Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft
File: 0452A7B37267CE42DC95A34621BC7026A222B005.mft (raw, json)
Hash identifier: GmQsy/T4OsX5NYqngo9FlIuZdbF/gd6Qwp/NgAO+eI4=
Subject key identifier: 7B:A7:8E:64:D0:CB:7B:73:34:20:5B:01:00:F1:20:B9:15:31:9A:84
Authority key identifier: 04:52:A7:B3:72:67:CE:42:DC:95:A3:46:21:BC:70:26:A2:22:B0:05
Certificate issuer: /CN=0452a7b37267ce42dc95a34621bc7026a222b005
Certificate serial: 0891BDA61E307D2D7B012C0A2B254D13BC0B8838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft
Manifest number: 1F
Signing time: Wed 05 Nov 2025 10:48:52 +0000
Manifest this update: Wed 05 Nov 2025 10:43:51 +0000
Manifest next update: Thu 06 Nov 2025 13:03:51 +0000
Files and hashes: 1: 0452A7B37267CE42DC95A34621BC7026A222B005.crl (hash: C/EIsHFZ56CIOdRP1bcA+3MGLEYaHBWEBBF7eKPN2S0=)
2: AS204518.asa (hash: 6ZPueaHQ51DeRfsY/NQlxbJfSs8ftM3igYNB7N59JcA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 13:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:91:bd:a6:1e:30:7d:2d:7b:01:2c:0a:2b:25:4d:13:bc:0b:88:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0452a7b37267ce42dc95a34621bc7026a222b005
Validity
Not Before: Nov 5 10:43:51 2025 GMT
Not After : Nov 6 13:03:51 2025 GMT
Subject: CN=7BA78E64D0CB7B7334205B0100F120B915319A84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:9b:04:c1:27:1b:38:f0:5f:26:e1:63:5e:
ed:74:5b:b4:8d:22:33:8f:84:c4:9f:23:0a:5a:74:
64:49:d1:0a:09:3a:cc:ca:ab:f9:65:e6:59:b1:0b:
c6:6e:52:d9:14:82:40:c5:1b:0e:59:c0:26:40:8d:
71:a6:3a:2a:c0:10:77:3a:5a:0e:69:c6:a9:99:10:
30:ee:cb:94:be:ac:d1:f8:6e:2e:19:f5:dd:7a:29:
ba:67:90:05:28:b8:94:52:ab:f6:bd:d2:2c:5d:2e:
ce:d7:51:34:73:69:03:8d:71:3f:eb:34:b6:31:2b:
1f:c0:51:5d:2e:6f:ac:ac:48:9e:e4:16:30:dc:40:
bc:17:63:7e:60:82:3b:15:87:69:45:b3:c1:65:9c:
7f:54:5f:60:62:4a:d8:3f:7e:56:83:bc:1a:68:eb:
ae:10:fb:39:45:0a:44:12:36:0a:57:aa:e6:9e:e3:
75:f2:37:e1:1e:2c:4c:36:f2:32:a9:7c:fd:27:5b:
95:58:d1:ad:da:d1:1d:b9:a9:d2:c6:4f:25:ef:23:
53:70:c0:78:dd:cd:f2:20:84:78:64:68:a9:16:f2:
ac:d8:31:17:93:68:fc:b3:7b:07:de:2e:f6:bb:26:
ca:a3:22:bb:ea:6d:42:a1:27:c7:ff:66:7c:62:fd:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:8E:64:D0:CB:7B:73:34:20:5B:01:00:F1:20:B9:15:31:9A:84
X509v3 Authority Key Identifier:
keyid:04:52:A7:B3:72:67:CE:42:DC:95:A3:46:21:BC:70:26:A2:22:B0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:34:24:f8:02:0c:be:4f:ae:ed:ab:38:b1:88:f7:2e:a3:67:
