Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft
File: 822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft (raw, json)
Hash identifier: uzGPFv+G0NR7isSAPl/Rb6UJb4AID/bF/WPueUKNl7w=
Subject key identifier: 9E:C3:E6:B7:01:87:9B:94:96:4C:C3:DA:B4:A5:F9:21:49:3D:2E:7F
Authority key identifier: 82:2F:2B:F2:6D:16:06:B4:3A:2F:49:92:E5:B0:84:03:07:D9:F4:F9
Certificate issuer: /CN=822f2bf26d1606b43a2f4992e5b0840307d9f4f9
Certificate serial: 54AFE3A00914342AF651143E279DA26973050AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi8r8m0WBrQ6L0mS5bCEAwfZ9Pk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft
Manifest number: 13
Signing time: Fri 22 Aug 2025 23:02:09 +0000
Manifest this update: Fri 22 Aug 2025 22:57:09 +0000
Manifest next update: Sun 24 Aug 2025 02:34:09 +0000
Files and hashes: 1: 822F2BF26D1606B43A2F4992E5B0840307D9F4F9.crl (hash: aP1NFgopDjY11jsP9XRmD3LuWVisWptWlcbjCuRJlFo=)
2: AS206604.asa (hash: pwe/TbjmllBDjkdxdHKo2YIRLYqdURxhiq38hKKZKg4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.crl
rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi8r8m0WBrQ6L0mS5bCEAwfZ9Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:af:e3:a0:09:14:34:2a:f6:51:14:3e:27:9d:a2:69:73:05:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f2bf26d1606b43a2f4992e5b0840307d9f4f9
Validity
Not Before: Aug 22 22:57:09 2025 GMT
Not After : Aug 24 02:34:09 2025 GMT
Subject: CN=9EC3E6B701879B94964CC3DAB4A5F921493D2E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:56:cc:99:22:c7:94:89:9c:0f:57:8a:18:
b5:86:c3:1f:45:2b:81:7c:f3:00:d3:73:16:ac:c7:
47:46:d5:d4:b8:55:4f:7f:63:27:14:5d:81:03:82:
cd:8c:71:ff:ca:50:f8:ca:86:5e:24:64:76:3f:1c:
2b:72:9f:df:2d:4b:87:29:ad:01:61:a5:85:ef:d4:
62:14:b1:c0:65:87:b4:3a:af:77:0b:eb:64:46:d2:
29:b9:64:3c:2e:9c:d8:77:2d:14:cc:8b:6c:fc:51:
2f:61:c9:fd:4d:56:76:cb:3e:91:60:78:95:de:9f:
76:07:61:95:96:63:f9:50:cd:d5:0c:d0:50:80:67:
6e:41:46:89:bc:cf:50:27:1c:a6:df:38:e8:89:89:
13:24:e7:da:14:2f:a2:71:73:59:73:a1:21:e0:54:
cf:36:6f:53:12:da:7c:3a:2b:2e:84:75:4e:fa:74:
0e:0e:f4:b4:b5:e9:84:24:d9:f1:a0:e7:10:d0:79:
2c:aa:cd:5b:ae:ed:c2:58:2a:82:9c:d2:82:83:43:
80:36:e9:f1:0b:31:c4:32:da:8c:9d:31:98:41:1f:
3c:5d:b2:49:a1:5d:5b:07:f8:2d:90:8e:60:3a:a9:
58:38:ad:74:36:77:2c:6f:a7:3d:b8:ac:7c:4d:98:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:E6:B7:01:87:9B:94:96:4C:C3:DA:B4:A5:F9:21:49:3D:2E:7F
X509v3 Authority Key Identifier:
keyid:82:2F:2B:F2:6D:16:06:B4:3A:2F:49:92:E5:B0:84:03:07:D9:F4:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi8r8m0WBrQ6L0mS5bCEAwfZ9Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:48:e9:fa:0e:a3:ac:d3:c9:de:df:87:00:f4:d6:51:c9:
2b:f2:c2:7c:15:ee:49:91:6f:4d:d1:1b:0b:b9:59:4d:81:4c:
c1:11:ee:07:66:4f:14:48:2e:e3:6b:ce:7f:e6:d9:29:9a:7c:
32:7f:23:af:00:00:74:39:04:af:12:d8:3a:32:22:61:50:09:
81:88:da:7b:3d:71:23:c6:7c:24:a3:94:a8:56:ce:e1:74:21:
2d:75:26:8b:da:e5:45:ed:d9:e1:50:78:c8:0f:11:d8:09:3b:
24:68:07:b0:20:21:e2:f3:32:7d:27:8f:4d:46:87:49:6f:f4:
fa:0a:a7:0b:1d:b1:a5:53:14:fd:d3:a5:f0:42:0a:36:80:b4:
5f:51:15:cf:94:d3:54:bc:41:f3:8f:e9:53:f1:bf:0b:b1:30:
ff:b1:ae:99:c6:c0:ec:29:ea:4d:75:c8:89:79:3a:35:90:52:
dc:e6:3b:16:a4:45:95:2b:e4:dd:aa:af:cf:7f:52:c5:c3:6c:
44:a9:0e:7c:12:c3:f9:72:21:57:48:d0:04:5b:b4:87:f2:93:
0a:fa:c0:b8:00:6f:2c:6d:94:69:8a:9c:7f:16:4f:e4:e1:77:
b3:87:a7:7a:d3:1e:c8:e8:e0:d0:04:7a:ab:34:2a:ec:9c:59:
ba:95:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:24 2025 by rpki-client