
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: mFfPHOgvn49PgACLF+QcGdW+z9LNtqqR3ecJJhJRGy8=
Subject key identifier: 11:1F:42:78:C3:CE:9A:24:9A:D4:1E:45:5F:3E:E6:53:0A:4D:4C:B4
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 2D8AD998B6D3032E9179615C03B4A783D306B1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 03E1
Signing time: Tue 21 Oct 2025 14:45:25 +0000
Manifest this update: Tue 21 Oct 2025 14:40:25 +0000
Manifest next update: Wed 22 Oct 2025 16:13:25 +0000
Files and hashes: 1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: b1uP3TytkfVbuLShyBdYAE0AUgP4j99yHIsNWDnX0Wc=)
2: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
3: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 16:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8a:d9:98:b6:d3:03:2e:91:79:61:5c:03:b4:a7:83:d3:06:b1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Oct 21 14:40:25 2025 GMT
Not After : Oct 22 16:13:25 2025 GMT
Subject: CN=111F4278C3CE9A249AD41E455F3EE6530A4D4CB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:18:dc:0a:4f:13:9c:52:d7:12:ac:b3:63:
9f:1d:0d:4a:5a:6f:63:9f:8b:c2:ae:c6:ae:15:4f:
62:e6:b9:2a:17:c9:d7:3e:b2:0e:d5:cd:50:5a:fb:
93:28:d2:b0:f5:bc:4b:a9:32:b9:53:79:22:fc:4f:
c2:98:05:0e:88:c2:8d:11:7b:3a:1a:42:80:c3:2d:
b7:59:ac:bb:8d:79:06:92:59:04:a5:14:94:6b:fe:
f8:d3:e7:8e:97:75:12:e1:a3:80:52:f4:48:52:1b:
58:49:39:cb:bb:d8:25:85:90:15:bb:cf:fc:7c:fb:
9f:77:27:88:94:7b:13:ac:07:16:eb:e7:7d:4e:db:
c9:f1:a7:1b:d7:ad:9a:22:89:04:0d:21:54:9a:42:
9b:27:ed:67:4a:1d:cb:10:f0:c1:93:13:58:23:0a:
62:b0:3b:a3:e5:75:7b:05:e8:17:2b:77:e4:ad:53:
44:75:90:fc:63:98:ad:7e:66:31:40:5a:db:a7:d4:
62:f6:59:91:67:97:a4:7b:92:09:19:55:ab:80:84:
eb:d1:59:e7:73:ad:8c:30:19:c3:56:b3:8a:d0:52:
f6:9f:51:f2:51:f8:a8:94:db:de:04:08:08:c5:d2:
ee:92:c5:86:ff:dd:35:8f:5b:15:b1:14:1c:cd:62:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:42:78:C3:CE:9A:24:9A:D4:1E:45:5F:3E:E6:53:0A:4D:4C:B4
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:71:20:9e:2d:52:82:b5:17:a0:a7:39:64:e9:95:56:19:41:
50:b9:08:c1:69:ce:4a:33:e1:fe:d7:27:08:f4:99:d3:db:58:
1c:b6:dd:c8:ae:87:2a:4c:96:45:fe:b1:e6:e1:57:5f:d6:79:
2f:8e:9c:df:30:f9:9f:a9:5a:3c:81:1c:ba:36:cd:fa:34:73:
3a:04:39:f4:93:3e:e5:1c:e1:3b:24:b4:8c:3b:00:c7:ba:eb:
78:6d:e5:bb:11:08:a7:a5:34:2b:69:a2:34:9b:77:1e:2f:ca:
c9:b3:d5:fe:15:fc:f3:34:9c:6e:b1:ac:5b:bb:a4:1d:7f:f0:
2d:33:28:47:15:4e:df:f6:0e:87:9a:e7:f2:9b:db:21:4f:7f:
e7:35:c1:e7:27:aa:78:d9:6f:1a:0f:89:24:86:95:c6:97:9e:
fa:33:3f:e9:51:c9:f8:1e:a9:b2:47:c7:71:89:c2:82:0a:cc:
9f:b2:33:32:2b:ba:9b:1b:d2:1b:0d:75:cb:73:e4:24:db:e7:
47:cb:e0:f9:84:56:f5:bc:ac:00:5f:9c:09:75:20:10:53:31:
c0:a6:2f:27:45:38:12:81:66:78:da:e5:8f:c6:8f:b6:70:50:
ee:d9:51:2a:ab:45:3a:0a:80:1d:5f:d4:41:ff:a0:e3:5f:88:
04:6c:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 03:04:43 2025 by rpki-client