Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: BpAZJah5+7YZ7r0QIJMVHP8jw4VIRggumGUffQYbBL8=
Subject key identifier: C1:40:F5:61:CE:C4:E4:89:9F:FA:EB:E9:FE:86:93:EB:75:C0:19:B2
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 350D1A30A599C8441419AF1A50EBDAADE7C04929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: ED
Signing time: Mon 10 Nov 2025 22:44:29 +0000
Manifest this update: Mon 10 Nov 2025 22:39:29 +0000
Manifest next update: Tue 11 Nov 2025 23:29:29 +0000
Files and hashes: 1: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: aUXSUwiKzn8PfKgU2quGcsrriUcAWWsUcEbuTzHDVBI=)
2: AS213768.asa (hash: h3rS3JyeiVp8FsFljS/efb0MZnxctnTuSuQjoONj0XI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0d:1a:30:a5:99:c8:44:14:19:af:1a:50:eb:da:ad:e7:c0:49:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Nov 10 22:39:29 2025 GMT
Not After : Nov 11 23:29:29 2025 GMT
Subject: CN=C140F561CEC4E4899FFAEBE9FE8693EB75C019B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:aa:a6:75:ee:72:5e:d9:51:01:7c:8f:35:
a1:1e:c6:86:b4:27:57:18:9f:6d:b5:59:09:80:30:
f7:c8:2e:63:c2:03:4b:e0:77:1a:ff:2d:71:2f:3d:
8e:2a:07:7d:c1:37:88:e2:1e:fb:d2:04:db:c9:8e:
ec:c3:9e:41:11:a3:b4:59:fb:d5:bb:aa:01:cb:0b:
0d:50:44:88:b5:6d:68:d7:1e:d5:72:86:9e:81:01:
98:28:03:43:dd:8e:45:f8:a4:76:59:f4:2c:73:92:
f6:a4:aa:80:da:d5:4b:d0:46:ba:7c:be:aa:63:a9:
66:6c:b5:2c:d8:6c:74:ab:9f:1f:c4:d8:ef:b4:20:
53:65:5a:06:ac:23:07:40:23:db:86:d4:74:46:47:
9e:54:b3:a6:c2:14:d0:62:6a:cf:05:15:02:bd:dd:
03:b2:27:96:05:67:26:c9:82:72:b8:a0:10:06:f9:
6a:30:af:f0:36:d5:42:a7:76:ea:83:7b:d8:87:ac:
f9:d9:e9:ff:7d:93:24:c7:b4:f9:d6:7e:86:6f:39:
ec:4d:a9:11:09:f8:34:57:5e:8f:fc:55:88:b0:9b:
41:62:df:98:b2:25:97:66:5c:75:17:7d:b2:af:84:
63:56:ec:79:71:40:02:c2:8c:49:37:f3:1f:f9:c0:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:F5:61:CE:C4:E4:89:9F:FA:EB:E9:FE:86:93:EB:75:C0:19:B2
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8d:69:1a:9e:3c:97:df:28:d6:ea:fa:29:cb:ac:41:e4:78:
9e:1d:80:d3:ec:f2:75:b8:ce:ea:dc:00:0b:6f:2b:9c:0e:40:
12:45:84:51:7c:70:dd:bf:56:7d:f6:fc:f6:58:a8:cb:9e:9a:
b3:d9:91:f4:24:7f:58:10:aa:4b:f7:20:8b:28:fa:c1:93:c8:
60:f6:c7:fe:26:3a:de:7d:08:fb:0a:ff:41:d5:9f:32:b4:04:
0a:53:b0:c5:f4:ec:09:24:70:ff:b9:40:5f:83:91:14:f1:f5:
82:7a:9a:51:5f:64:97:fc:d5:e2:e3:e0:f6:fa:1c:ef:d0:13:
b0:62:33:e0:65:52:fd:3c:1a:aa:da:05:35:b7:62:a5:ac:b7:
d2:1f:10:6f:5d:b1:ca:b4:34:f7:73:0a:71:b4:e7:af:f6:c5:
91:ba:2e:c1:f8:95:8d:ef:b8:d6:1f:b1:3d:21:09:38:a8:ae:
45:32:c4:fc:48:85:ad:a9:02:9b:7f:b7:7d:39:88:1c:4d:32:
05:86:90:3d:f6:72:6b:00:0d:97:7a:7c:2d:4b:f2:90:9f:5b:
92:0a:fd:fc:f8:69:85:6e:d7:93:42:ed:ca:da:70:47:31:41:
ce:68:03:29:a1:fa:c7:b9:f0:9d:d9:65:e0:da:3c:06:f2:6c:
48:4c:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:17 2025 by rpki-client