Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier: cdBjTCn0oW8Lz4x96ZLXb/qlunzwm6SGsDgpHUzO3fg=
Subject key identifier: FA:F5:FD:79:8F:5B:5C:1E:26:62:C8:0C:42:03:C5:E9:93:DA:07:CC
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial: 184895A8480A2D3DAE78D73A08EA53840FD1CB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number: 2B
Signing time: Sat 18 Oct 2025 20:14:32 +0000
Manifest this update: Sat 18 Oct 2025 20:09:32 +0000
Manifest next update: Sun 19 Oct 2025 22:14:32 +0000
Files and hashes: 1: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: 5MaXFrdKBqOlmfFf1X3K7DyNNpdQRIKVk0jgQAo3wY8=)
2: AS214757.asa (hash: jL3ZHZO2rDPBy7IkoORDXI20p2/dpY2J7HmBqd/Xf+4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 22:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:48:95:a8:48:0a:2d:3d:ae:78:d7:3a:08:ea:53:84:0f:d1:cb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Validity
Not Before: Oct 18 20:09:32 2025 GMT
Not After : Oct 19 22:14:32 2025 GMT
Subject: CN=FAF5FD798F5B5C1E2662C80C4203C5E993DA07CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:0e:f7:88:bd:d6:2c:ff:dd:7e:83:9b:83:
27:93:a9:68:c5:f0:59:89:ac:66:e3:71:42:84:09:
a7:0c:8e:58:66:5f:f9:86:f9:39:85:23:a3:05:15:
e6:b8:1b:1d:e5:03:c8:56:1d:b5:82:1b:18:bf:4a:
a2:6b:da:77:a7:10:28:e4:f5:0d:5c:9b:6f:88:e2:
67:9c:5b:69:71:ec:b6:30:ea:eb:1d:f8:da:f4:1a:
6d:66:2a:c0:89:a9:ed:f4:8e:61:98:10:2c:f6:fa:
96:49:b8:a2:2e:a8:89:b1:f4:36:a3:ff:85:5a:00:
9a:98:34:a7:12:25:0e:25:71:3f:8c:94:f2:de:9a:
a7:b6:47:4d:d0:03:d5:f2:69:0c:c5:f5:7c:df:c5:
75:af:8b:f8:cf:0a:8c:be:40:69:98:e4:64:bd:86:
6d:5c:5e:67:1f:54:76:84:f4:ff:68:bc:93:90:b6:
8c:35:78:f1:84:e5:a0:b1:80:c8:ed:66:8a:4f:9b:
2b:5c:4c:78:d5:cd:cb:c3:13:e6:9d:ea:fe:ee:21:
25:92:1a:f2:c3:01:a7:05:e7:9a:eb:4b:2e:7d:a6:
94:4b:aa:aa:1c:7f:67:e1:00:8e:1e:f8:68:bf:04:
36:87:f8:01:5f:d7:32:7b:45:75:49:1a:6e:e5:d5:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F5:FD:79:8F:5B:5C:1E:26:62:C8:0C:42:03:C5:E9:93:DA:07:CC
X509v3 Authority Key Identifier:
keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:62:71:82:b9:35:0b:3e:e4:19:f2:6f:7e:b2:61:be:3f:f1:
29:20:8d:83:6b:71:2c:be:31:b8:69:2f:2f:72:47:1a:58:c6:
6a:6e:a8:91:76:2d:ba:bd:a3:9a:45:8e:17:5d:1c:b9:93:d2:
05:ab:61:66:01:44:23:19:45:34:36:96:40:0b:3d:09:e5:ec:
6c:bc:be:ab:8d:21:4f:fa:9c:cb:0b:f4:9d:04:f6:45:0c:c1:
46:98:bf:95:8b:76:ad:8f:dd:36:3a:33:3a:c4:c2:d9:65:43:
89:dc:4a:5e:fe:0a:3f:25:2e:a0:90:32:b1:ea:78:c9:22:8f:
3f:2d:58:c4:94:9d:58:df:6a:37:40:1b:e7:72:92:93:7a:b2:
a8:3f:c1:22:83:a4:9e:8e:10:54:87:37:cd:24:8f:6f:95:9c:
fc:16:93:27:b0:3b:63:c9:be:1e:e6:16:8c:17:ee:9b:4e:e7:
bc:08:66:65:47:bb:94:77:a7:8e:e8:94:49:c8:5c:9e:ff:11:
9b:d9:8e:7e:a3:c0:4e:59:e8:6e:e4:e8:80:07:d3:70:62:d5:
07:68:f5:bc:4b:db:25:ac:59:65:60:4e:9d:e3:88:7c:12:c3:
ba:aa:63:5a:d9:51:58:7d:7d:25:7b:97:ec:67:2a:3c:71:6c:
ce:b3:1f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:22 2025 by rpki-client