Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier: YMvuL4KWGUgcFN8uF/gn3dVSLjGUCThmaE2oTFK7NTk=
Subject key identifier: 4B:6A:AF:31:67:DF:47:E5:68:A7:01:AB:FA:57:DA:6E:6D:5D:83:FE
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 589FB8611A689D507F192713238BC8DDC8CF9057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number: 04B1
Signing time: Tue 11 Nov 2025 04:14:21 +0000
Manifest this update: Tue 11 Nov 2025 04:09:21 +0000
Manifest next update: Wed 12 Nov 2025 06:27:21 +0000
Files and hashes: 1: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: i8J/lDhPEE3nU33D2iM7SdBdWxMXZNSxEpHgmoe8Nuc=)
2: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9f:b8:61:1a:68:9d:50:7f:19:27:13:23:8b:c8:dd:c8:cf:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Nov 11 04:09:21 2025 GMT
Not After : Nov 12 06:27:21 2025 GMT
Subject: CN=4B6AAF3167DF47E568A701ABFA57DA6E6D5D83FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:9a:61:ef:74:23:6a:c3:28:36:df:d8:e1:
1b:41:0e:b8:30:9e:be:9e:5d:0d:fe:01:80:9a:3f:
32:3c:1a:bc:35:ba:57:eb:02:9d:6e:80:01:d4:82:
31:54:ae:8d:1f:34:7e:d2:7a:e5:8a:a1:07:37:fc:
df:0b:27:05:07:da:c9:1b:de:36:05:14:6c:e7:1f:
cd:60:78:64:7c:03:17:58:94:c6:f0:7f:65:91:ee:
2f:8b:18:c2:02:5a:86:c9:e1:4f:b9:58:d7:74:7d:
97:70:c5:4a:ac:35:3a:7b:bd:7d:9f:ee:0c:eb:3e:
98:02:b0:5a:c4:15:b8:47:e3:2d:e7:89:4d:d4:a9:
b8:d4:04:3b:c0:aa:e5:0f:1a:12:51:d4:28:c6:25:
07:04:6a:5c:f1:da:bc:8a:bb:73:f9:76:b0:cc:ef:
3a:d7:99:5a:d7:d4:99:e8:66:99:60:1a:4e:45:c3:
93:13:9b:0e:22:62:1f:66:2c:8e:88:1a:43:bd:8c:
7b:db:75:7c:26:9d:90:5a:b0:2c:0c:8c:e7:be:3d:
94:88:50:c8:2f:5f:43:cc:3d:bf:90:28:1c:60:e2:
f1:4b:cc:ad:f9:99:5f:9b:04:73:4c:ad:54:7c:ed:
dd:1a:a2:7e:cc:c7:44:73:dc:7d:21:37:f5:b1:36:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:AF:31:67:DF:47:E5:68:A7:01:AB:FA:57:DA:6E:6D:5D:83:FE
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2c:ad:76:99:ec:a1:a1:9b:ca:06:da:18:c6:67:7c:de:31:
52:34:cb:62:d5:a2:44:0e:e6:36:e8:e6:c8:fb:9c:97:90:29:
fa:d5:95:df:be:a3:b2:c3:b3:af:f6:6d:91:bd:d5:09:2b:e4:
76:3b:3f:86:1c:27:80:79:0e:6b:97:96:58:10:57:1c:bf:ac:
7e:49:36:fa:8c:5b:6f:a9:60:3a:0b:f7:2a:46:5b:2a:fc:22:
cd:72:14:09:4d:bc:15:15:dc:9b:cd:64:7e:bb:31:30:72:b0:
a4:2e:61:df:d4:ae:41:a2:a3:6e:dd:33:8c:87:1f:07:09:09:
64:36:12:af:44:d7:fb:d3:d0:00:3a:6e:b4:9d:7f:aa:9e:5c:
67:fb:44:01:69:86:bc:49:24:77:14:c5:8f:9e:99:86:a0:20:
b7:3b:61:8b:50:9a:94:de:05:62:63:a5:98:a6:c1:f0:71:1d:
36:68:28:c9:71:f6:93:a5:39:41:99:01:53:2b:d8:93:26:9b:
af:1d:ab:38:15:b7:15:ae:2d:36:a9:6c:99:72:ee:82:b6:62:
2f:51:f9:fe:bc:ab:c2:8b:f2:2c:d2:6a:7f:99:8a:fd:c1:9b:
cc:9a:c3:8f:e5:f6:09:23:d0:21:81:33:32:66:c3:13:aa:f8:
10:c4:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:17 2025 by rpki-client