
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: oNmfgaWEpVii2ABGvQmd8q9EODXVQFP4uSHOFngqEOE=
Subject key identifier: 47:02:2E:F8:A0:DB:31:A0:9C:B9:63:C2:F2:4B:E5:B2:E0:50:7C:F8
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 3381118DDCF5D6DFAFE4245538DFE0427D0E05B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 027B
Signing time: Sun 31 Aug 2025 03:33:37 +0000
Manifest this update: Sun 31 Aug 2025 03:28:37 +0000
Manifest next update: Mon 01 Sep 2025 04:31:37 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: enIH+G3Is0Y6VAPVU5xqFw/M04Fv1Nv4x/2clfkFqbI=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Sep 2025 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:81:11:8d:dc:f5:d6:df:af:e4:24:55:38:df:e0:42:7d:0e:05:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Aug 31 03:28:37 2025 GMT
Not After : Sep 1 04:31:37 2025 GMT
Subject: CN=47022EF8A0DB31A09CB963C2F24BE5B2E0507CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:36:05:05:ab:2a:73:49:23:b4:2a:fa:0c:
75:ec:5a:e3:e7:fd:da:23:9f:38:6a:9b:35:d9:d3:
f9:1c:26:d0:d7:09:0e:e6:a3:45:00:03:d2:8d:c4:
1e:76:0c:37:84:cb:7c:73:cb:10:32:45:c0:6b:7e:
56:c5:63:40:5c:c7:cb:09:78:7e:45:61:93:3c:cf:
73:aa:a8:2e:e4:94:25:2b:c3:2f:90:e8:23:e0:e2:
ed:0e:e2:9d:eb:47:2e:4e:ca:e9:4e:a7:79:dd:78:
2f:83:a1:3b:f0:27:33:55:13:7d:2c:c4:02:62:df:
b5:13:4a:f5:fa:2c:69:ac:dd:40:15:9b:ba:a7:28:
8c:ab:e5:b7:70:86:56:9f:59:a9:a1:bb:c1:92:7c:
44:d6:d7:34:55:50:4c:aa:bb:85:5b:0c:e6:ac:e0:
62:a4:19:62:d8:83:82:26:be:2b:db:5b:6c:0b:0a:
2d:0b:82:d5:b4:d3:d1:64:21:24:a7:74:14:66:2a:
6d:12:01:60:c3:71:2a:ae:23:c5:ed:a7:91:a7:a3:
9e:91:ae:c6:53:2d:48:d0:91:09:11:9b:29:02:80:
f6:97:7e:1c:74:2f:ef:86:37:27:37:ef:b0:a5:76:
e4:37:78:20:1b:cf:f1:63:c0:40:83:64:9a:72:55:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:2E:F8:A0:DB:31:A0:9C:B9:63:C2:F2:4B:E5:B2:E0:50:7C:F8
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:41:43:26:be:a2:2e:a9:5b:a3:4e:ad:78:2f:51:6b:01:87:
eb:c4:96:93:d8:a2:ba:26:05:05:97:03:0e:74:16:0e:d3:6c:
77:1a:38:04:da:8e:99:2a:9b:c1:c8:cc:e3:f3:14:9c:40:7f:
79:9e:5c:64:d7:0b:55:8a:c6:bf:5f:0c:ae:91:73:5d:a8:90:
6e:da:98:64:3f:77:85:8b:10:4f:1a:12:f9:3e:2d:d4:12:59:
e0:85:a2:49:84:c0:57:62:c3:a6:fe:c2:f9:1f:81:29:8b:48:
09:70:47:c1:38:28:f3:98:48:0a:cd:b7:0c:ab:21:3f:0f:d3:
72:72:8d:2a:fc:62:7d:6c:c5:68:c2:01:83:d9:b4:f2:3d:eb:
f1:dc:f8:07:05:f5:c6:57:2a:d2:a5:72:00:cf:ee:1f:35:ac:
b8:1a:1f:85:03:9b:69:5d:5f:9a:af:d9:4c:18:9b:35:bd:83:
e6:e2:a1:56:42:bc:6c:bc:2a:55:d2:21:f7:b0:32:e7:cd:25:
5f:53:ab:fe:b7:9c:37:39:25:d2:3e:d7:80:56:a6:00:dd:59:
6d:5b:e0:30:60:22:e5:be:08:a1:81:c9:c7:da:07:38:73:b0:
87:16:5d:9d:96:ca:ae:77:25:5c:01:0e:38:5e:55:33:2d:75:
a0:ae:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 18:02:35 2025 by rpki-client