Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
File: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft (raw, json)
Hash identifier: EY7LVlBf5Rb0l+mB+2eYKqW7cFLTf7Ifd+ntVCRWcPQ=
Subject key identifier: ED:83:5D:ED:30:F4:CC:33:C4:73:CE:C3:A7:E5:C9:13:E4:39:93:54
Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
Certificate issuer: /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Certificate serial: 141A3AE1C9ED02136F35F2C674A018CDD0251DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
Manifest number: 0E
Signing time: Fri 22 Aug 2025 14:21:42 +0000
Manifest this update: Fri 22 Aug 2025 14:16:42 +0000
Manifest next update: Sat 23 Aug 2025 18:00:42 +0000
Files and hashes: 1: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl (hash: QzxHd1zv69cq5ZJ19iQdoWcE0jRc6wmCyn94+++mdnU=)
2: AS213605.asa (hash: ZprMJW46KmtS/YBi4KkFGWXwSYtf+SNNUlvrOWHdeqM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1a:3a:e1:c9:ed:02:13:6f:35:f2:c6:74:a0:18:cd:d0:25:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Validity
Not Before: Aug 22 14:16:42 2025 GMT
Not After : Aug 23 18:00:42 2025 GMT
Subject: CN=ED835DED30F4CC33C473CEC3A7E5C913E4399354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:6b:0b:22:cf:2c:a8:c9:11:bf:72:a6:68:
e1:1d:64:05:db:26:df:5d:3f:a4:22:2b:57:2c:49:
70:9b:db:2a:ce:2e:a7:d5:d5:d9:67:81:c7:22:a2:
bd:54:19:47:d7:ef:db:7b:39:1f:66:56:5a:48:77:
ce:fd:fc:71:0f:f7:c3:4a:f6:bd:18:41:3f:f6:0e:
09:ab:87:81:a7:fd:7c:66:95:71:a6:e5:d8:3b:01:
db:92:ca:65:ec:d3:5a:19:c7:a4:e5:09:cd:e9:cc:
60:a2:09:07:a8:99:f1:91:d4:d6:34:8b:03:77:6f:
9b:66:55:69:aa:12:45:f4:be:df:83:05:f8:6e:f6:
76:00:75:94:b9:a9:2b:19:ba:da:a7:e7:68:50:4b:
8c:68:76:5e:03:35:c0:b4:97:2b:81:01:ab:e3:a7:
1b:48:9a:0c:b2:c0:e3:c9:42:85:21:5b:fb:5e:f9:
81:cf:07:e9:27:4a:bb:d2:5c:46:81:e9:ac:51:35:
6b:e4:a8:5e:a3:ff:21:35:09:a6:26:7a:5d:4b:77:
cb:a0:3f:4a:dc:27:58:21:55:d9:2b:b1:98:6d:89:
06:6d:c3:2e:4b:f3:b4:25:33:24:23:ac:d6:02:15:
c5:39:c9:6f:d8:c6:dc:0e:0a:5f:db:0b:82:af:ac:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:5D:ED:30:F4:CC:33:C4:73:CE:C3:A7:E5:C9:13:E4:39:93:54
X509v3 Authority Key Identifier:
keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:08:69:3f:d2:5e:c8:fb:d4:0d:56:6b:3b:59:c4:6a:a5:27:
5a:42:9a:62:5b:1b:b1:e9:0f:f3:b5:73:98:1b:84:f0:26:91:
ea:a2:7b:a6:aa:77:22:9a:37:eb:17:0a:7d:cb:45:ba:c0:3d:
00:10:36:83:25:76:e4:fe:74:f7:d5:98:e1:e6:5e:96:56:5b:
6c:7d:62:82:78:d0:00:3b:8c:50:08:30:67:05:8d:6a:85:9d:
41:6d:17:88:56:18:f3:01:15:c9:8f:d8:f5:25:01:25:b5:48:
79:b1:81:36:c1:10:74:07:a9:7a:92:3d:ee:75:9e:61:b0:48:
10:90:70:13:b3:09:25:3e:11:97:c5:f0:c9:e4:53:25:7e:97:
92:2c:d1:44:fd:85:79:5b:35:89:c6:ab:5c:c0:28:73:65:3f:
73:8b:8f:32:b5:ac:6e:04:8c:63:24:90:f7:f7:f0:99:71:49:
fb:42:9a:da:f8:89:37:4c:eb:5c:18:d2:78:bb:ee:d2:be:b7:
f1:c1:ad:04:c7:9d:03:6f:c8:9a:49:19:e0:f1:fe:a7:51:27:
aa:0f:4b:11:0c:1e:7c:3a:75:df:cf:bb:2d:b6:9b:fe:f3:4b:
29:07:28:8d:5f:90:51:aa:d0:00:fb:72:26:9e:90:48:ae:fd:
03:23:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:12 2025 by rpki-client