAi8f5HI73fmB+QKENsAnJO8j0W
xg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:33 2025 by rpki-client