
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: MyLAQ0jTdCXL+ZPG2afXSJay2r2OZ+Dj7T/4NaAARpE=
Subject key identifier: 29:09:93:5B:34:7F:1E:28:D5:54:AF:D3:73:B2:B0:99:42:F3:84:6B
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 43B0DC1506EC9D35702EDEC2AFA0FEBBA242F9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 0584
Signing time: Fri 22 Aug 2025 23:13:29 +0000
Manifest this update: Fri 22 Aug 2025 23:08:29 +0000
Manifest next update: Sat 23 Aug 2025 23:46:29 +0000
Files and hashes: 1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: Y/rF75HVLOu++nVDssn/3ddRG/cy0CTmy8qxyuACass=)
2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b0:dc:15:06:ec:9d:35:70:2e:de:c2:af:a0:fe:bb:a2:42:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Aug 22 23:08:29 2025 GMT
Not After : Aug 23 23:46:29 2025 GMT
Subject: CN=2909935B347F1E28D554AFD373B2B09942F3846B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:d8:af:8c:4a:df:3a:0a:18:b0:b7:e6:5d:
a4:16:5e:12:df:5a:87:83:38:ee:94:ab:bf:21:98:
43:29:92:01:d5:83:2e:02:cd:6a:da:72:30:e1:7d:
45:04:5a:d5:bf:24:09:72:27:1e:9a:f7:f5:67:3c:
0f:81:cf:26:9b:02:a5:b3:1d:dd:5a:cd:0d:59:93:
f8:f9:52:47:f5:76:af:39:61:c2:a5:77:bd:91:4d:
6d:76:08:8c:da:4b:5d:1f:63:94:19:0a:6e:1f:e2:
fe:e5:eb:e5:2c:20:7f:e4:a7:4f:c5:8a:78:b2:91:
de:04:df:d8:28:ae:6d:51:ff:20:ed:be:92:48:db:
19:54:9f:c2:0c:10:15:ba:27:ef:a5:b0:fc:b1:1d:
fc:ff:f1:2d:2f:64:5f:ef:4a:e6:33:ec:e7:94:53:
92:36:01:12:25:db:77:d2:a1:8a:07:8f:62:03:76:
3d:2f:29:fa:0a:c5:32:91:45:8a:86:0d:27:6d:a9:
bc:d5:fd:26:f6:cd:6b:3d:33:ba:2e:1c:78:69:4a:
ea:7b:11:32:35:9c:8b:54:fc:fb:78:bd:26:75:ac:
6a:55:97:d7:b2:59:df:b9:20:24:51:6d:28:36:5a:
dc:92:ba:c2:8f:0a:ba:bc:62:8f:74:f7:ff:dd:66:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:09:93:5B:34:7F:1E:28:D5:54:AF:D3:73:B2:B0:99:42:F3:84:6B
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:02:82:a6:75:a2:24:8c:02:46:22:fc:69:5b:cc:e0:db:
f1:8e:0b:a1:44:0a:84:a0:7d:02:88:f2:e1:2d:58:62:69:db:
ac:d0:c4:99:5c:a4:9d:fc:fa:24:b7:3e:c9:0f:fb:b7:92:ba:
73:8e:4e:5d:50:94:d3:b4:7c:bb:ea:6f:fb:01:cd:2e:76:8b:
2e:f3:f6:37:e8:53:f6:a9:04:6f:01:db:e3:c0:43:b2:20:59:
77:7f:ef:80:ea:b7:61:a8:b5:9d:fb:63:4e:e0:52:61:bf:92:
79:8f:9c:c4:9a:9c:84:03:65:83:86:84:68:32:5b:ad:37:cc:
e4:0d:c0:43:7d:b8:7f:c0:68:90:90:89:1d:f9:d1:46:3c:72:
8b:10:a1:f0:eb:ba:58:c2:dd:52:85:1c:4d:d6:f0:83:62:b5:
20:14:91:5f:0c:76:9d:36:5f:83:9f:82:31:b9:e4:f5:cf:a2:
37:f9:7c:f7:ca:8d:0b:bd:9e:f3:ca:8a:df:87:aa:d6:8f:67:
1a:68:d8:cd:55:e9:99:2f:70:32:6d:7c:14:6b:48:07:90:62:
2f:b8:f1:8d:02:8f:12:13:69:ff:5c:dc:ed:a4:bb:83:90:5c:
9e:68:d0:6d:2b:f2:6a:de:a1:38:69:8b:aa:d8:47:3c:bb:e8:
db:a5:ac:0e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQ7DcFQbsnTVwLt7Cr6D+u6JC+bYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTcxNWE3YzQyNDNkZmQ1NjA4YWM3YzU5NjIwNTUxMjVi
OTRkMTc2MzAeFw0yNTA4MjIyMzA4MjlaFw0yNTA4MjMyMzQ2MjlaMDMxMTAvBgNV
BAMTKDI5MDk5MzVCMzQ3RjFFMjhENTU0QUZEMzczQjJCMDk5NDJGMzg0NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1edivjErfOgoYsLfmXaQWXhLf
WoeDOO6Uq78hmEMpkgHVgy4CzWracjDhfUUEWtW/JAlyJx6a9/VnPA+BzyabAqWz
Hd1azQ1Zk/j5Ukf1dq85YcKld72RTW12CIzaS10fY5QZCm4f4v7l6+UsIH/kp0/F
iniykd4E39gorm1R/yDtvpJI2xlUn8IMEBW6J++lsPyxHfz/8S0vZF/vSuYz7OeU
U5I2ARIl23fSoYoHj2IDdj0vKfoKxTKRRYqGDSdtqbzV/Sb2zWs9M7ouHHhpSup7
ETI1nItU/Pt4vSZ1rGpVl9eyWd+5ICRRbSg2WtySusKPCrq8Yo909//dZvQNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKQmTWzR/HijVVK/Tc7KwmULzhGswHwYDVR0j
BBgwFoAUpxWnxCQ9/VYIrHxZYgVRJblNF2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvQTcxNUE3QzQyNDNERkQ1NjA4QUM3QzU5NjIwNTUxMjVCOTREMTc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3B4V254Q1E5X1ZZSXJIeFpZZ1ZSSmJs
TkYyTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS9BNzE1QTdDNDI0M0RGRDU2MDhB
QzdDNTk2MjA1NTEyNUI5NEQxNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO58CgqZ1oiSMAkYi/Glb
zODb8Y4LoUQKhKB9Aojy4S1YYmnbrNDEmVyknfz6JLc+yQ/7t5K6c45OXVCU07R8
u+pv+wHNLnaLLvP2N+hT9qkEbwHb48BDsiBZd3/vgOq3Yai1nftjTuBSYb+SeY+c
xJqchANlg4aEaDJbrTfM5A3AQ324f8BokJCJHfnRRjxyixCh8Ou6WMLdUoUcTdbw
g2K1IBSRXwx2nTZfg5+CMbnk9c+iN/l898qNC72e88qK34eq1o9nGmjYzVXpmS9w
Mm18FGtIB5BiL7jxjQKPEhNp/1zc7aS7g5BcnmjQbSvyat6hOGmLqthHPLvo26Ws
Dg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:54 2025 by rpki-client