Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier: ykkUSLNnn4vfS2fAVv0P9lvdgjuMzY01NxMojcS25vM=
Subject key identifier: CF:46:68:67:08:9E:18:31:34:D2:7F:76:BF:62:E6:93:FB:FB:88:B6
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer: /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial: 1DA6D4C5B47C8EE18728B65888947B67CFB686A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number: 01AA
Signing time: Fri 22 Aug 2025 23:04:05 +0000
Manifest this update: Fri 22 Aug 2025 22:59:05 +0000
Manifest next update: Mon 25 Aug 2025 01:18:05 +0000
Files and hashes: 1: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)
2: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: y6bAldLXB9daLPaXP6NdQj8vB6fP5b9lYNiy9CazD8Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a6:d4:c5:b4:7c:8e:e1:87:28:b6:58:88:94:7b:67:cf:b6:86:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Validity
Not Before: Aug 22 22:59:05 2025 GMT
Not After : Aug 25 01:18:05 2025 GMT
Subject: CN=CF466867089E183134D27F76BF62E693FBFB88B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:36:9b:dd:b7:84:cf:3d:72:91:ed:c7:c2:
58:f8:9f:a1:66:bd:a3:a2:d0:83:57:7f:7e:ff:42:
d5:96:4c:67:80:b7:07:72:9e:2f:d2:51:e8:70:56:
d1:66:12:cc:a6:86:b1:49:b4:48:eb:fb:29:74:15:
f0:c7:3c:ca:da:3f:10:af:91:cb:f1:00:5f:e7:c3:
6d:a9:d2:5e:b0:6c:3b:21:42:78:0d:e7:39:df:9e:
07:61:40:70:7e:db:74:c8:d9:7c:48:fe:b3:bd:e5:
cb:ad:27:ce:e1:3e:0c:6a:c8:bc:03:f6:d7:8a:2b:
04:fe:e3:4f:0e:99:cc:ec:bb:f7:5f:6e:ef:0f:d3:
2d:7a:f1:c4:87:9e:4f:a9:ee:2b:24:bf:8b:d7:ed:
75:f2:5c:41:cb:fd:dc:3b:4c:93:7e:bf:34:8b:17:
10:0d:52:e9:20:0d:3c:dd:46:36:ce:89:a5:f8:3a:
fc:d1:b1:af:e0:59:fb:c8:40:14:51:32:91:e3:c1:
fa:0d:84:4e:a0:5d:d4:4d:0e:2f:16:31:8e:89:ee:
c4:38:b1:ea:af:95:46:34:9d:95:60:22:57:9f:cb:
28:5f:a4:13:85:35:b0:0b:49:27:97:66:37:2e:c0:
8a:1d:99:ea:34:d9:c8:38:83:37:1d:a1:f1:03:e0:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:46:68:67:08:9E:18:31:34:D2:7F:76:BF:62:E6:93:FB:FB:88:B6
X509v3 Authority Key Identifier:
keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:48:f6:90:38:47:bf:92:eb:ad:da:1d:7a:11:b2:d5:df:85:
16:bb:b7:11:7e:ef:16:25:1e:42:40:d2:96:53:5f:fb:cc:18:
98:e9:11:ee:a4:22:20:55:68:0a:bc:b0:78:da:c8:ce:e8:38:
c1:3b:13:da:1e:0c:d9:e9:e2:d1:ee:d0:20:68:1d:42:7d:e5:
67:01:48:fd:3e:89:df:8a:80:6a:41:a1:1f:fc:58:2f:87:88:
f9:b0:56:25:47:56:db:7a:03:5c:36:ae:5e:07:4b:b9:f4:7b:
95:80:0c:a2:a2:0c:d3:e1:52:92:be:af:8a:9b:de:f4:83:72:
ac:12:41:6e:d0:b8:7c:db:36:50:6a:6a:68:b2:86:3a:ac:c0:
05:98:93:5e:21:61:c9:3b:e6:f2:91:90:ef:e8:93:f8:7c:89:
39:af:da:63:ba:23:a4:f4:9c:d9:15:f5:c5:b5:51:8f:a1:75:
78:ee:7c:f7:10:9c:a4:94:e8:7c:27:aa:e2:6c:84:79:b8:29:
61:39:19:11:43:56:ea:b6:55:bc:82:0b:df:83:50:0f:ba:66:
12:dd:22:ca:1d:d9:92:f5:af:28:d9:f5:aa:97:56:8c:3b:b9:
5a:85:f1:33:2b:43:de:db:6d:51:d0:d2:97:43:dc:d8:52:a1:
f4:43:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:22:34 2025 by rpki-client