f3:fc:03:8e:a1:46:5f:5f:b2:6b:4b:8f:16:2d:a4:3f:ee:8e:
09:e4:9e:d0:79:f9:1a:2b:f6:3c:54:0f:73:03:af:cf:88:43:
3c:87:77:d8:a9:c0:76:e3:20:14:98:9f:09:ae:8c:ba:af:5d:
02:90:5a:32:7b:f8:8f:3f:d2:96:35:fe:9e:dd:fc:9e:fd:89:
2c:b8:0c:e0:2e:cb:ce:45:93:53:9e:05:d4:a4:e8:97:85:da:
81:91:f5:46:db:d6:12:c8:4b:6e:b3:2e:82:90:e8:6a:52:32:
b2:a3:e0:e8:3e:62:c7:bc:b8:e2:5f:1b:64:41:bf:d4:14:2e:
05:e0:3c:d0:13:4c:f5:3a:3f:94:62:6c:20:8c:f0:a7:b2:43:
31:7f:60:19:08:41:ca:aa:1c:40:9f:c0:46:ee:ac:c5:1c:df:
21:4e:da:2d:32:74:76:cc:8e:56:98:fe:ef:be:ab:41:9f:5d:
c9:e9:3d:98:55:37:34:a8:83:7a:b1:06:a0:15:c2:99:14:30:
41:ea:54:84:8c:eb:9f:ae:3b:72:a6:af:99:c2:6e:f9:3e:41:
2c:a9:c9:71:1b:d4:4e:e9:38:ca:9e:9e:0a:5b:d0:7a:45:b6:
e1:bb:f9:72
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCJG9ph4wfS17ASwKKyVNE7wLiDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ1MmE3YjM3MjY3Y2U0MmRjOTVhMzQ2MjFiYzcwMjZh
MjIyYjAwNTAeFw0yNTExMDUxMDQzNTFaFw0yNTExMDYxMzAzNTFaMDMxMTAvBgNV
BAMTKDdCQTc4RTY0RDBDQjdCNzMzNDIwNUIwMTAwRjEyMEI5MTUzMTlBODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkZsEwScbOPBfJuFjXu10W7SN
IjOPhMSfIwpadGRJ0QoJOszKq/ll5lmxC8ZuUtkUgkDFGw5ZwCZAjXGmOirAEHc6
Wg5pxqmZEDDuy5S+rNH4bi4Z9d16KbpnkAUouJRSq/a90ixdLs7XUTRzaQONcT/r
NLYxKx/AUV0ub6ysSJ7kFjDcQLwXY35ggjsVh2lFs8FlnH9UX2BiStg/flaDvBpo
664Q+zlFCkQSNgpXquae43XyN+EeLEw28jKpfP0nW5VY0a3a0R25qdLGTyXvI1Nw
wHjdzfIghHhkaKkW8qzYMReTaPyzewfeLva7JsqjIrvqbUKhJ8f/Znxi/fpPAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUe6eOZNDLe3M0IFsBAPEguRUxmoQwHwYDVR0j
BBgwFoAUBFKns3JnzkLclaNGIbxwJqIisAUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj
MjVkLzIvMDQ1MkE3QjM3MjY3Q0U0MkRDOTVBMzQ2MjFCQzcwMjZBMjIyQjAwNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JGS25zM0puemtMY2xhTkdJYnh3SnFJ
aXNBVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00
ZmU1LTRlNjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMi8wNDUyQTdCMzcyNjdDRTQyREM5
NUEzNDYyMUJDNzAyNkEyMjJCMDA1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTQk+AIMvk+u7as4sYj3
LqNn8/wDjqFGX1+ya0uPFi2kP+6OCeSe0Hn5Giv2PFQPcwOvz4hDPId32KnAduMg
FJifCa6Muq9dApBaMnv4jz/SljX+nt38nv2JLLgM4C7LzkWTU54F1KTol4XagZH1
RtvWEshLbrMugpDoalIysqPg6D5ix7y44l8bZEG/1BQuBeA80BNM9To/lGJsIIzw
p7JDMX9gGQhByqocQJ/ARu6sxRzfIU7aLTJ0dsyOVpj+776rQZ9dyek9mFU3NKiD
erEGoBXCmRQwQepUhIzrn647cqavmcJu+T5BLKnJcRvUTuk4yp6eClvQekW24bv5
cg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:44:26 2025 by rpki-client