Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: 9CJ/Z82qinEZrJU2jtJoDsDtJuYE8y3ui4u8Hx4aU8U=
Subject key identifier: 9F:95:EF:37:AC:AE:CD:37:7B:91:F8:2F:10:B7:F2:7F:CD:65:97:45
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 193EC03F961D706DD70D39CD3B29B010B9C2B560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: 64
Signing time: Thu 31 Jul 2025 13:22:54 +0000
Manifest this update: Thu 31 Jul 2025 13:17:54 +0000
Manifest next update: Fri 01 Aug 2025 13:51:54 +0000
Files and hashes: 1: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: loH4JwSCAwVdIXMTMv2fX9BPMK5RLn0cF6OFSGAsIT4=)
2: AS213768.asa (hash: h3rS3JyeiVp8FsFljS/efb0MZnxctnTuSuQjoONj0XI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3e:c0:3f:96:1d:70:6d:d7:0d:39:cd:3b:29:b0:10:b9:c2:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Jul 31 13:17:54 2025 GMT
Not After : Aug 1 13:51:54 2025 GMT
Subject: CN=9F95EF37ACAECD377B91F82F10B7F27FCD659745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:d3:fd:26:69:1c:21:83:85:22:d4:2d:e8:
6d:92:bc:c6:d0:4c:fd:e6:66:33:3e:75:27:a3:1c:
4e:bf:66:17:e0:0b:cb:8d:e7:9b:a0:2b:4b:9e:4f:
d7:4e:6d:3e:47:6c:be:e3:8d:df:10:bd:21:ad:8e:
c7:30:fc:e7:ea:df:99:2e:ea:b2:df:89:89:0a:45:
44:8a:b0:c7:e1:00:20:12:e8:d7:9e:fe:14:dc:5d:
cc:e9:33:49:0c:f8:9e:33:b2:21:e7:78:c3:ca:6c:
e4:a1:b5:07:43:50:e8:65:91:15:eb:e8:58:00:66:
40:fa:70:32:92:04:6e:58:76:dd:fd:e5:2e:21:fc:
47:43:57:ca:e6:4b:28:6b:1b:48:8f:d1:bb:43:3f:
ad:8d:a0:75:54:55:94:2e:e2:ad:ca:9f:84:ec:c1:
ed:68:da:09:4b:3f:09:0d:62:fe:40:32:24:a2:2d:
ad:43:79:59:f5:a4:01:69:ba:46:62:42:46:21:66:
12:fb:3a:f5:79:b7:c0:59:ff:e3:6a:83:87:a9:1b:
f0:c9:1e:e5:56:e1:63:ee:61:6a:41:5e:51:c0:3f:
f6:27:18:cd:35:9d:ed:a6:e9:23:b5:33:cb:f0:28:
8f:a0:2e:c7:80:30:aa:1d:95:66:e3:ed:48:12:c5:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:EF:37:AC:AE:CD:37:7B:91:F8:2F:10:B7:F2:7F:CD:65:97:45
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:92:f7:a0:a3:cc:cf:49:2b:26:c9:6e:e8:ea:8c:06:ff:cc:
9e:0e:90:a5:57:59:7f:7d:99:e7:a1:9f:0f:b6:60:51:1b:90:
66:a0:55:ee:ff:b9:29:c9:ed:ce:c5:19:df:a9:84:a5:ce:0c:
36:f1:86:37:13:62:65:4f:d2:61:c7:4b:90:5c:5a:8b:0f:36:
ce:ee:6c:d4:37:81:10:fe:8e:9f:af:81:f1:3d:bf:97:ba:4e:
92:ab:81:c3:16:b0:df:bc:57:5a:5b:5c:ed:6d:95:70:e9:9e:
07:4b:88:89:eb:b0:92:67:22:87:59:a1:bc:c3:64:ab:ac:f8:
c1:18:6b:8a:3c:f5:1b:74:5f:2a:7b:c8:80:dd:b4:ae:04:a4:
ca:3c:25:73:71:9d:43:7d:4a:aa:d9:f2:4e:37:13:5d:33:26:
44:2f:0a:6e:dc:4c:fc:3e:d7:09:98:b4:84:44:56:fe:61:c0:
41:b8:43:61:64:bb:11:5b:27:47:8f:39:22:9e:7b:3f:42:bd:
9d:4e:71:22:5a:c4:04:9e:3e:b8:51:3a:75:96:e3:42:54:4e:
60:b2:2c:88:81:8f:c6:58:b6:9f:d2:d6:41:3c:34:ec:7d:51:
6e:42:0b:8e:5c:fc:00:52:83:ea:c4:a7:da:03:9e:da:7f:9e:
ff:40:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 17:06:29 2025 by rpki-client