
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
File: C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft (raw, json)
Hash identifier: sxjinU/GpbewTpmMQRoAQt7p0Y1RV1QE8Wt9ot4nkrs=
Subject key identifier: 66:02:06:CE:8C:92:F4:47:47:C7:8D:93:DC:F6:A3:25:50:99:7E:A1
Authority key identifier: C1:37:EF:1A:67:75:16:04:3A:AA:F7:50:75:BB:8E:5F:8B:FF:1A:CF
Certificate issuer: /CN=c137ef1a677516043aaaf75075bb8e5f8bff1acf
Certificate serial: 5996DE2A1E7E932557F4E4EAF07149213C62E715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
Manifest number: A2
Signing time: Sun 19 Oct 2025 12:10:15 +0000
Manifest this update: Sun 19 Oct 2025 12:05:15 +0000
Manifest next update: Mon 20 Oct 2025 14:23:15 +0000
Files and hashes: 1: C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl (hash: 6Igned2wz9oMb8ikuM8sA/Q7Nl89HPJH3SizcxCui5w=)
2: AS213915.asa (hash: 54kMALFIAqByOWGYmGDi03BmYHzQmO0Cq7B4na5nOtA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl
rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:96:de:2a:1e:7e:93:25:57:f4:e4:ea:f0:71:49:21:3c:62:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c137ef1a677516043aaaf75075bb8e5f8bff1acf
Validity
Not Before: Oct 19 12:05:15 2025 GMT
Not After : Oct 20 14:23:15 2025 GMT
Subject: CN=660206CE8C92F44747C78D93DCF6A32550997EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:71:e6:0f:10:e2:35:30:6c:bf:56:2e:4a:
b9:33:38:36:b0:42:a7:4a:11:b7:94:16:53:06:62:
78:62:64:72:fe:0a:d8:b1:8e:f5:97:86:17:fe:17:
18:e3:97:a8:19:45:b0:8b:c6:55:85:b5:98:45:01:
90:6c:93:57:64:ac:49:6d:05:93:aa:52:e6:72:09:
34:4e:ce:a2:19:f9:7c:aa:11:b5:13:c4:ed:26:e5:
93:d3:a1:61:b7:ff:cf:e1:72:68:6f:a1:e9:f5:97:
11:52:ea:87:f1:9e:dc:14:f1:13:b6:f7:87:df:0d:
ab:11:4b:8d:9e:6d:6b:6a:0f:e4:fc:4e:fd:1b:ba:
dd:5c:ee:cd:83:a9:b0:36:68:f1:69:4a:64:f1:a6:
4a:10:fc:c1:56:60:cc:ba:d3:17:8b:90:f3:79:53:
26:4d:5b:75:33:44:82:c6:8b:db:a7:dd:32:ae:57:
3e:33:37:d8:70:75:2b:e2:a0:7b:26:02:61:3b:e1:
31:60:d7:ec:d7:e5:13:53:53:5a:cc:60:3f:5e:ce:
77:fd:25:13:3f:3b:5b:15:21:ef:38:c3:c1:52:a0:
1f:0a:cc:f7:07:fa:54:66:8f:c5:71:06:d0:7b:ba:
bc:34:1c:41:58:03:2e:3f:06:1c:65:e4:b9:a5:8f:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:06:CE:8C:92:F4:47:47:C7:8D:93:DC:F6:A3:25:50:99:7E:A1
X509v3 Authority Key Identifier:
keyid:C1:37:EF:1A:67:75:16:04:3A:AA:F7:50:75:BB:8E:5F:8B:FF:1A:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTfvGmd1FgQ6qvdQdbuOX4v_Gs8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5799be86-8eae-482c-b6b5-355f7590942b/0/C137EF1A677516043AAAF75075BB8E5F8BFF1ACF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:52:ed:c4:e8:b5:0f:88:b4:a1:37:8b:f3:9c:ee:46:1f:
b5:82:a9:9a:24:12:1a:72:48:ad:92:99:2d:21:09:6a:86:de:
cf:e9:40:30:fa:bb:28:93:81:f0:2f:fa:92:80:aa:3c:3a:54:
ce:48:f7:15:81:bd:3d:71:80:9e:26:e9:35:df:b7:1d:e6:17:
60:47:45:5c:35:44:a5:be:57:66:53:45:a1:65:50:04:dc:66:
4c:c2:33:ad:32:da:b1:24:cf:96:53:e3:85:d5:9e:b4:cf:fd:
af:23:81:3b:ed:5e:92:d7:37:d1:ec:f2:92:3c:55:07:4d:df:
da:e1:ef:d8:44:e6:99:6b:b1:8c:d7:f5:17:15:0d:9b:0f:06:
76:bb:18:ec:14:ea:b5:83:a6:b8:e0:83:fb:d7:1a:ef:cf:12:
ed:e6:1d:bb:c4:2f:eb:5a:eb:41:dd:a2:b7:28:f1:94:56:5b:
aa:29:5d:9f:52:ce:39:dc:59:98:20:0d:5d:00:40:db:e5:83:
91:c5:16:a3:3a:8c:43:61:dd:0b:20:91:8e:f4:09:3b:1d:37:
76:b5:31:e7:a1:2c:80:c1:a1:2b:30:cb:c5:56:f2:5e:19:f1:
11:01:67:27:79:09:f3:6e:ac:c4:25:bb:3a:43:79:46:0b:4e:
75:20:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:32 2025 by rpki-client