Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
File: 2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft (raw, json)
Hash identifier: MqHm6Npt+4zPwVRD6VTWPWMKcMW/QbpeeIhvJggmVIw=
Subject key identifier: F4:80:5F:ED:50:07:67:01:3E:8A:37:8B:2E:E2:1D:57:E0:46:FB:D1
Authority key identifier: 23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79
Certificate issuer: /CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
Certificate serial: 467E202549C45339044D221392AFC7C783E0C2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
Manifest number: 29
Signing time: Sat 18 Oct 2025 21:19:28 +0000
Manifest this update: Sat 18 Oct 2025 21:14:28 +0000
Manifest next update: Sun 19 Oct 2025 22:10:28 +0000
Files and hashes: 1: 2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl (hash: EBkrMa7+hX17jS5M2fb6/++7hrZmb8CnXEW4ZeEzAEM=)
2: AS210352.asa (hash: 8B5fRsalKzWmsY9soLcMVaaAVp6xTo+ejKH88jUtZzw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl
rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 22:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:7e:20:25:49:c4:53:39:04:4d:22:13:92:af:c7:c7:83:e0:c2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
Validity
Not Before: Oct 18 21:14:28 2025 GMT
Not After : Oct 19 22:10:28 2025 GMT
Subject: CN=F4805FED500767013E8A378B2EE21D57E046FBD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:0a:98:0e:11:e6:8e:0d:65:b6:e7:00:a4:
86:0a:b1:04:75:8f:9e:ad:03:ea:de:a0:ab:1e:17:
ca:2a:f1:85:c8:d4:97:41:c9:5f:e6:7a:8c:b1:e1:
72:a2:b5:d3:2a:33:26:64:9a:82:b1:b2:b5:34:c4:
c9:27:68:06:13:1e:d1:c1:68:c9:bb:9a:a3:3f:e1:
2b:f2:f2:3c:49:6c:a6:f4:1a:cd:99:fe:6d:c1:0d:
61:6d:0e:ee:fd:9b:bd:a0:d7:d6:71:e1:cd:71:a3:
93:26:59:ca:ce:2d:cd:bd:dc:70:b1:00:44:4e:a9:
cb:42:a7:27:3a:6c:7a:82:87:eb:e2:43:89:83:b7:
04:40:95:ee:b4:aa:75:58:2e:f7:69:5b:7c:4a:e5:
21:86:97:3d:ea:e9:45:8f:b5:eb:c9:b9:89:d1:f9:
55:8c:ec:8d:1d:bc:0d:ce:c7:7d:30:f1:79:67:42:
7e:78:5c:b1:01:5a:0c:9c:48:31:55:97:4e:58:f8:
8b:69:82:08:4d:0e:27:dd:a5:54:46:31:31:8f:af:
53:04:aa:7c:71:53:18:85:d7:3d:59:84:74:e2:20:
aa:94:b3:5f:70:e1:67:e3:c3:37:80:53:1a:7f:48:
63:44:3e:25:6b:54:b3:f4:35:51:38:72:f6:99:d8:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:5F:ED:50:07:67:01:3E:8A:37:8B:2E:E2:1D:57:E0:46:FB:D1
X509v3 Authority Key Identifier:
keyid:23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:50:66:81:c8:bb:a5:05:fe:0f:94:6c:0b:fc:8e:da:07:42:
0e:b0:2e:cf:e1:35:a3:4d:4e:98:8a:0c:90:a6:5b:8d:71:03:
a3:d3:3f:df:7b:25:47:48:2b:83:f5:71:9b:e4:54:c2:54:23:
53:90:93:ff:bf:c5:55:46:85:cb:9a:4d:40:a7:82:4d:7e:18:
8d:f5:23:93:69:f1:f9:e4:cc:be:09:88:f0:55:3f:45:2f:38:
ed:5c:fd:25:d6:e7:4a:bb:31:13:98:7c:0f:5f:93:86:85:fd:
e9:a3:6c:13:dd:cc:63:cb:a0:57:02:ca:f0:7c:0e:25:d7:4f:
7b:d5:bf:a6:45:92:1f:9b:26:9b:a9:8c:06:0e:17:80:7d:df:
cd:d5:8c:43:f5:fa:4c:28:0c:b1:49:b3:f5:7b:35:09:a5:0f:
e8:14:1f:f6:e4:cf:2a:57:e5:fb:2f:93:46:16:a1:c7:ef:bd:
d2:7d:6f:5a:d9:be:9b:da:70:d4:8d:7e:3c:8d:7a:2e:ed:7d:
71:35:97:d1:44:6b:b4:c8:c3:4c:eb:3c:7e:11:2f:3e:b3:14:
93:e4:a2:2c:d6:d0:83:33:9e:2d:1d:77:cd:0b:60:1e:cb:fd:
5c:ec:78:69:8a:4c:3c:36:94:88:4d:02:48:5a:66:68:a5:2c:
27:4d:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:20 2025 by rpki-client