Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: TY+3aYWFfbosyJZEIGTetKvk94Cqa2U3fVJuehayj5s=
Subject key identifier: FD:42:BB:64:DD:55:06:2C:7F:6B:72:42:A9:15:DB:29:82:52:94:1B
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 399A648EA79453439B29FE022593F3D5D5081D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 021C
Signing time: Sun 19 Oct 2025 02:30:47 +0000
Manifest this update: Sun 19 Oct 2025 02:25:47 +0000
Manifest next update: Tue 21 Oct 2025 03:16:47 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: Zz30UqDYRqst7cKVEm+fuuLjZAO6QpmG+kS4EmGUs8A=)
2: AS44355.asa (hash: noT3NQk7rtD6jNk1GY90L8a80oYtiLLuAlQV7OyslJk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9a:64:8e:a7:94:53:43:9b:29:fe:02:25:93:f3:d5:d5:08:1d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Oct 19 02:25:47 2025 GMT
Not After : Oct 21 03:16:47 2025 GMT
Subject: CN=FD42BB64DD55062C7F6B7242A915DB298252941B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:b8:c9:4c:fd:c7:3d:60:32:d4:29:dd:52:
00:a7:fb:bb:20:91:8f:8e:60:fc:ea:ed:34:1b:71:
0c:6f:ae:73:8e:fd:c5:61:a4:7a:49:d5:d3:0e:24:
c5:d6:6a:ce:2a:f7:79:5e:99:18:81:b9:07:ee:2d:
45:9b:db:d4:e4:39:d0:08:bf:82:70:44:74:0c:41:
7e:72:74:74:67:84:c2:b8:a7:c7:c8:dc:95:f2:eb:
e0:8c:cb:2c:8d:cc:a8:42:4f:4b:b0:27:c9:c2:da:
78:ad:9e:9d:d7:58:42:21:7c:6a:94:93:71:18:50:
99:25:08:d4:a4:26:c8:c0:de:21:9e:bb:10:ec:0c:
44:27:24:cc:f5:b0:3c:8d:dd:c6:b0:7b:d4:05:e5:
3f:2c:37:06:a1:6b:03:50:7d:ba:b4:ae:8e:d4:e4:
dd:c7:f1:a5:84:bb:94:33:d0:ec:25:63:f4:1d:f9:
f1:6d:97:7a:fb:14:eb:e0:00:b6:79:1a:b0:4c:a3:
6e:98:77:a3:79:af:2d:76:ae:cd:e5:60:21:19:ef:
ca:1b:d7:95:c6:38:d1:dd:c5:65:35:04:e3:55:8e:
ac:3e:aa:f6:67:f1:64:8c:f0:93:44:9c:f2:7b:5c:
30:ac:6b:02:80:3e:4f:01:a0:82:ef:72:8f:97:0b:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:42:BB:64:DD:55:06:2C:7F:6B:72:42:A9:15:DB:29:82:52:94:1B
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4f:ba:39:2e:81:8b:db:c5:c7:bd:ac:6d:b1:1e:db:7e:07:
2c:4d:c4:40:e4:89:e9:9b:a8:77:a2:c8:b0:83:16:ed:a3:7e:
1b:7b:e5:75:1f:11:17:ce:31:35:07:e6:75:a3:f4:f9:2b:60:
20:34:99:94:2c:ff:15:89:f1:f7:60:44:30:2a:29:c2:6b:f9:
70:19:5f:27:d8:c3:9d:7b:38:0e:34:2d:08:e8:e5:7e:8b:51:
ca:96:a8:48:b2:05:e9:54:dc:08:ba:c8:d4:d6:3e:8b:71:72:
75:bc:81:c7:64:d2:97:88:d4:db:36:25:f4:6a:a8:e5:44:7a:
83:fd:ad:f9:b0:49:97:84:f3:67:64:99:5b:6d:c4:ba:8a:6c:
65:45:90:b2:5a:96:68:65:10:21:d7:e8:76:37:56:5e:1b:0a:
a6:0b:30:72:1e:eb:08:5a:78:0d:70:b5:de:fd:39:8b:ec:e0:
a2:cd:4d:7c:d6:40:9f:ed:91:a2:2e:a1:c0:7f:b5:88:b6:fd:
16:f5:dd:78:29:34:b9:3f:3e:1c:40:d4:01:cf:cf:f8:24:9a:
50:82:3c:3d:89:06:5e:39:f3:2b:bf:7e:c0:3c:a2:50:eb:f3:
96:cf:e6:ff:f4:74:cc:41:2d:b2:58:c3:e3:0b:b8:e0:ab:a8:
04:21:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:07 2025 by rpki-client