Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: Fhz7xRCZcYsH4EyNBPTau8ducTPQmwr9/8RRv+OEgGw=
Subject key identifier: 31:87:23:51:40:7A:E2:C1:23:CC:4C:D0:B7:71:B5:A1:53:BB:81:AC
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 2658B3E83A53C77399C3897737F3901097398C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0254
Signing time: Sat 28 Jun 2025 02:22:24 +0000
Manifest this update: Sat 28 Jun 2025 02:17:24 +0000
Manifest next update: Sun 29 Jun 2025 06:00:24 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: AaWPF4JZTTjQv3IxcoSa6axwD2wNB6/HK32luKLeInM=)
2: AS215828.asa (hash: oCe8lfkLRpbP1aezyZ0vYkeabSvW/l+xGg4D/nr874Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:58:b3:e8:3a:53:c7:73:99:c3:89:77:37:f3:90:10:97:39:8c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Jun 28 02:17:24 2025 GMT
Not After : Jun 29 06:00:24 2025 GMT
Subject: CN=31872351407AE2C123CC4CD0B771B5A153BB81AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:94:75:3f:de:8a:77:93:4e:df:6a:b8:93:
d4:b4:21:ca:8a:59:1e:a0:71:89:9f:c5:b9:7b:dc:
7d:3f:e8:1e:ef:3a:9d:bc:88:91:2e:6a:85:5f:c2:
0d:63:f2:83:e2:19:7f:3f:90:13:51:4f:fb:69:df:
46:05:eb:ff:fd:58:06:1f:92:d0:52:b9:6d:9c:80:
b9:ca:04:ec:07:2f:17:2f:92:2a:8b:7b:f1:3a:e8:
54:e2:c6:fa:82:66:2c:18:e1:9b:55:a6:4f:9c:70:
40:75:ad:47:18:22:e0:a8:de:95:5a:f8:c7:0a:06:
8f:1a:11:c7:07:71:f9:f0:e5:a6:40:a6:da:22:ac:
13:28:04:10:40:64:02:69:62:e1:55:e4:6f:97:21:
6e:dc:f3:53:fd:d5:4b:4b:e6:72:5c:5e:a4:39:eb:
9b:70:e8:f1:f2:ab:62:9d:3f:58:4e:a3:a3:6d:e4:
07:b1:dd:6c:cd:9e:9b:c0:96:9d:06:74:40:b7:77:
e3:b5:82:56:6e:1a:1c:1f:d9:5b:a7:ad:fb:44:9a:
e2:37:cd:ff:08:20:61:36:82:a6:6e:d6:9a:f7:0b:
2c:25:e1:c2:d4:94:06:78:f9:e2:37:37:a8:a1:50:
c5:6e:1d:34:49:a4:15:31:b6:3a:85:77:b3:3e:86:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:23:51:40:7A:E2:C1:23:CC:4C:D0:B7:71:B5:A1:53:BB:81:AC
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:58:a5:fc:24:38:b2:cb:46:86:96:fe:ff:79:7d:52:84:bd:
04:f3:46:78:79:3d:5f:cf:c4:f3:ee:13:fc:d4:4a:68:ab:77:
1b:c8:21:71:e8:6b:37:29:0a:89:77:bc:c9:a2:fe:05:da:27:
bd:91:29:b5:dc:42:8f:d2:32:63:33:98:7f:22:27:4f:15:8c:
01:bb:94:73:47:7e:77:7c:02:30:45:17:3e:ed:c6:55:1d:b4:
57:b2:60:28:14:d8:aa:d6:ff:7f:4a:3f:74:0b:6b:e8:89:71:
8e:11:bd:73:f9:d0:00:63:08:37:d1:f1:d5:38:46:50:4e:8e:
01:75:9d:ac:69:d0:41:97:f0:ea:7f:e7:a9:4e:97:06:f3:2d:
3f:31:6c:2c:16:19:57:b1:d7:68:00:77:60:36:2e:7f:47:ff:
83:48:e4:16:13:b7:b1:72:91:95:67:ac:a9:1a:82:4c:13:16:
cb:07:2b:8f:c7:00:ea:6d:49:9b:60:58:f9:b0:4b:11:19:19:
7c:72:3f:e2:60:ef:5f:87:af:18:b4:05:60:b9:15:f1:c2:29:
38:2a:4d:20:31:6e:5a:ca:89:42:8f:ee:4b:20:9b:30:d3:d4:
dc:b5:2c:3d:44:4f:32:da:51:34:64:9c:41:6b:99:4d:b0:71:
08:18:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:17 2025 by rpki-client