Manifest
$ rpki-client -vvvf rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
File: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft (raw, json)
Hash identifier: I4ZnF5pfE21pS6mOchf1jMR4uIy+hA3pM074CTTy1NU=
Subject key identifier: A8:91:5D:BB:98:22:82:CC:37:78:00:BD:15:5D:67:2A:8B:A7:93:67
Authority key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Certificate issuer: /CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Certificate serial: 27F9FE4C453936CFD8043723E0123ECE2719AE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject info access: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
Manifest number: 0123
Signing time: Wed 23 Sep 2026 09:34:57 +0000
Manifest this update: Wed 23 Sep 2026 09:29:57 +0000
Manifest next update: Thu 24 Sep 2026 11:13:57 +0000
Files and hashes: 1: AS214749.asa (hash: P1PAJj8FCISVY9D7d5RHoczjCsEinVsl6zRTS2N8cWk=)
2: 354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl (hash: M6lyYNt+ieFOC5SgpL5PEv5xvUsCMxcI6kkA193g+KE=)
3: 323030313a3637383a313230633a3a2f34382d3438203d3e20323134373439.roa (hash: qD58tjRXh1Sgzaanz8hHs0X4Bt+9XwLVW6v6y8GKf0Q=)
Validation: OK
Signature path: rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f9:fe:4c:45:39:36:cf:d8:04:37:23:e0:12:3e:ce:27:19:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Validity
Not Before: Sep 23 09:29:57 2026 GMT
Not After : Sep 24 11:13:57 2026 GMT
Subject: CN=A8915DBB982282CC377800BD155D672A8BA79367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:0a:bb:96:2c:ad:c7:4a:e4:4e:70:35:f6:
d9:01:54:fc:94:6e:4b:05:16:24:a8:0b:c8:fc:5c:
c7:3f:0a:36:b4:7f:fc:fc:22:27:d1:96:9d:7f:19:
f7:46:a6:55:12:64:5c:14:81:e0:b3:2b:77:e7:99:
34:35:4e:ef:c2:47:22:dc:dc:d0:ea:1a:f9:4a:85:
76:ce:f0:50:93:c9:da:ee:6d:ec:e1:2a:3f:41:81:
39:4d:eb:3f:e4:8b:35:a1:59:65:11:ba:6d:36:7f:
ba:20:97:63:35:3e:e3:d1:1e:0b:11:e4:69:d4:c4:
40:e2:47:35:82:f8:08:a6:84:a0:a6:8d:7a:1d:0f:
4a:8b:e3:d4:ea:32:04:f2:8e:b1:96:41:04:eb:6a:
16:48:ec:1b:2c:ff:7f:98:dc:0a:42:69:7b:41:ac:
be:a3:f8:7d:b6:be:f0:ac:24:ce:5d:1a:c4:74:5d:
3d:3b:f8:89:cf:dd:ae:5e:c6:68:5f:f3:22:81:d0:
91:0b:ae:1d:b4:00:56:c1:9f:88:2f:2a:9d:cb:87:
94:51:af:4e:9f:2c:16:0a:c9:ea:86:c8:e3:54:97:
4f:2f:a5:96:03:e9:f4:53:16:12:df:3b:89:97:4f:
8d:95:a2:24:7a:15:a3:57:6a:e1:a8:21:0b:a9:0d:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:91:5D:BB:98:22:82:CC:37:78:00:BD:15:5D:67:2A:8B:A7:93:67
X509v3 Authority Key Identifier:
keyid:35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:e1:ed:d8:f7:28:af:e0:b9:9b:33:71:4c:63:1a:ec:dd:
8f:31:19:bb:05:2a:eb:19:b4:7c:e1:71:f0:c1:19:52:6c:24:
87:df:af:37:15:50:42:92:0f:2b:1e:d4:ca:a0:1c:9d:f6:6d:
5e:1f:d1:c3:0c:a2:3b:53:c2:72:dc:8a:d3:c2:a0:11:59:9a:
27:98:bd:29:00:06:8c:ef:ca:92:24:c4:60:fd:c0:df:19:4d:
8f:7c:77:37:2a:53:5d:56:9b:e0:cf:51:4c:10:9d:9b:b0:18:
28:ce:5d:09:ba:2d:0f:5e:98:26:46:a8:86:17:e2:d1:37:14:
41:64:b1:fe:e3:5d:0c:6a:9b:cf:eb:5e:8b:d3:48:e6:27:4d:
69:55:e0:bf:b7:cf:41:af:a7:04:7e:0e:78:b6:69:07:c1:bd:
51:92:4d:72:2a:b8:88:27:7f:9e:62:e3:f9:e1:73:05:91:27:
a1:3c:d2:14:5e:04:9b:f8:5d:0c:25:9a:c0:3f:c9:03:6f:e8:
e9:a8:49:1a:b7:af:9d:6b:85:1f:82:a8:d7:4b:ce:8f:0a:ab:
82:40:71:f7:a4:8b:69:2f:3a:ae:2c:7c:1d:e8:cd:0f:22:8c:
99:3b:d5:67:02:a8:0e:84:ab:84:1a:4a:7c:f8:95:44:1a:61:
e0:f7:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:28:28 2026 by rpki-client