Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: IQW2Vo5bK/DKlXlvsKlBCksopOzDHFGYlUFr2bWUgqI=
Subject key identifier: 33:14:8B:5E:A9:F1:31:56:25:55:1C:31:65:2A:88:DE:A0:AE:DC:CF
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 25300E153736A328C2F39E18379CC4110B4A7FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 01AA
Signing time: Sat 23 Aug 2025 01:19:05 +0000
Manifest this update: Sat 23 Aug 2025 01:14:05 +0000
Manifest next update: Mon 25 Aug 2025 05:14:05 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: wFGBemhBwO0Wlhz+euOlANM+em170K/XWvsbBIIwxMQ=)
2: AS44355.asa (hash: Xqrm1wO+FssiB7AfsRuBPzY6P43VBGzRC2JyHRAKeh4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:30:0e:15:37:36:a3:28:c2:f3:9e:18:37:9c:c4:11:0b:4a:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Aug 23 01:14:05 2025 GMT
Not After : Aug 25 05:14:05 2025 GMT
Subject: CN=33148B5EA9F1315625551C31652A88DEA0AEDCCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:96:8b:fc:d7:5e:17:a1:70:69:35:75:54:
bd:2b:ef:7b:74:16:30:1b:ce:e9:60:b4:9d:6d:68:
f6:b5:49:a9:d2:98:8a:b1:d0:e7:6d:72:5f:54:0e:
8f:0a:a4:fd:15:eb:90:c5:fa:36:94:dc:8c:dc:dc:
5c:cc:71:63:fa:96:41:67:f8:20:cb:5b:cf:40:49:
bf:2d:74:05:e9:75:c6:c0:74:9c:9b:18:6d:6f:b9:
df:ad:ad:7a:b9:fb:24:62:bb:e4:4b:c3:33:d5:9d:
8f:50:a2:f2:e2:16:71:ab:09:09:b9:d1:46:87:7e:
36:98:59:16:67:15:a7:11:f5:3e:e4:29:7c:16:ff:
0c:08:af:1e:cb:96:37:e2:f9:70:2a:27:e2:87:d5:
5c:29:32:fa:86:01:21:34:c9:82:9c:45:f4:27:51:
89:83:0a:2b:86:c7:b0:08:ff:21:8d:c7:0a:d1:29:
af:37:7f:83:35:75:5d:19:00:b0:5e:ed:9d:2c:2e:
1f:44:87:d5:34:d7:ae:3c:53:86:ff:36:56:6b:4b:
b2:34:24:6f:b0:99:a7:69:aa:78:4d:5a:cf:bc:c2:
1c:87:9b:f4:db:b9:46:5a:af:71:8a:67:9e:b8:d7:
47:4f:e0:99:84:ea:40:ba:e5:51:0e:63:94:c4:db:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:8B:5E:A9:F1:31:56:25:55:1C:31:65:2A:88:DE:A0:AE:DC:CF
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ae:da:b6:a5:f5:2b:25:f6:22:a4:ad:11:79:4b:d0:e8:f0:
a6:62:24:03:99:bb:bc:43:4d:56:72:a4:25:ec:56:07:f2:ea:
4d:98:7c:12:96:f5:cf:b5:e5:f0:69:97:e0:5b:5e:0d:ca:5a:
e6:7f:03:88:41:0c:16:f5:07:cb:34:54:58:fd:59:ce:d9:0c:
ed:db:2b:0e:7e:38:ce:0f:48:a3:7f:49:69:bf:ad:ae:23:29:
1a:ab:fa:86:d2:34:f2:e2:b8:f9:eb:d4:53:7f:99:c5:21:a4:
34:8c:9b:33:9d:be:96:90:61:d6:ee:d8:b4:28:33:5b:18:d9:
c3:d2:8c:aa:4c:0a:e5:ec:cc:9b:70:7b:5d:23:da:ed:53:b6:
9d:b7:3c:7f:19:cf:1d:80:e4:e7:6f:c8:fb:d9:8e:66:4f:a9:
11:63:7f:af:79:a9:ad:87:23:a9:18:6a:c8:5d:5f:fc:40:ed:
fe:48:92:af:ea:aa:a4:64:46:40:85:6b:9a:1b:25:73:a5:c4:
09:16:2f:ba:21:97:f4:fd:80:1d:31:93:9f:2e:21:a3:c6:76:
64:47:14:ca:2b:07:22:c7:20:fe:4a:72:2d:a2:b9:be:4a:91:
3d:d9:d8:ac:f8:0b:22:e2:59:a6:2e:cd:c1:c2:2c:58:93:9a:
2d:13:a0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:59 2025 by rpki-client