Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: CCjfX6X9/XWUykeT2xdvDSjaMczjPysZobB2ifPvL2c=
Subject key identifier: A4:78:7A:18:0D:62:B3:99:48:B1:54:59:09:94:E9:F1:5F:D4:E4:2C
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 7E0CE7B218EBB5C05C8F5CAD78C8FBAD93E61885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0194
Signing time: Mon 13 Oct 2025 22:37:40 +0000
Manifest this update: Mon 13 Oct 2025 22:32:40 +0000
Manifest next update: Wed 15 Oct 2025 12:54:40 +0000
Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: YaxdEoodPOsBcZWYkaL4c73O60Sjs0ih32aT4piLRlE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0c:e7:b2:18:eb:b5:c0:5c:8f:5c:ad:78:c8:fb:ad:93:e6:18:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Oct 13 22:32:40 2025 GMT
Not After : Oct 15 12:54:40 2025 GMT
Subject: CN=A4787A180D62B39948B154590994E9F15FD4E42C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:fa:0e:76:4d:02:77:5e:d1:7d:f5:61:a7:
d2:03:f8:93:59:52:51:cf:e0:ea:19:5d:2b:98:dd:
14:7c:52:dd:f1:ae:8b:86:bf:9a:0d:b4:0c:ac:d2:
67:26:1d:3a:5c:7c:29:00:3d:d6:ef:71:f0:76:f1:
e8:bd:11:3a:dc:ab:77:bb:d3:78:47:5f:29:6f:69:
1e:f7:a1:c7:90:8f:60:f3:1e:d2:47:9a:9a:e4:8a:
c7:6e:ca:4a:f9:3f:c0:ad:c0:23:f7:e4:8f:ed:31:
ed:5b:e5:74:20:b1:ae:15:5d:f0:4d:69:58:17:24:
dc:c9:03:e9:05:37:e6:bc:49:12:23:b8:f0:b6:34:
d1:cf:6c:d7:d1:2c:d8:48:6d:9d:44:44:d9:d3:a8:
92:c4:dd:34:4e:0e:59:f0:8d:af:06:11:e2:35:cf:
29:79:63:74:07:3c:db:b3:18:3e:e5:ab:17:d5:f1:
3f:cb:76:a6:e5:fd:04:5e:57:67:7b:92:2f:c7:76:
5e:2e:28:e3:b4:47:8b:46:7e:cb:01:b3:56:d4:75:
24:37:f8:b6:5b:83:bc:87:bf:37:b1:4c:b9:f6:03:
1f:76:cd:c7:96:59:25:e0:23:27:02:51:f6:72:c6:
4e:00:eb:7f:3b:08:d2:74:de:e2:ea:84:92:72:f4:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:7A:18:0D:62:B3:99:48:B1:54:59:09:94:E9:F1:5F:D4:E4:2C
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2e:1e:8c:e9:67:a8:75:3b:49:bd:dc:76:10:b7:0b:ca:f5:
83:1e:cb:70:a8:ae:29:f7:a4:93:34:0e:f7:91:72:e8:10:4b:
eb:80:b5:64:79:4d:1a:c8:18:3f:d6:ec:37:d0:f2:dc:3e:f5:
56:d9:ca:42:a7:24:33:97:46:5a:96:3d:9f:20:4e:be:6c:d4:
11:46:70:ae:da:b0:10:3d:c3:ca:31:ff:24:74:51:fb:21:e6:
83:44:d1:91:7a:b5:d0:f8:9d:50:5a:db:15:98:54:98:55:2e:
2e:36:56:c8:b9:f3:af:c8:06:61:60:c9:ee:60:b0:5d:7a:3a:
dc:45:bc:db:3d:a9:ab:0d:0c:74:06:4f:f4:d9:b9:69:9e:f0:
47:76:82:b7:c4:fa:a4:0b:24:75:77:34:d6:7c:03:27:06:6a:
48:07:1d:c5:09:0f:49:01:4d:05:79:8c:13:23:09:7e:6e:2a:
58:fd:21:7f:41:ce:59:ef:07:a1:ef:9a:53:b4:82:29:de:32:
8a:1d:47:e7:03:e6:00:96:63:67:e2:ab:9a:51:c5:ed:51:d5:
d3:ce:c4:9c:5b:a8:10:f3:7b:92:a9:35:35:62:1b:27:5e:1b:
c0:f6:59:d6:f3:a7:aa:f3:ab:71:d0:c0:a6:04:ad:6f:00:02:
6f:71:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 04:59:53 2025 by rpki-client