
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: FewcHUEPWw8aU9uZYRyJaZKwdh/miYas2ebyaLk9FWU=
Subject key identifier: FA:17:C3:E1:41:13:64:1F:D8:93:B5:48:06:8B:42:6B:37:8F:0A:E6
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 71A65C4CF13B34493A0F8188C2A94A827BD9822E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 03E4
Signing time: Sun 19 Oct 2025 04:05:16 +0000
Manifest this update: Sun 19 Oct 2025 04:00:16 +0000
Manifest next update: Mon 20 Oct 2025 05:47:16 +0000
Files and hashes: 1: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: y625GcMvaYfPuCSc2SxCKPbTadTbyxqcQu/apI8oJig=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a6:5c:4c:f1:3b:34:49:3a:0f:81:88:c2:a9:4a:82:7b:d9:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Oct 19 04:00:16 2025 GMT
Not After : Oct 20 05:47:16 2025 GMT
Subject: CN=FA17C3E14113641FD893B548068B426B378F0AE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:ee:20:9c:76:9f:e4:e5:d0:fb:8c:c9:1f:
99:c8:1e:05:a1:4a:57:46:c2:6c:65:95:39:f5:63:
7e:d9:1a:26:fb:1b:94:df:84:5f:ac:2d:fe:d7:67:
f6:81:1e:bd:9b:1e:87:1c:79:4a:0d:33:55:a6:d6:
37:dc:28:ef:33:3a:f9:61:77:8e:58:85:6f:b9:50:
a3:0b:25:20:c5:df:30:f0:0a:83:1d:65:d5:b9:da:
1f:58:93:71:f0:71:22:c7:1b:50:00:e6:05:9e:20:
2a:15:c7:a4:52:8f:be:be:47:79:e7:0b:d5:ca:fe:
5f:a1:12:90:38:64:1e:d9:b7:d5:57:47:2e:bf:69:
a5:33:52:79:a1:4e:c2:e6:89:4b:e4:0c:c1:f4:16:
b8:c7:4b:54:cd:84:c8:db:30:fb:c8:fc:95:79:ec:
d2:5e:ec:d0:31:8b:98:1b:f2:c6:78:5b:70:1c:e2:
fe:5d:3b:dc:c1:70:b6:ce:f0:b2:54:3a:b3:db:e8:
06:97:06:96:aa:d9:20:c3:4b:29:e5:ad:58:dc:80:
40:31:44:d9:31:17:65:36:0c:cf:70:68:0d:af:2f:
60:a6:eb:1b:c9:49:81:7e:7d:58:ce:13:c9:1f:39:
ec:b7:0e:56:c1:28:d2:5f:d4:3f:36:a3:ae:68:4c:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:C3:E1:41:13:64:1F:D8:93:B5:48:06:8B:42:6B:37:8F:0A:E6
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:59:bd:08:43:8f:6a:67:b9:f8:fd:b9:9c:ad:4f:ef:ef:ad:
90:9d:ba:22:72:d8:a0:f9:04:76:48:7a:6c:6e:58:e0:a2:95:
5d:12:4b:81:8a:0b:93:be:0a:5f:ab:9f:66:3d:c1:16:24:9f:
3a:f5:04:84:d9:a6:87:24:25:db:89:25:65:30:77:24:78:d8:
e1:2d:f9:83:e9:e9:e2:ef:1a:28:ab:d9:c1:95:83:14:37:76:
db:7e:16:97:60:66:a8:02:93:c0:7f:36:2b:cc:3b:39:01:31:
b3:d0:e8:47:8d:32:24:de:cc:92:b2:5d:39:91:26:e3:50:03:
5b:ab:c5:be:d2:5a:99:d6:d7:b4:8a:03:36:ac:d8:e0:6d:df:
c8:91:cb:e6:0e:56:6c:79:a8:16:a7:27:4b:a8:b2:9c:0d:cf:
b3:95:b5:9e:a0:3e:a4:8f:7b:52:08:7d:b8:fe:ba:24:ba:c8:
77:40:fa:1c:c9:61:38:ab:df:d5:3a:53:3e:66:ce:f5:26:98:
8c:7d:06:32:7f:7d:6a:fd:e7:28:8f:70:6f:6d:78:af:f9:ec:
b9:89:62:63:88:af:7c:04:54:4c:c8:bb:b9:b3:82:86:60:b9:
97:53:8b:a0:40:6e:0c:8e:4e:be:5d:be:13:8b:11:4a:7b:6a:
ff:b6:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:58 2025 by rpki-client