Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
File: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft (raw, json)
Hash identifier: xoe4PBCIy8jy1jZ6eTZBrb2DuQjt4Tor3GqTlJ50pTs=
Subject key identifier: 33:83:8A:BB:24:35:88:B4:4A:61:23:50:D0:9C:A8:05:20:17:2C:70
Authority key identifier: 5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
Certificate issuer: /CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Certificate serial: 215B4CD8A984198E790EC4F7A132FE11D3492CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
Manifest number: 03EF
Signing time: Sat 28 Jun 2025 03:49:07 +0000
Manifest this update: Sat 28 Jun 2025 03:44:07 +0000
Manifest next update: Sun 29 Jun 2025 05:08:07 +0000
Files and hashes: 1: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl (hash: 1UFJ1SejaUVtxy3QdX8yxPVgJsfF/xCodG1epuqqSBw=)
2: 39312e3232392e3138302e302f32342d3234203d3e2036303739.roa (hash: +bVqrEMFd6OlmJt6OXUAm36lf7U27Wity5s8ggfbbQs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl
rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 05:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5b:4c:d8:a9:84:19:8e:79:0e:c4:f7:a1:32:fe:11:d3:49:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Validity
Not Before: Jun 28 03:44:07 2025 GMT
Not After : Jun 29 05:08:07 2025 GMT
Subject: CN=33838ABB243588B44A612350D09CA80520172C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:8e:cf:1e:f3:b1:19:9a:de:87:a3:04:b2:
e0:21:9e:94:00:f5:f3:f7:8c:8f:d5:2b:0f:8c:f1:
77:3b:bb:52:d1:c3:77:75:2a:b5:88:a0:27:90:e4:
1f:e5:3b:17:8c:da:07:d5:bf:40:19:c7:13:16:1f:
df:bc:7a:a2:30:48:91:2e:45:42:a2:7d:c8:94:e2:
6f:15:6b:71:e4:78:9a:93:ba:33:7a:47:fc:47:a0:
8e:be:1d:07:77:54:bb:41:25:5e:21:d4:fc:05:c4:
97:b4:4f:3b:5e:3b:25:27:d6:c1:97:60:ad:f0:b2:
9b:fe:ad:ba:ea:a2:92:c9:ac:2a:ff:1e:c8:a9:9b:
ed:0f:eb:67:92:83:4c:7e:b1:65:96:94:39:b4:19:
87:1e:89:84:86:a3:ab:c0:bc:f8:bc:55:3b:9c:a0:
01:42:03:15:94:6e:4a:80:71:00:7f:7c:92:6a:b1:
ba:c1:74:f6:35:f0:02:4a:62:7a:f1:3e:ee:c3:59:
2f:6b:95:4a:ea:8d:ba:33:43:e5:bb:1d:fd:66:34:
70:06:9f:bb:19:bf:2e:8c:3c:58:1a:e8:a3:5c:cf:
d5:e7:11:35:bf:fd:c3:90:14:ce:27:eb:ed:f0:78:
0d:79:32:e8:f2:9c:79:fc:94:a7:ee:4d:9a:ec:5b:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:83:8A:BB:24:35:88:B4:4A:61:23:50:D0:9C:A8:05:20:17:2C:70
X509v3 Authority Key Identifier:
keyid:5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4b:36:e6:f4:af:77:d5:0f:30:61:49:13:01:25:a4:42:4c:
