Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
File: 3301E959DD39845A0173C08066F1C898EDFF0B7F.mft (raw, json)
Hash identifier: 9aEYIBicdGZPGQRfZcLNGxMeoE7Hyqg2K77PmTcZS1A=
Subject key identifier: 25:6F:23:8F:60:05:82:40:07:BA:6A:DD:72:E5:2A:96:7B:D7:57:31
Authority key identifier: 33:01:E9:59:DD:39:84:5A:01:73:C0:80:66:F1:C8:98:ED:FF:0B:7F
Certificate issuer: /CN=3301e959dd39845a0173c08066f1c898edff0b7f
Certificate serial: 501FAF1810B365FD2C4357C3AE03799DA765EC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
Manifest number: 3F
Signing time: Sun 19 Oct 2025 05:39:23 +0000
Manifest this update: Sun 19 Oct 2025 05:34:23 +0000
Manifest next update: Mon 20 Oct 2025 06:29:23 +0000
Files and hashes: 1: AS206604.asa (hash: 9S0wCzCydnBKhmRkdQHh551GQ5r+Me37uQgeOYkAevE=)
2: 3301E959DD39845A0173C08066F1C898EDFF0B7F.crl (hash: ik3YdiVwZexIKx3e9V2SJxSiMrQ/FinE0fVUO28Aj9w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.crl
rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1f:af:18:10:b3:65:fd:2c:43:57:c3:ae:03:79:9d:a7:65:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3301e959dd39845a0173c08066f1c898edff0b7f
Validity
Not Before: Oct 19 05:34:23 2025 GMT
Not After : Oct 20 06:29:23 2025 GMT
Subject: CN=256F238F6005824007BA6ADD72E52A967BD75731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:59:38:b1:38:f7:6c:ce:44:8c:a0:e7:38:
91:80:84:e3:da:c9:1a:d3:f0:1a:7d:59:c4:cc:12:
d7:57:3b:cb:18:82:2c:73:2d:28:86:95:fa:87:b3:
6b:48:e0:11:19:32:94:12:32:da:9f:f2:88:d7:d3:
22:dd:11:cf:37:0a:bc:d4:eb:ed:48:09:bf:91:8f:
c9:94:e2:56:c6:91:25:fc:4b:2e:9c:4d:45:93:e8:
3f:20:1e:cd:a8:31:f0:44:ca:bd:d1:d2:42:e1:4a:
4b:56:1e:cd:6c:93:8a:bf:78:3c:e8:7a:b1:b8:ae:
18:8e:8f:1a:a2:56:a8:68:fb:01:1b:77:ca:c6:03:
31:3c:94:07:9f:8f:78:3c:0f:8b:4a:06:cf:1e:13:
e4:eb:d8:e9:1f:b5:34:e3:3c:ae:8c:df:fb:28:f0:
16:42:ea:52:8b:73:01:24:05:6b:d3:17:2d:bb:e3:
23:0b:20:e9:88:93:15:aa:f5:84:15:09:dc:d2:e2:
32:37:c0:97:bb:83:ea:6c:74:ec:48:d6:fc:ae:b0:
c8:cc:42:c6:c2:60:28:90:12:36:b7:c5:b0:97:8c:
23:09:37:97:99:b4:08:04:32:f7:93:c6:43:79:12:
a1:c6:b9:cf:3d:1a:9a:37:d3:72:ba:e0:21:7c:93:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:23:8F:60:05:82:40:07:BA:6A:DD:72:E5:2A:96:7B:D7:57:31
X509v3 Authority Key Identifier:
keyid:33:01:E9:59:DD:39:84:5A:01:73:C0:80:66:F1:C8:98:ED:FF:0B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwHpWd05hFoBc8CAZvHImO3_C38.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/0/3301E959DD39845A0173C08066F1C898EDFF0B7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b9:e3:25:b3:b7:92:39:22:1b:73:4c:64:ca:91:71:da:9b:
30:56:5c:39:b8:b0:f7:de:5a:b3:9e:e5:34:74:14:79:b1:a9:
70:90:90:c7:20:03:d1:36:7d:cd:0b:25:5e:85:61:9d:0d:c0:
24:a5:84:73:e4:ad:05:d1:b1:15:67:6b:39:df:67:8c:5e:5a:
52:98:d8:a4:00:40:cf:f9:65:f6:34:89:cc:6e:9e:6b:2a:24:
f8:d8:c5:58:8c:51:ba:87:d0:74:8c:7f:92:57:75:06:e2:ce:
8c:b7:cb:93:08:55:e3:01:f1:3a:df:05:a1:63:54:84:52:19:
a9:41:13:4b:58:b9:ee:df:df:15:ad:e3:60:4c:4c:18:ef:5d:
54:b7:c6:5f:96:e4:95:31:eb:89:a9:91:19:b7:cb:81:69:0d:
ec:78:eb:e7:a8:52:7a:b4:e3:27:02:8b:8b:f4:b2:7e:ed:ed:
7d:27:d0:19:9e:bf:88:28:54:6d:cf:fb:cf:09:15:01:1c:a7:
ec:e4:5f:f9:b4:7c:04:1b:d5:61:41:c2:b9:c9:6d:aa:e7:71:
db:9e:b7:68:af:81:ec:35:06:33:6f:c3:10:6b:83:63:a6:e8:
eb:09:3b:21:73:bf:a0:94:d5:03:e0:c6:ed:2b:3f:2d:de:cf:
b1:98:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:51 2025 by rpki-client