Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File: E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier: wFgNvHjB8i7qO2UaUtT5TpDFSPIiccgp6N1/EXFD2nk=
Subject key identifier: 0B:D4:23:CD:9C:98:0B:AB:57:0F:0A:28:F4:57:BF:0A:99:D2:88:F7
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer: /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial: 6A508EC371764BD9FADFE62F6D168701532214D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number: 52
Signing time: Sat 25 Oct 2025 10:02:34 +0000
Manifest this update: Sat 25 Oct 2025 09:57:34 +0000
Manifest next update: Sun 26 Oct 2025 10:34:34 +0000
Files and hashes: 1: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: An3CweW8NiCtY6cldHWldJR87tNOXGSYsW+GmES0VLo=)
2: AS207529.asa (hash: vTGMJzbXnGMaDD7uLDFSeTqwL6szVF4VwYMG0FJf7hs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:50:8e:c3:71:76:4b:d9:fa:df:e6:2f:6d:16:87:01:53:22:14:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Validity
Not Before: Oct 25 09:57:34 2025 GMT
Not After : Oct 26 10:34:34 2025 GMT
Subject: CN=0BD423CD9C980BAB570F0A28F457BF0A99D288F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:ae:63:74:30:1a:fd:d6:52:6f:35:9e:a4:
f3:ff:0e:23:41:23:9b:ed:b3:4e:ea:7a:7b:fd:bd:
b5:3b:e6:f9:2e:6b:38:2a:f0:da:80:82:a7:c1:56:
72:01:91:55:cc:11:9b:fe:14:5e:a9:0e:6c:32:e3:
82:a3:f5:ce:10:9d:e7:92:54:c6:cf:d4:9e:44:af:
be:95:8f:e6:b8:94:b2:d6:ec:6a:99:36:17:cc:fd:
c7:3a:fd:e1:0d:10:17:09:14:82:23:be:52:e9:f9:
32:e2:29:5e:78:db:76:87:80:8d:6d:8b:97:31:5d:
60:bf:7b:e7:7e:48:e5:56:70:39:ae:74:1b:17:0b:
3d:51:64:6f:ab:f7:0c:1b:4f:7f:08:97:03:5b:57:
29:0d:e6:8c:19:cd:83:1b:71:fc:f6:0a:25:46:ac:
89:8b:a3:74:50:63:34:7e:5a:2e:59:25:50:46:f9:
dd:c4:74:ad:92:2e:b8:a1:24:de:ca:f3:04:86:f4:
05:35:a1:d2:aa:37:e1:95:a9:36:e7:cd:ea:e9:43:
a1:3f:71:58:d4:e5:b2:9a:d7:80:9c:2c:2b:ca:87:
6f:75:2d:40:f8:46:39:fc:ad:6f:90:e8:92:a4:6c:
6d:13:31:1f:1c:f6:cf:98:aa:39:87:2c:ec:46:aa:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D4:23:CD:9C:98:0B:AB:57:0F:0A:28:F4:57:BF:0A:99:D2:88:F7
X509v3 Authority Key Identifier:
keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:58:14:9e:82:79:d1:c4:8d:3a:d3:86:60:ff:fd:a5:12:fa:
4d:23:f2:21:ae:2e:1c:8a:68:cb:cb:fc:0f:0f:bf:27:47:1c:
72:9c:18:81:4e:66:16:0c:0a:3e:ce:8b:52:6d:51:15:2c:45:
51:a8:9d:88:a7:f5:0c:9d:79:59:d2:b7:22:af:19:e2:29:68:
93:29:fb:76:cf:c5:1e:dc:e6:df:95:23:a7:d8:be:92:86:3b:
62:e3:ab:63:33:d7:54:a0:13:d3:72:81:84:60:5e:03:d0:1e:
9c:6b:78:f3:4c:66:39:a9:3e:b1:eb:f4:3b:af:46:bd:05:3d:
ba:1f:57:b9:4a:18:1c:70:8f:2c:78:0a:96:15:9d:6d:29:ee:
a8:32:37:61:08:0a:02:5b:85:23:7f:ce:53:81:42:7d:f3:be:
31:36:a3:be:c2:01:2d:fd:22:53:63:1e:45:73:e6:40:f5:c6:
62:83:ff:83:9d:18:73:ae:b8:cc:44:b5:5c:76:3e:2a:85:c8:
c6:76:43:6f:d0:90:02:9e:e7:4b:87:0b:ee:9c:a2:d7:b2:f0:
dc:69:f4:89:01:bb:75:01:9e:d6:53:cc:52:53:f4:11:a5:83:
bb:1d:c4:4a:9b:af:b7:e9:ea:64:4b:c6:3b:4c:cf:36:c8:21:
ba:e5:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:05:18 2025 by rpki-client