Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: +MboML7wke+HShnPs+Uij9DOzIRJNTOPJpOgVn7MxOw=
Subject key identifier: 16:87:27:2C:A4:E6:DF:DB:6B:31:4F:68:FB:5F:49:A1:04:11:50:C9
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 0FB8FD6B67FC759228415D52222931F098EEC897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 022F
Signing time: Sun 19 Oct 2025 16:23:01 +0000
Manifest this update: Sun 19 Oct 2025 16:18:01 +0000
Manifest next update: Mon 20 Oct 2025 16:33:01 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: j+niL4i7IT7WrwSQPluU0XS5kN3laGK09lMNr3rzL/Y=)
2: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b8:fd:6b:67:fc:75:92:28:41:5d:52:22:29:31:f0:98:ee:c8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Oct 19 16:18:01 2025 GMT
Not After : Oct 20 16:33:01 2025 GMT
Subject: CN=1687272CA4E6DFDB6B314F68FB5F49A1041150C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:58:11:e8:db:d3:1f:32:cb:68:87:9d:4e:
29:e7:c5:3a:27:e3:5a:c0:10:20:6c:18:ef:3a:ee:
cc:03:6c:ea:ab:90:c1:3a:d6:12:b6:af:01:f0:42:
dc:2c:a2:40:d2:98:d2:a5:a0:11:26:3e:69:46:3b:
43:11:24:90:10:01:76:4b:2d:49:a7:d2:1a:cc:0a:
e0:a7:36:ad:15:b8:2a:b8:de:d1:d6:da:4d:0f:bb:
27:0a:c2:2f:6e:9c:93:06:94:0d:fa:26:24:0d:dd:
b7:4c:65:c2:9e:15:39:e0:c7:d6:b7:0e:ad:28:6e:
6c:9c:3e:73:6c:ac:50:e4:11:2e:fe:53:89:61:5d:
fe:2d:46:91:d7:b8:12:d2:c4:93:ab:62:61:88:e1:
1b:27:15:68:9a:d6:5e:39:db:24:6e:bf:c7:de:22:
8f:60:94:0d:0a:30:70:b8:ee:15:63:53:2a:9a:85:
ab:78:76:5f:ba:24:89:f5:b5:87:9a:5e:87:48:0b:
8c:35:fd:69:35:e4:3e:cb:35:a6:c3:94:d9:e8:b6:
9a:1b:c1:ee:d4:d0:3e:64:d0:6a:c8:2d:fc:9e:f1:
96:f4:74:39:41:cb:1a:af:83:36:fc:e5:fb:73:42:
5e:fa:63:67:8c:42:6e:30:60:54:c1:af:97:f1:b7:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:87:27:2C:A4:E6:DF:DB:6B:31:4F:68:FB:5F:49:A1:04:11:50:C9
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c4:1d:13:50:1a:ec:81:4b:f4:95:2b:1e:46:58:70:ca:9d:
a4:39:0b:e4:0d:44:ea:a7:4d:73:fe:b6:79:ab:59:59:4e:47:
46:40:21:9b:54:a8:da:d3:81:76:cd:d1:0f:01:cc:88:7e:85:
2d:69:57:22:b8:3f:0b:5a:69:a4:b6:e8:0c:47:8c:7e:10:ee:
b4:3c:3a:71:30:a7:f5:0a:c2:d4:07:ce:38:1e:e6:95:e3:ab:
2b:c2:e2:7e:36:6a:7c:c9:e7:be:e4:a2:ec:4c:8e:5a:2f:87:
4f:ca:21:28:c1:07:2e:7c:7d:89:3a:89:fb:0d:2a:71:4e:35:
5e:f8:d7:09:9c:29:dc:8c:3e:03:15:7f:51:77:28:d3:70:92:
0b:13:26:ce:0d:77:df:da:fc:27:2e:e9:10:77:b0:60:f5:e0:
51:b8:96:77:60:6d:77:04:54:54:84:3e:35:b6:ee:24:0a:24:
16:04:9b:3d:17:31:15:2f:ab:56:10:51:e6:0a:1a:66:af:55:
24:cf:b3:27:9e:b7:5f:62:1c:eb:f4:fc:ed:58:92:45:03:f9:
b2:08:ae:d3:ab:f3:f1:f2:55:7e:84:f9:15:fe:42:88:c6:3f:
34:ee:aa:4d:6c:1c:5e:8f:46:d6:30:4c:84:91:df:41:32:01:
d6:9a:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:32 2025 by rpki-client