Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: FO7syoLyafsbQzsSo7Q/bOLq7ip4I8sBj9O4+EDASa8=
Subject key identifier: 5B:49:B6:82:FA:F2:A8:16:FA:DE:6D:A4:D8:D5:12:45:B1:02:66:EF
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 2B01B260CB866803C492DDBACAB3E0C44632BA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 19
Signing time: Sat 23 Aug 2025 07:13:18 +0000
Manifest this update: Sat 23 Aug 2025 07:08:18 +0000
Manifest next update: Sun 24 Aug 2025 10:41:18 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: vlSZnzDaCogxDlJqxRv1B0Y3L1CvO7dZjc7fJ1dwVE8=)
2: AS211575.asa (hash: v4Bq4q9ns4F23gyiq5ugXriODYAWu2WP5XpgmyIY9xY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:01:b2:60:cb:86:68:03:c4:92:dd:ba:ca:b3:e0:c4:46:32:ba:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Aug 23 07:08:18 2025 GMT
Not After : Aug 24 10:41:18 2025 GMT
Subject: CN=5B49B682FAF2A816FADE6DA4D8D51245B10266EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:0c:66:8b:7c:ec:28:18:f8:fe:b1:ed:9e:
fa:6a:a7:63:4e:0b:bd:e3:33:f6:73:c8:1d:32:1a:
bb:05:35:9b:f3:cb:79:c9:ae:5a:72:cf:25:fa:d4:
0b:2c:fb:5c:ca:83:0d:94:fb:8d:ac:b0:5d:d6:fc:
f3:74:63:48:6c:72:fc:73:ee:72:10:8c:66:4f:d6:
95:9c:33:be:1d:c2:94:57:3f:4e:dc:a4:92:14:13:
b8:43:9b:5b:73:88:59:84:d8:c5:6e:1e:ba:be:34:
e2:65:d8:d6:35:ce:33:32:d1:f5:0f:66:ce:76:1b:
a2:88:bd:f0:f7:8e:87:31:cd:f0:15:68:d9:38:00:
6c:34:9b:c5:19:4b:ae:f9:9e:9b:1c:95:8b:2a:60:
dc:02:cb:69:7f:b0:72:fb:b2:c9:16:c0:35:ba:4b:
49:dc:35:ac:f9:a1:13:9b:f5:30:4e:88:46:a0:be:
86:a6:20:57:2d:0c:dd:ce:18:c2:35:e9:ae:63:9c:
6a:cb:25:9b:2c:b3:f2:58:c3:fd:95:c8:5d:71:bb:
5c:34:e3:45:2a:a7:ed:83:3a:f1:8f:e3:40:92:04:
41:e6:a6:b2:7d:a2:6b:63:82:9c:d8:df:61:ef:15:
cb:78:36:8d:15:23:86:a2:e8:cd:2f:01:58:f0:10:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:B6:82:FA:F2:A8:16:FA:DE:6D:A4:D8:D5:12:45:B1:02:66:EF
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:91:3e:1b:30:cd:dc:07:89:d4:63:42:1f:66:d5:8e:04:68:
f9:c8:b1:a8:dc:be:cf:dd:05:05:3b:2a:61:6e:f7:ea:53:51:
41:af:c7:73:d8:42:44:84:9d:b3:45:f7:a4:f3:27:e2:cf:c6:
f4:61:40:30:1f:99:1d:1d:aa:23:5d:64:ea:72:0d:88:f1:60:
d9:b4:6a:98:46:72:9a:2a:4e:86:4b:07:4b:d4:e4:ee:6c:c0:
8c:a6:3d:6d:e5:ca:61:d5:53:85:2d:f2:72:53:f0:59:6e:96:
9e:25:29:3d:85:c4:ee:f1:8d:42:39:dd:95:f1:b9:2b:a8:5e:
7f:27:59:f9:32:3c:cb:e3:12:89:58:b1:44:75:8b:68:ba:9f:
1d:6c:88:7d:ac:c3:0e:04:20:ef:b0:a1:21:11:91:70:89:07:
b8:9a:93:46:d7:4c:4b:b7:06:41:54:95:c6:c6:c9:cf:70:c2:
11:1d:b0:e4:4b:fe:53:70:f1:bb:e2:35:8a:a0:9a:e4:04:78:
40:20:ac:54:87:5f:8f:05:f7:d8:0b:5e:13:3d:29:61:9b:74:
52:3c:28:fe:8e:ca:eb:a3:74:1c:51:69:08:32:8a:83:d9:90:
43:48:25:94:26:83:07:5a:6d:c5:ec:f9:05:7c:d1:4f:f9:22:
64:d3:0c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:42 2025 by rpki-client