Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: 7pyuVjtpR1aikVcluKlCAx14/+60FEc5xCKEbiPaG2k=
Subject key identifier: 81:D6:99:47:A8:BC:FB:CC:58:B1:D1:86:2B:AC:F1:76:A0:0F:42:A9
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 47F3D1BF09B88D984616DEA64298B4AACD7972FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 53
Signing time: Sun 19 Oct 2025 02:06:16 +0000
Manifest this update: Sun 19 Oct 2025 02:01:16 +0000
Manifest next update: Mon 20 Oct 2025 05:23:16 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: gNxhZTOcPJaISWXgcPmKkYfx6wg4VedE1yw/fBl4vS0=)
2: AS214955.asa (hash: pJ7+xLkRqPDuQTZ4CjdQziRCbw0R4LvxfMvSG4sXOdg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f3:d1:bf:09:b8:8d:98:46:16:de:a6:42:98:b4:aa:cd:79:72:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Oct 19 02:01:16 2025 GMT
Not After : Oct 20 05:23:16 2025 GMT
Subject: CN=81D69947A8BCFBCC58B1D1862BACF176A00F42A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:97:f7:dd:18:4f:95:a3:fe:f0:61:ff:09:
b0:5f:e1:92:66:a9:03:c5:8d:63:3b:6b:97:ed:3d:
ba:ca:de:1f:f6:69:a5:a6:ec:d1:eb:38:ee:79:d2:
68:fb:f8:f2:70:ad:be:b8:08:2b:ec:86:b0:05:a2:
9c:e4:df:a1:9a:7b:bc:a7:29:72:bf:12:92:12:dc:
0e:fb:e6:3f:c7:be:2c:e7:37:a2:93:08:18:10:9c:
de:7a:27:9d:5f:d1:85:bc:07:88:bf:ae:50:32:f2:
b1:82:49:6f:98:64:fc:2a:b0:00:11:d2:8f:27:fb:
64:ae:96:e1:5d:d5:15:19:c0:75:4e:90:03:72:49:
ae:11:0a:1e:df:c7:6a:9b:cd:80:82:93:b0:20:8b:
79:5d:24:af:64:7b:8f:14:08:d4:1b:eb:f3:cb:1d:
94:c5:44:07:da:e9:57:94:03:c6:fc:40:e0:b7:af:
7d:c2:34:cb:b1:a4:b7:2a:e4:5a:44:c2:64:80:24:
5a:fb:2c:85:63:b8:49:09:69:3b:3e:84:f6:3a:87:
a1:51:b1:fb:8d:47:fc:61:6a:00:ad:8f:60:06:c9:
88:0d:db:ca:7f:e8:62:13:a4:b7:9d:36:2c:9e:8b:
0c:c0:0a:74:36:5c:ed:db:fd:9a:16:64:16:6b:5e:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D6:99:47:A8:BC:FB:CC:58:B1:D1:86:2B:AC:F1:76:A0:0F:42:A9
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:3c:4f:8d:44:b6:f7:17:13:53:ca:ff:bb:cc:7d:9c:f4:
ec:c7:e5:14:3b:da:c1:bb:6a:73:f5:ee:78:5a:39:17:14:3d:
dc:3d:f2:44:87:19:11:74:44:90:e8:b9:f8:29:13:32:c0:7e:
6d:40:d5:c7:d5:d6:e3:7a:87:17:1f:fc:60:58:ab:bc:ac:7f:
9d:9a:0c:05:d4:cc:ed:04:c7:eb:3e:bd:f9:24:56:03:79:01:
2e:7d:92:3f:e5:d2:85:ff:75:43:53:53:05:42:de:a6:0d:2c:
97:6d:73:9e:c3:a2:40:10:3a:04:1b:65:e8:26:8f:16:06:90:
c8:69:d1:f1:09:6d:6a:a7:c6:37:cd:49:9a:8f:75:bd:ba:7c:
b7:ed:69:28:46:15:4c:4c:1c:1a:a1:13:ee:ae:15:5f:03:94:
d5:e5:bc:71:3e:a2:ed:5f:32:0a:4a:15:a2:94:ee:68:3e:a3:
4b:34:16:1b:79:82:88:26:c2:40:29:11:9f:68:e5:ac:72:22:
a5:ea:98:b2:e2:7c:98:f7:93:8b:1d:25:a5:8a:24:3e:ff:d7:
56:d7:80:75:49:00:18:55:53:dc:f8:6d:88:22:ba:58:d1:8f:
c9:af:fa:08:18:c4:25:aa:ca:44:a3:51:3b:0e:7c:d9:29:7f:
a0:17:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:09 2025 by rpki-client