d8:9c:00:6d:8c:6a:71:fb:4b:28:57:f5:0b:8b:2e:68:4d:3c:
ea:ed:94:45:11:3f:bf:cf:4b:eb:90:a8:23:6e:b7:bf:a4:e9:
87:11:ce:9a:ff:34:1d:9c:7a:21:ae:e1:3a:de:4c:49:51:48:
2b:1a:40:e0:53:3b:0a:93:c5:a4:63:d0:d3:69:05:2f:90:4d:
b3:ac:6d:e0:e8:c7:61:be:a3:6c:6f:60:37:db:97:5d:ef:0a:
21:26:62:67:49:04:b3:c9:fe:79:79:08:ad:22:82:cb:c8:f0:
27:f2:23:4d:1f:2d:c0:eb:be:72:2a:8b:a9:1d:f1:cb:8a:02:
4f:c2:de:c2:9a:8b:0c:64:7d:dc:e9:d0:fd:42:16:ce:86:db:
19:9d:8d:ff:87:07:03:48:cc:54:fc:1a:27:a1:e9:46:76:a0:
00:67:a2:9b:27:aa:2d:bb:d8:0f:22:bd:1b:9b:9a:4b:11:6a:
3c:87:ce:07:dd:28:74:6d:67:ef:2e:a5:76:81:d9:02:79:18:
8d:57:00:e6:68:67:f1:38:c6:1e:8b:44:8f:c3:d4:97:a8:0f:
c4:e7:0b:06:67:4e:2a:5e:91:00:66:83:a4:6b:13:fa:84:54:
09:71:6b:8e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIVtM2KmEGY55DsT3oTL+EdNJLPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFmZjEzZDVhNzFjZmIwZGEzOGQ4ZDNkODFlMTNlYWY0
MDQxNmE3NDAeFw0yNTA2MjgwMzQ0MDdaFw0yNTA2MjkwNTA4MDdaMDMxMTAvBgNV
BAMTKDMzODM4QUJCMjQzNTg4QjQ0QTYxMjM1MEQwOUNBODA1MjAxNzJDNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXf47PHvOxGZreh6MEsuAhnpQA
9fP3jI/VKw+M8Xc7u1LRw3d1KrWIoCeQ5B/lOxeM2gfVv0AZxxMWH9+8eqIwSJEu
RUKifciU4m8Va3HkeJqTujN6R/xHoI6+HQd3VLtBJV4h1PwFxJe0TzteOyUn1sGX
YK3wspv+rbrqopLJrCr/Hsipm+0P62eSg0x+sWWWlDm0GYceiYSGo6vAvPi8VTuc
oAFCAxWUbkqAcQB/fJJqsbrBdPY18AJKYnrxPu7DWS9rlUrqjbozQ+W7Hf1mNHAG
n7sZvy6MPFga6KNcz9XnETW//cOQFM4n6+3weA15MujynHn8lKfuTZrsW9lRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUM4OKuyQ1iLRKYSNQ0JyoBSAXLHAwHwYDVR0j
BBgwFoAUWv8T1acc+w2jjY09geE+r0BBanQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA3M2M5NWEtYWFjNy00M2VjLTgxOGItMWY0MmY2MjI3
NWY1LzAvNUFGRjEzRDVBNzFDRkIwREEzOEQ4RDNEODFFMTNFQUY0MDQxNkE3NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d2OFQxYWNjLXcyampZMDlnZUUtcjBC
QmFuUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDczYzk1YS1h
YWM3LTQzZWMtODE4Yi0xZjQyZjYyMjc1ZjUvMC81QUZGMTNENUE3MUNGQjBEQTM4
RDhEM0Q4MUUxM0VBRjQwNDE2QTc0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUs25vSvd9UPMGFJEwEl
pEJM2JwAbYxqcftLKFf1C4suaE086u2URRE/v89L65CoI263v6TphxHOmv80HZx6
Ia7hOt5MSVFIKxpA4FM7CpPFpGPQ02kFL5BNs6xt4OjHYb6jbG9gN9uXXe8KISZi
Z0kEs8n+eXkIrSKCy8jwJ/IjTR8twOu+ciqLqR3xy4oCT8LewpqLDGR93OnQ/UIW
zobbGZ2N/4cHA0jMVPwaJ6HpRnagAGeimyeqLbvYDyK9G5uaSxFqPIfOB90odG1n
7y6ldoHZAnkYjVcA5mhn8TjGHotEj8PUl6gPxOcLBmdOKl6RAGaDpGsT+oRUCXFr
jg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:54 2025 by rpki-client