Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: NgSiDEg+5XfK8vBmWPkUmdeVNHEgiSmaBATfskXSsuk=
Subject key identifier: DD:31:5F:E1:AD:EE:85:15:EA:76:8C:FF:48:0B:16:0C:D9:AC:55:A3
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 339FDA21220B073437C172FB9D6E333783D7B1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0372
Signing time: Thu 23 Jul 2026 06:23:12 +0000
Manifest this update: Thu 23 Jul 2026 06:18:12 +0000
Manifest next update: Fri 24 Jul 2026 10:20:12 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: Gu19avZ8W08exlF69U5fflOUHcjQ/U7mAfBLXxumyf4=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:9f:da:21:22:0b:07:34:37:c1:72:fb:9d:6e:33:37:83:d7:b1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Jul 23 06:18:12 2026 GMT
Not After : Jul 24 10:20:12 2026 GMT
Subject: CN=DD315FE1ADEE8515EA768CFF480B160CD9AC55A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:93:0d:c0:61:65:be:8e:36:f0:ad:89:2c:
02:06:ea:28:f6:c5:21:88:87:66:14:4d:93:53:c0:
3e:20:d3:87:c5:3d:72:ef:1c:1d:c0:c4:6b:c6:75:
f5:44:a8:8b:3a:22:b7:fb:2f:a1:5d:6d:dc:64:f6:
8a:86:6c:a1:13:44:05:11:2c:3d:f3:68:0b:5e:4f:
4d:e4:59:97:79:05:80:7a:88:70:94:41:f2:93:ad:
f1:8a:c5:30:ea:a3:13:ee:1d:05:1f:6f:4f:3e:90:
c7:77:f4:91:87:5a:9a:9c:aa:73:23:5a:cf:eb:95:
ab:cf:73:b5:83:ee:fb:78:c9:c4:0c:e1:5b:27:b1:
9a:b5:7e:fe:ba:fa:ac:2a:31:c8:c3:56:28:9e:8c:
b0:f4:74:14:2e:a5:f7:3c:56:b8:95:b4:bd:aa:f3:
42:4d:c7:4c:34:bd:ad:7d:5d:4a:80:60:d9:c6:18:
c2:8c:66:ae:8e:4b:97:78:4c:6a:ff:41:54:c9:c1:
e8:25:97:db:06:22:f0:da:95:28:03:e7:88:8f:d8:
0f:a9:77:f6:73:58:47:b7:40:40:33:78:ce:ab:37:
48:e7:c5:24:64:20:3a:41:3d:bf:78:f6:ba:74:22:
04:99:88:e6:e7:bd:43:79:da:db:eb:20:38:0e:d9:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:5F:E1:AD:EE:85:15:EA:76:8C:FF:48:0B:16:0C:D9:AC:55:A3
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ee:36:49:88:fc:a2:18:6f:0b:10:ee:f2:66:2f:a1:37:dd:
9d:90:4f:e8:a4:f0:64:17:42:e7:74:1a:54:73:ac:f3:cd:c8:
82:7c:c0:e0:58:0b:13:46:77:0c:df:fa:17:39:3a:e5:2a:ba:
b3:e1:92:99:a5:13:2c:d6:02:af:4b:7d:db:c1:d5:fd:d2:13:
3a:6b:ae:83:a8:a9:f3:88:4f:e8:20:c6:bc:38:cc:f6:7f:4c:
e5:9b:fd:45:32:6a:af:10:39:a8:3d:e8:cb:5e:6e:76:a6:86:
0a:81:eb:53:3e:02:ef:8f:9f:80:ac:b2:1b:2c:0f:78:e2:bc:
eb:7e:63:19:6e:21:82:9f:e5:b7:03:7b:64:87:4d:8f:36:d3:
25:05:e2:5a:7c:42:05:13:57:b7:15:93:5b:6a:aa:c3:8b:fb:
a2:a1:f8:c1:aa:fa:7e:b9:a6:7a:2c:24:d0:82:1d:92:7c:4c:
01:c8:82:ec:c5:78:11:f0:58:d6:ce:9f:5f:1e:96:59:9b:76:
bd:a9:de:25:4d:4f:30:7e:d5:e8:9a:8a:bb:59:9a:0c:45:01:
59:3c:c2:03:48:4f:70:d4:9f:31:5c:2a:d6:6a:c4:0e:d4:d9:
10:33:db:24:f9:20:c8:b7:67:b8:14:a7:7d:1c:cf:0b:5e:06:
48:3a:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:05 2026 by rpki-client