Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
File: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft (raw, json)
Hash identifier: ciZcJH8rQMCcuSdwieyn9u2zYF0ZK0AquUXmiTn6/dk=
Subject key identifier: D8:D5:9C:85:70:33:9F:B5:1B:44:72:BC:E3:27:7D:41:CE:CC:19:3E
Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
Certificate issuer: /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Certificate serial: 2A048042108446A3A5DA748E62107774770F9169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
Manifest number: 5E
Signing time: Sun 19 Oct 2025 01:26:46 +0000
Manifest this update: Sun 19 Oct 2025 01:21:46 +0000
Manifest next update: Mon 20 Oct 2025 05:12:46 +0000
Files and hashes: 1: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl (hash: vCcyWRnlFrJneGTDct9kkZvxxyVzpUiJqnJ651lMsX8=)
2: AS213605.asa (hash: nB1VvqJdp3LTMxPZWJRw8GApNiisVibKM3k1IThtEvk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:04:80:42:10:84:46:a3:a5:da:74:8e:62:10:77:74:77:0f:91:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Validity
Not Before: Oct 19 01:21:46 2025 GMT
Not After : Oct 20 05:12:46 2025 GMT
Subject: CN=D8D59C8570339FB51B4472BCE3277D41CECC193E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:90:7c:92:99:4a:cd:ae:16:de:73:4a:96:
97:92:1f:cc:bb:55:b1:1d:f6:01:d1:4e:dd:d7:e6:
94:b1:73:d5:de:bc:4f:2e:7b:7b:7c:df:67:21:d1:
45:9b:20:76:14:fa:94:16:2d:7a:47:85:10:fc:37:
85:fa:51:5c:9e:95:ab:bc:3e:6d:b7:c9:0f:41:9e:
1d:7f:f1:f5:fe:24:8d:8f:ab:ed:70:cf:2f:4a:03:
98:70:a5:77:2c:24:2d:41:e6:a2:c4:5a:9e:2d:99:
50:15:c4:bf:33:3b:6b:9f:69:7b:71:23:69:50:c5:
bc:0a:b3:82:25:fe:5d:c9:d7:0d:a6:94:21:d4:7a:
60:bb:81:d9:5e:70:96:67:07:e3:1e:8f:ff:09:9b:
46:47:f4:80:08:29:f7:85:48:28:a3:5a:ab:50:93:
4e:73:59:dd:54:5e:2f:07:4a:90:0e:ab:6f:90:13:
80:db:74:d8:8e:86:e5:16:d5:be:4d:3c:31:3a:8f:
76:64:a9:2a:e4:b5:9e:02:88:32:53:a1:c8:57:5f:
3e:fa:9b:a3:dd:58:ed:b6:76:eb:69:4f:57:8d:65:
b5:24:a1:bf:78:0a:6e:0c:cb:be:db:7e:dc:45:3f:
fc:2e:c1:8e:fa:21:4b:f3:6e:89:98:b4:f1:ae:1d:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:9C:85:70:33:9F:B5:1B:44:72:BC:E3:27:7D:41:CE:CC:19:3E
X509v3 Authority Key Identifier:
keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ca:92:7d:0e:b8:3f:eb:b9:c1:09:4a:ec:d5:47:3a:0b:4c:
a6:7c:86:24:2f:b5:2f:1e:10:7a:20:cb:a1:c6:de:e5:6f:86:
66:72:ab:dd:5e:3b:77:7f:ab:d5:f2:a2:9d:fe:5c:36:34:81:
ee:15:15:ef:84:1f:8d:ee:df:14:c3:04:1f:e8:2e:3a:a6:d8:
2b:f4:36:35:2b:78:b5:b0:cf:7c:23:d1:45:ff:c2:a5:53:eb:
fc:6b:75:90:37:d5:73:fc:59:f8:4c:e9:94:f0:f5:13:41:03:
55:69:7b:14:ca:54:b7:b4:2f:71:c6:fa:ff:19:52:18:f4:01:
fc:ea:8f:68:15:51:f6:bb:bd:1f:38:5c:4a:b9:ad:e0:19:fe:
4d:a2:28:41:ae:cc:a9:89:1b:16:cb:3f:e1:c1:10:c7:18:51:
a4:da:35:b6:93:c3:fa:a4:df:1f:11:de:62:9f:85:71:24:c9:
cc:32:2b:a9:ba:fd:b9:da:ce:e5:1b:1c:0f:aa:8c:8d:c1:a1:
b6:ee:8c:e2:f6:cf:6d:9f:89:a6:e4:d1:f4:42:af:37:69:8e:
01:ab:41:a9:fd:bf:20:ab:18:c4:62:d6:ea:49:f2:37:2a:d4:
36:fe:57:8f:1b:bc:81:ee:96:6b:f1:9a:29:32:0e:dc:9b:78:
94:f7:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:33 2025 by rpki-client