Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: Us1Uf/a/pqr6o+PMX5De7Slm5dorWWNkoJ1LFtlLpUw=
Subject key identifier: 29:76:D5:45:CE:24:2C:36:BC:4B:C0:BA:44:F1:2F:EC:1C:1A:AA:65
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 21CCB5450EC9D302F9524A9B8486B37FD5BF6943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: A1
Signing time: Mon 15 Sep 2025 07:53:00 +0000
Manifest this update: Mon 15 Sep 2025 07:48:00 +0000
Manifest next update: Tue 16 Sep 2025 10:33:00 +0000
Files and hashes: 1: AS213768.asa (hash: h3rS3JyeiVp8FsFljS/efb0MZnxctnTuSuQjoONj0XI=)
2: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: afe93AS/6uH0dPnI9JJPPkZQpTH2qmfB5yM5HELiSOQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 10:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cc:b5:45:0e:c9:d3:02:f9:52:4a:9b:84:86:b3:7f:d5:bf:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Sep 15 07:48:00 2025 GMT
Not After : Sep 16 10:33:00 2025 GMT
Subject: CN=2976D545CE242C36BC4BC0BA44F12FEC1C1AAA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:e3:7f:47:bc:56:60:c4:80:61:4a:c8:8c:
f4:f7:e8:a9:e3:25:ab:58:d6:1e:fb:26:59:ff:b2:
e9:f0:2c:9c:b4:f8:cd:4e:4b:95:54:fa:f5:77:f7:
f0:89:a0:37:a0:34:33:0d:27:39:82:b4:14:9b:2e:
2e:78:c6:3a:ab:0c:b1:12:fa:84:ce:82:12:cf:51:
48:82:ee:1f:e8:ab:1f:df:ab:fa:1f:eb:34:80:64:
53:f1:ca:fb:f1:8b:18:75:5b:a7:e4:c3:eb:7e:c0:
f4:b1:29:ee:31:1f:9e:02:93:30:1f:78:87:1e:e7:
77:5d:18:ad:dc:74:03:b5:70:fd:ec:ed:f2:90:c5:
9b:0a:74:52:c7:ec:e4:92:f6:77:5a:38:3d:de:ce:
fe:cd:f5:1f:1b:c4:f5:80:6d:e5:06:86:ee:0a:39:
c6:9b:b6:21:d7:c2:b2:5b:99:68:45:87:86:38:0b:
a5:ac:32:e3:7c:db:8c:d5:b9:a5:a6:17:26:b0:fc:
8a:3d:04:25:6e:67:72:22:b8:a9:1b:fa:22:bf:98:
0a:12:81:d4:2f:98:92:27:d3:94:d0:e8:b7:d9:96:
5a:fd:33:53:a6:c0:8d:9d:42:ec:75:e8:ba:9c:12:
f8:da:13:eb:d3:96:df:34:7e:8c:bd:51:c3:ce:2f:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:D5:45:CE:24:2C:36:BC:4B:C0:BA:44:F1:2F:EC:1C:1A:AA:65
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:61:07:d1:f1:6c:73:53:87:14:1e:db:9f:0a:0a:31:c2:7f:
6d:fe:b3:47:a8:54:5b:1f:07:fc:6d:9c:7a:c2:de:dc:a4:03:
59:fe:1e:03:62:d8:21:25:89:ed:d4:75:0b:3d:d2:f4:76:6d:
b8:b4:79:b9:23:64:da:32:72:d6:98:f0:ff:ed:e0:a8:07:7d:
03:bd:77:24:fb:09:75:60:93:b3:77:11:3f:07:eb:39:77:a9:
3e:ba:ea:0c:39:1b:89:dd:a5:93:98:35:04:cc:63:f1:72:3c:
e9:b3:f0:ab:54:9c:76:f1:23:38:0c:55:0f:9b:40:8f:d5:4e:
f2:51:22:01:7b:eb:60:26:1d:9d:cc:14:f9:8c:58:70:fc:d5:
ad:23:76:a9:c7:fa:69:6b:6f:ea:81:0c:26:08:1b:b3:62:a3:
e8:9f:2a:02:84:0c:6b:f7:8d:e2:cf:e6:84:07:a9:72:a0:48:
56:54:bc:08:cf:95:66:bf:2d:c8:36:3d:80:37:2a:57:78:e6:
e0:bf:3b:f2:99:38:90:28:cd:25:61:df:2e:f4:9c:40:a5:52:
64:f5:ae:68:92:df:45:dc:d2:f7:4c:cf:aa:63:89:c3:af:8c:
c5:5f:67:07:4f:27:2d:5b:c1:45:0a:0c:28:6c:62:30:14:b3:
c0:fb:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:48:29 2025 by rpki-client