Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
File: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft (raw, json)
Hash identifier: Pl8foXTvNsGZITTicaeLUbEbazvkuoLrnj7sSrzJpbw=
Subject key identifier: 87:4D:E1:93:DB:25:24:5A:81:47:E6:77:CE:95:29:5A:1B:D5:B5:A2
Authority key identifier: 5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
Certificate issuer: /CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Certificate serial: 73C0432FE87E37A5A206E6E9CA4BE92625B97D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
Manifest number: 043A
Signing time: Sat 23 Aug 2025 02:02:33 +0000
Manifest this update: Sat 23 Aug 2025 01:57:33 +0000
Manifest next update: Sun 24 Aug 2025 04:16:33 +0000
Files and hashes: 1: 39312e3232392e3138302e302f32342d3234203d3e2036303739.roa (hash: +bVqrEMFd6OlmJt6OXUAm36lf7U27Wity5s8ggfbbQs=)
2: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl (hash: icN3+H8AK1GnEElK5QR1geLzvAVu5e4eJ8bfCslPKfo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl
rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c0:43:2f:e8:7e:37:a5:a2:06:e6:e9:ca:4b:e9:26:25:b9:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Validity
Not Before: Aug 23 01:57:33 2025 GMT
Not After : Aug 24 04:16:33 2025 GMT
Subject: CN=874DE193DB25245A8147E677CE95295A1BD5B5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:ef:a2:0f:eb:60:8c:80:65:06:fc:e1:7a:
5c:fd:bd:26:33:9c:8b:05:c5:fa:01:20:98:77:c1:
68:0e:2a:4c:6e:10:f2:6f:4f:18:fc:e4:38:a1:f8:
fa:3f:2c:a8:3d:2d:e8:ff:e4:7e:06:92:4f:f2:6d:
10:34:5f:58:6b:15:88:6d:da:02:17:a9:15:dc:ca:
46:d3:94:39:74:4a:0b:a2:31:7b:06:58:51:82:5f:
cd:b5:9e:c6:4a:2c:6e:a5:60:44:86:02:28:dc:b0:
80:ef:18:a7:de:b5:6c:a4:26:5e:56:57:be:b4:bc:
53:da:c2:e6:33:71:56:0e:37:73:1e:7e:03:11:74:
81:a5:7b:3c:67:0e:69:83:81:26:bf:31:a6:c0:ef:
00:b3:5d:84:8b:f5:a7:0b:9c:4d:76:d9:0e:52:4e:
87:46:67:c5:3e:2f:1d:4e:32:8b:e5:7f:bb:52:1b:
e4:fc:c3:c9:b1:f9:db:e0:61:55:fb:dc:5a:bc:a7:
4e:d1:c4:92:df:c3:52:30:f6:b4:21:92:e4:3d:3c:
31:28:69:60:78:89:ac:69:d2:45:ac:4c:1c:73:5b:
49:65:45:34:c6:3a:7a:e3:0f:76:f2:bf:e7:cd:2c:
2a:44:fb:83:25:bf:a3:25:f9:bf:6b:b3:0e:88:97:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4D:E1:93:DB:25:24:5A:81:47:E6:77:CE:95:29:5A:1B:D5:B5:A2
X509v3 Authority Key Identifier:
keyid:5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:64:7d:6b:80:b6:98:b4:04:a3:cd:9f:18:f3:f8:52:f2:e5:
e3:d5:92:d6:7b:b2:36:4f:d9:13:1d:17:66:65:1e:df:c0:58:
6a:b1:b2:62:98:5c:fb:1d:31:68:dc:fe:f4:3e:b9:6b:fb:23:
02:89:1d:90:76:cb:8e:d9:42:b7:d3:71:0c:c4:10:9b:2a:ce:
fa:70:fa:50:57:25:26:e1:4d:0a:83:f5:ce:da:2c:19:a0:54:
fb:e7:62:04:9b:0e:25:59:e5:ab:ed:42:9b:cd:a0:21:a4:52:
2d:44:d0:8c:69:87:1d:d0:82:1b:36:25:40:dc:4b:2c:c7:7e:
ae:05:07:d4:37:f8:92:a3:a7:5e:0a:f8:7f:a1:f3:b9:af:08:
6d:ed:67:36:85:97:fc:dc:8f:65:53:3b:e8:ee:0a:81:61:6f:
1b:81:21:07:78:5c:fa:44:b7:07:49:db:4f:40:ba:18:f6:5a:
c8:13:e9:3a:d8:f3:37:9f:09:da:5a:53:69:39:42:d9:9f:ae:
2d:82:ea:4f:73:51:49:90:c0:a3:db:fa:76:e0:2e:03:a4:a2:
83:25:b3:e9:69:14:8a:9f:84:e4:47:e7:53:a4:dc:60:76:3b:
21:7c:71:11:cf:6f:3b:82:bd:82:ce:b6:2e:4e:9c:8d:97:cc:
61:b0:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:19 2025 by rpki-client