Manifest
$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
File: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft (raw, json)
Hash identifier: FaLlvpr9WCxsVv++hKbcniQ5tGVJE0vTKYJKAnyL2lU=
Subject key identifier: 81:7F:4B:B7:B8:3B:0A:6A:4C:F0:6B:4A:A7:6D:BE:FD:61:D4:B3:86
Authority key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Certificate issuer: /CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Certificate serial: 5D98F6CC8AD35FAD3C199401DD0835966FE7BB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
Manifest number: 2E
Signing time: Wed 25 Mar 2026 06:39:10 +0000
Manifest this update: Wed 25 Mar 2026 06:34:10 +0000
Manifest next update: Thu 26 Mar 2026 09:25:10 +0000
Files and hashes: 1: AS214749.asa (hash: rtjvYN0k7vmh5PkcG3ccW4AvhB2PUVVt+8Gkfr1HOH0=)
2: 323030313a3637383a313230633a3a2f34382d3438203d3e20323134373439.roa (hash: qD58tjRXh1Sgzaanz8hHs0X4Bt+9XwLVW6v6y8GKf0Q=)
3: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl (hash: sZW7RvuGwKxDxtUV5O0HofRPI3PKvsaDah6vv55DtPw=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 09:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:98:f6:cc:8a:d3:5f:ad:3c:19:94:01:dd:08:35:96:6f:e7:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Validity
Not Before: Mar 25 06:34:10 2026 GMT
Not After : Mar 26 09:25:10 2026 GMT
Subject: CN=817F4BB7B83B0A6A4CF06B4AA76DBEFD61D4B386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:a5:ac:34:e5:5c:7c:a9:92:81:3b:f3:87:
d7:14:58:71:87:99:72:ce:97:17:17:b9:f4:86:f7:
5e:e5:74:dc:d7:b1:12:1a:e7:d1:3b:ed:a1:8f:58:
c2:c4:fc:ac:88:f4:cf:71:58:8e:0d:cc:68:56:ee:
6c:91:e0:36:a8:bb:92:0b:51:04:71:8c:ac:12:cd:
69:41:ca:5f:5b:68:f4:64:d7:11:1f:80:6b:5b:21:
e7:ef:8a:9a:a8:56:6f:f9:5c:44:fa:1b:ac:cf:7f:
a0:65:e2:78:0c:6b:dc:cf:dc:dc:6c:dd:1b:64:55:
53:8f:20:4b:b3:ff:63:11:c0:02:fd:56:90:43:22:
b5:33:39:e2:79:5d:d7:3a:8f:d6:f5:17:a6:f7:56:
18:5e:45:7d:66:db:17:f4:20:02:62:8c:77:a8:4d:
5c:03:fb:e3:04:81:4c:d9:bd:a0:fc:5e:6b:b6:85:
40:c3:bd:c4:93:67:1b:c3:19:bc:04:38:2f:6d:d2:
11:a6:f8:bd:a1:ad:04:8c:c9:96:03:3d:bb:e6:77:
d7:81:ea:0d:c4:4b:f7:70:b8:a2:0e:45:4f:29:e9:
4e:7f:a5:98:c4:07:c0:fe:2c:17:7d:ef:3e:be:11:
77:86:f4:58:59:59:8a:e9:46:f6:a9:9e:6c:05:80:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7F:4B:B7:B8:3B:0A:6A:4C:F0:6B:4A:A7:6D:BE:FD:61:D4:B3:86
X509v3 Authority Key Identifier:
keyid:35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9d:28:3e:92:a4:40:c3:34:52:3c:b8:98:b1:e8:cb:cc:8b:
71:ba:4d:1c:4e:e9:ca:68:a6:28:ce:19:c6:ea:34:93:93:c6:
08:67:da:d9:48:d1:a3:04:31:97:a6:8f:a5:99:10:74:ea:63:
3a:1c:94:6a:0e:f4:9d:af:26:59:7a:19:db:9b:5e:b6:31:46:
8e:d5:48:b0:60:67:ed:92:44:62:21:f0:6d:ff:7f:92:4d:7d:
b7:24:33:dc:fd:0b:56:45:8b:6d:f0:2b:ce:55:49:0b:9f:80:
44:e9:97:e9:b3:c1:49:23:37:e0:fb:fa:b4:ff:22:21:8b:50:
e0:85:9b:ae:a9:fa:0f:bc:8d:5b:97:da:cf:5d:31:ee:bc:30:
f6:9e:25:bb:42:b1:a4:e2:6f:a0:75:33:ca:07:e2:a8:16:20:
dc:8c:3b:98:8b:d1:cb:94:54:3f:97:aa:b3:d2:39:d7:ac:ef:
b9:bd:e7:37:06:0c:be:bc:60:fc:c9:4c:8f:7a:e7:7d:8f:16:
45:78:18:49:0c:83:9c:91:ce:b8:6d:b0:2f:a7:6c:30:3b:be:
f7:6d:83:18:1d:03:38:76:11:33:c2:61:73:0b:29:00:fb:c0:
5f:b8:2e:58:ec:88:0d:6a:fa:8e:80:8b:8a:fc:34:95:42:f0:
14:24:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:34 2026 by rpki-client