Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier: AvDWlyFmGkiwzKirQJ76g/zxjnRNcIMnXedmpe8RPRU=
Subject key identifier: 4F:22:4F:F5:28:F9:A6:48:9B:94:3E:96:A6:3F:C1:C0:75:2B:B8:B9
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer: /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial: 12CF1871FF1061645437AC2EF4B1CA443095880E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number: 021B
Signing time: Sun 19 Oct 2025 01:25:47 +0000
Manifest this update: Sun 19 Oct 2025 01:20:47 +0000
Manifest next update: Tue 21 Oct 2025 01:25:47 +0000
Files and hashes: 1: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)
2: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: sVWPS8/1q536bwRqlqoB1MALkDWynVYKTItA/t0D+no=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cf:18:71:ff:10:61:64:54:37:ac:2e:f4:b1:ca:44:30:95:88:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Validity
Not Before: Oct 19 01:20:47 2025 GMT
Not After : Oct 21 01:25:47 2025 GMT
Subject: CN=4F224FF528F9A6489B943E96A63FC1C0752BB8B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:55:3c:4f:cd:18:5a:6b:e8:47:0c:0b:95:54:
28:77:bc:dc:d9:e7:07:f6:e2:c0:05:19:c3:ff:f7:
b6:73:f5:af:f4:ce:e6:c0:31:6c:dc:fd:83:59:dd:
c3:f6:ba:76:00:16:e3:ad:4d:38:9c:fa:c3:e0:17:
9f:26:85:32:9a:fc:82:61:31:3b:6d:85:d6:59:db:
b7:3c:6e:55:b1:c4:6b:a0:10:74:38:b5:54:d1:d2:
93:66:2d:d4:58:e7:43:8d:ed:f1:ac:d0:50:43:fa:
52:51:af:b2:37:01:53:ab:17:5f:4f:0c:de:d4:9f:
de:ce:91:a5:c0:b2:13:fa:6b:82:a4:dd:a1:d8:be:
26:6e:24:8a:91:39:a0:1c:e2:87:2a:dd:d5:19:1e:
35:0f:98:6e:bb:a7:8d:33:b9:7b:b4:64:0e:89:a3:
0c:dc:25:f8:ec:9b:48:83:b1:0d:08:f5:74:dc:67:
d7:d6:c0:a1:81:ee:f3:87:43:90:0b:6d:fc:da:c9:
12:77:1f:62:13:a1:a5:1e:c7:2a:e9:5c:f1:ae:3b:
7f:59:df:e9:af:ea:b1:0a:06:60:68:e4:47:20:8b:
ad:5a:33:66:82:c2:51:d4:31:00:d8:5d:bd:63:6e:
17:7d:cb:89:99:70:ce:20:ee:e4:f6:7e:63:74:b6:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:22:4F:F5:28:F9:A6:48:9B:94:3E:96:A6:3F:C1:C0:75:2B:B8:B9
X509v3 Authority Key Identifier:
keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c4:a5:9e:02:e0:1a:ba:43:06:2b:d2:c8:34:3e:cb:06:8f:
ea:53:7f:aa:a9:31:8a:66:1a:dd:ce:c5:5d:46:77:54:64:23:
4a:a3:82:50:0a:87:c7:a0:61:fd:0b:22:7d:a7:84:f5:7b:4c:
14:cd:9c:9f:23:3c:0d:02:37:72:79:b7:e6:65:0a:e1:4c:30:
cc:9a:8a:ab:e0:9f:15:75:80:fe:62:11:07:5b:92:b5:9b:63:
84:0a:0f:87:59:9b:1b:6e:8f:9c:a3:18:ef:ac:48:fd:e2:22:
44:1a:92:75:dd:c0:2d:ec:54:fe:cd:d3:3d:af:91:4b:91:97:
54:55:5f:df:f2:99:80:12:73:f7:63:9f:b6:e8:b6:fb:51:13:
df:ab:11:0a:09:47:3c:54:a4:82:f4:08:05:07:83:04:20:a6:
1a:5c:f8:7f:77:9c:7b:eb:87:33:64:ca:2a:c4:e5:6b:9b:cd:
5b:9d:ff:a8:ea:69:55:48:97:10:2b:e4:41:7e:7f:60:83:6a:
e5:26:0f:5c:5a:40:13:86:cc:00:c1:68:04:17:eb:60:bb:3a:
cd:86:51:b2:6b:2c:40:bc:85:de:b0:6e:4b:d1:05:3c:ec:2b:
9e:4e:29:c4:ea:8a:5c:88:17:a1:ab:56:a3:80:4c:f7:a4:49:
cb:08:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:19 2025 by rpki-client