Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
File: CF7320162773CFFE2866D9712A738E4199536117.mft (raw, json)
Hash identifier: migxf5zv2DkeaEH1M5Nz8IZZGwh9ydelXT3HZ9YapJs=
Subject key identifier: 84:F3:0C:EA:D6:8F:DC:93:6D:19:6F:8A:F6:67:C5:B5:56:EC:BF:BF
Authority key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
Certificate issuer: /CN=cf7320162773cffe2866d9712a738e4199536117
Certificate serial: 505B7EA8E4170B049254CCD3431D3C60D294AAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
Manifest number: 40
Signing time: Sat 18 Oct 2025 22:12:29 +0000
Manifest this update: Sat 18 Oct 2025 22:07:29 +0000
Manifest next update: Sun 19 Oct 2025 23:29:29 +0000
Files and hashes: 1: CF7320162773CFFE2866D9712A738E4199536117.crl (hash: /0bTBfhSX/VS1358JlrtPW2dDz38LjeivMqcCIkJl3o=)
2: AS208824.asa (hash: pO2oqucndlObtPTLzYJvUNtIOdgCmd6bYfZzGJi1V2k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5b:7e:a8:e4:17:0b:04:92:54:cc:d3:43:1d:3c:60:d2:94:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7320162773cffe2866d9712a738e4199536117
Validity
Not Before: Oct 18 22:07:29 2025 GMT
Not After : Oct 19 23:29:29 2025 GMT
Subject: CN=84F30CEAD68FDC936D196F8AF667C5B556ECBFBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:fd:32:69:6b:07:2d:de:2a:9a:18:c9:b0:
5e:49:ef:b5:ef:c9:0e:40:a5:01:ad:86:9d:54:72:
8e:aa:56:64:cc:b3:2a:78:fa:c8:32:31:2f:c0:e8:
d7:88:f7:42:40:25:c4:3c:ee:cd:32:1a:7c:b7:5c:
9e:65:95:a8:3c:21:ac:20:f4:28:a2:66:63:3c:60:
fa:23:69:ef:e1:01:e5:f9:a1:ac:b5:ea:60:76:e7:
54:61:28:a0:a1:4a:67:d1:b3:73:c2:7c:d0:e3:5d:
c2:0c:e6:e9:93:c0:eb:69:4e:45:1f:bd:bf:dc:ea:
c4:14:3c:a1:cc:7e:51:8a:d9:9f:aa:85:6f:94:83:
8b:30:77:6e:39:8c:fc:e1:28:c1:f0:10:a9:e7:d1:
cc:e5:57:02:d1:c8:08:98:c4:56:d4:93:aa:3b:af:
eb:8c:a0:a4:e8:3d:30:6a:7e:c9:f1:da:fd:f1:9c:
47:a5:d1:0b:ea:5d:13:22:53:5b:46:0f:8d:14:65:
c0:6c:3d:c4:34:99:ae:2f:fb:18:15:b1:33:a9:0d:
16:0b:5e:67:4a:89:1c:3e:71:93:fa:c0:08:96:ae:
02:7a:3f:4a:10:a1:ae:f8:63:e6:52:12:71:39:e0:
37:09:b1:5b:27:ae:d2:43:88:1f:8d:13:dd:eb:50:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F3:0C:EA:D6:8F:DC:93:6D:19:6F:8A:F6:67:C5:B5:56:EC:BF:BF
X509v3 Authority Key Identifier:
keyid:CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8e:77:a9:3e:ce:48:84:38:fc:a8:0c:23:f7:d6:d0:9a:6d:
1e:e7:df:2d:0d:c8:b9:7d:b9:89:08:6a:d5:d8:17:82:90:05:
16:62:f1:89:65:e9:2b:55:10:53:49:d9:8e:2a:ed:77:d5:71:
f4:2f:84:ba:07:87:16:29:65:70:78:21:ba:ac:34:68:04:a5:
c2:f2:2e:57:cb:a2:cd:7b:7b:01:a1:ae:97:38:d4:76:f1:d8:
e8:26:61:41:91:cf:03:19:a3:f5:8c:bf:b2:d4:c1:cd:37:df:
08:96:c9:48:4e:10:b4:53:cd:cb:96:a0:4e:b8:6d:bd:8d:13:
1d:b4:cd:e6:20:16:99:e3:d2:56:79:8d:19:06:73:22:d0:49:
f0:44:68:b9:99:0b:bd:2d:20:47:04:8c:1f:cd:b1:5e:06:d2:
90:ec:ec:28:f8:10:2b:ce:6e:b0:4d:40:ff:56:c2:1d:09:d1:
af:60:2d:81:a1:0f:2a:43:14:a3:2d:22:7a:c0:6c:ab:b8:83:
46:3a:b4:1b:f5:c0:8e:99:07:fc:22:dd:f5:9c:5f:22:fd:3d:
bc:ef:77:0d:bc:b4:b9:24:2f:7a:ae:cc:34:47:67:aa:eb:4d:
ea:71:9c:07:03:8c:bd:6f:11:06:d6:da:8d:f1:e1:bf:f8:a3:
66:30:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:42 2025 by rpki-client