Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: 13uOxLC9S6K1wvbACkjFTOYvKMEuzFjui/tY0oQLRWc=
Subject key identifier: F8:75:4A:B6:DD:99:7F:D3:E9:A4:18:89:9B:FF:DE:EC:25:15:F6:EC
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 01A60F6D2744F65DD1E53DB5E6C38A9CC552B53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 02E8
Signing time: Sun 19 Oct 2025 03:13:47 +0000
Manifest this update: Sun 19 Oct 2025 03:08:47 +0000
Manifest next update: Mon 20 Oct 2025 05:34:47 +0000
Files and hashes: 1: AS215828.asa (hash: tAJdKMshiW8Rs4zyrkZEfNW8JfDNYqzPILXGNkubO7o=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: Pm6KfB4y3Fj54q2dSwlk1zIRKQDmu5kx4PlxhK0DUNI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a6:0f:6d:27:44:f6:5d:d1:e5:3d:b5:e6:c3:8a:9c:c5:52:b5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Oct 19 03:08:47 2025 GMT
Not After : Oct 20 05:34:47 2025 GMT
Subject: CN=F8754AB6DD997FD3E9A418899BFFDEEC2515F6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:84:7b:10:ca:2d:6d:b5:99:6a:3d:d8:c5:
06:b8:44:b9:2b:29:02:22:ae:36:c1:48:d2:cb:5d:
e2:50:bd:7a:c5:3e:03:3f:77:92:00:e8:28:3f:12:
c1:92:fd:e5:94:9b:d5:00:ed:d7:93:e6:c1:b3:e1:
71:eb:ce:72:1c:5a:be:cc:83:21:87:58:f1:37:dc:
9b:58:0a:e0:76:06:b3:56:b6:49:1c:3e:fc:60:14:
85:38:f4:ea:c8:7c:23:45:89:b3:69:fe:29:71:22:
8f:41:f6:95:70:43:a1:fd:64:77:6c:8e:c6:27:bb:
e8:06:46:36:d4:1f:c6:f1:15:df:f9:b2:f5:d4:df:
aa:7e:ea:49:75:fa:05:15:91:54:7b:30:be:fb:7c:
6a:d5:21:5b:fa:58:0a:09:7c:d2:94:f0:45:ed:95:
b7:e7:fb:83:55:e9:62:78:6b:1d:e5:6c:f0:26:53:
be:c5:34:e0:20:e7:89:5b:c0:a2:d7:c4:af:52:e2:
63:b6:fa:07:09:ce:ec:39:72:51:f9:eb:6f:26:78:
9e:74:7c:51:a3:03:05:ab:49:68:cd:67:ec:21:e7:
82:32:39:f8:e8:78:c4:5f:b2:19:84:c7:f1:b8:08:
5a:0c:71:f4:5b:e9:1d:a1:63:b7:83:cc:5b:23:7c:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:4A:B6:DD:99:7F:D3:E9:A4:18:89:9B:FF:DE:EC:25:15:F6:EC
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2e:bd:62:f5:63:c8:83:ea:50:60:8d:e0:79:8e:7c:cb:5a:
36:dc:55:36:54:6e:55:2c:30:44:6f:93:b2:7f:d7:04:23:7f:
da:f6:44:a5:71:ed:d7:89:23:c7:f1:3a:74:08:d1:ea:1b:2f:
44:92:cd:07:03:a8:46:cc:ae:7f:30:6a:07:2e:ab:01:86:11:
23:69:09:17:a1:af:7f:c7:38:a0:66:5e:ca:a9:08:0c:2a:1b:
07:63:7f:82:59:25:e2:65:cc:4d:5a:ab:a0:9d:65:28:93:f8:
59:3e:c4:57:ec:9e:7b:c6:ba:aa:88:4d:81:df:df:e5:5b:41:
2d:cf:41:59:40:26:42:70:36:15:86:12:51:39:93:c1:cd:3e:
90:1b:e5:c6:06:28:b0:ea:3a:ab:15:f6:2e:ba:7e:9e:8b:2a:
10:f3:6f:49:03:8b:34:a3:ef:d3:27:db:05:35:1e:a4:6b:4b:
5c:f1:f6:c7:44:11:9d:8d:b5:35:84:d5:5e:bb:18:34:a8:7c:
7e:c6:35:51:01:ed:f1:ef:5d:40:6c:f2:82:8c:0f:ff:c3:55:
c1:e7:8f:9f:bb:60:1f:a0:31:98:1c:5a:0a:70:aa:09:58:53:
a8:36:11:92:c9:ff:70:3e:d2:4a:18:3b:ae:f2:f1:99:0f:40:
8c:dd:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:50 2025 by rpki-client