Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: luft4evGRosKgD0fW/03YtMLJ6Wa04DLdfxWCX8YTXw=
Subject key identifier: 56:44:E5:75:CE:AE:80:FB:A0:83:59:E8:C1:D2:AC:FC:75:9C:53:DE
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 2EA722F885D57DDE5CA8C9C553CB163FA553B915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 0398
Signing time: Sat 23 Aug 2025 03:31:46 +0000
Manifest this update: Sat 23 Aug 2025 03:26:46 +0000
Manifest next update: Sun 24 Aug 2025 06:23:46 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 9LXDZyYVaDvs0H6t8nwEwqksm6cAWvqmvzX88k77uRs=)
2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a7:22:f8:85:d5:7d:de:5c:a8:c9:c5:53:cb:16:3f:a5:53:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Aug 23 03:26:46 2025 GMT
Not After : Aug 24 06:23:46 2025 GMT
Subject: CN=5644E575CEAE80FBA08359E8C1D2ACFC759C53DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:b6:84:e0:f7:fc:51:c4:f5:cc:f5:43:3b:
19:b6:11:3c:3b:28:68:d1:56:8f:68:10:0e:f4:f5:
ca:26:70:ce:c1:47:9f:47:85:65:7b:46:7a:37:7a:
8b:95:af:d9:ea:50:8e:f5:f5:36:8a:04:43:2b:8c:
77:6b:3f:bf:c5:98:a8:6a:36:81:47:86:f8:2c:87:
7f:c0:a3:59:1d:6b:fc:97:0f:1c:95:94:e1:84:8b:
97:fc:a2:16:25:d9:14:3f:42:10:c4:54:7e:c9:70:
7c:9b:6e:7a:ef:2d:9a:19:c8:28:6f:da:bb:96:54:
85:f2:f8:df:a0:f7:6d:47:42:d2:ca:98:c2:ac:72:
00:92:d9:0f:1c:37:4c:9d:33:be:b4:36:56:d9:ee:
f3:e8:54:88:2c:94:ab:1c:20:6d:c9:6a:ef:ee:ea:
2d:b2:ef:f9:81:6f:0f:e0:65:43:2e:26:56:bd:3f:
d3:f1:f2:29:2a:c2:c8:9a:b7:7b:43:54:aa:b2:e5:
aa:2e:e0:c0:cf:e4:95:70:27:aa:0e:ca:07:e4:26:
69:ba:ee:67:ea:ca:c8:10:c0:78:af:73:93:52:e1:
a8:13:c9:a6:c0:ed:2a:c2:30:35:58:fc:66:df:e2:
7a:b1:fd:04:cb:9e:83:82:60:89:04:cf:d2:b0:8c:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:E5:75:CE:AE:80:FB:A0:83:59:E8:C1:D2:AC:FC:75:9C:53:DE
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b6:28:21:80:32:9a:d5:49:7d:a1:04:a7:be:df:1c:ef:56:
e7:42:81:ac:ed:44:bf:ee:71:21:25:c3:11:5f:a2:4b:cc:72:
84:da:4c:29:19:07:92:cb:c2:22:4d:93:72:51:ec:fa:71:82:
1f:d4:7c:16:4f:3f:58:d8:c6:6b:47:70:d8:a0:f7:71:d2:2b:
01:39:c1:c8:e7:28:90:79:9c:e6:90:b0:3e:0a:80:6e:92:a5:
92:94:67:d5:33:5b:5e:28:ae:c1:f6:fd:24:5b:c9:f6:d4:f6:
b1:f0:cc:ed:4a:93:1a:5a:60:f1:65:d3:26:9e:48:43:57:56:
0f:da:9c:65:72:6e:9b:f1:11:f9:eb:26:5f:b9:18:1a:51:c7:
30:26:d3:28:e6:21:22:3e:c2:5a:9b:a7:0d:73:3d:c8:ef:bc:
9c:77:21:8d:df:75:88:22:07:82:29:e2:eb:7f:90:63:8c:9f:
92:18:c5:2f:27:92:c1:11:40:54:92:49:dd:e2:0a:57:83:fd:
d5:cf:ae:5f:24:94:10:da:40:5b:db:23:40:30:67:11:5e:68:
9f:3c:1d:f5:9b:2f:30:61:31:f1:18:d7:17:24:b9:c8:65:cd:
cd:ab:fc:26:bf:a5:92:75:62:32:24:42:70:c5:27:67:7d:86:
0e:2a:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:41 2025 by rpki-client