Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: Rlm/bidhqUAsQS8PBYIQYKx1wR80UVmxVACRMS9zM5c=
Subject key identifier: 82:CE:2E:2E:7B:0F:2C:35:C3:2C:B9:83:C7:1C:4A:14:FD:78:5D:4E
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 62601583ADC8E6518BD870FD1A0FD06B217D7FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 029B
Signing time: Sat 23 Aug 2025 01:24:17 +0000
Manifest this update: Sat 23 Aug 2025 01:19:17 +0000
Manifest next update: Sun 24 Aug 2025 04:10:17 +0000
Files and hashes: 1: AS215828.asa (hash: jurRDln6QuNpc6IoJAhmodpiRmmi0pbj8mD4CWgxSRA=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 5K+MV/qcHqMllTSXasJdVAf8rXpdF2zrG8GTGvO+mAU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:60:15:83:ad:c8:e6:51:8b:d8:70:fd:1a:0f:d0:6b:21:7d:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Aug 23 01:19:17 2025 GMT
Not After : Aug 24 04:10:17 2025 GMT
Subject: CN=82CE2E2E7B0F2C35C32CB983C71C4A14FD785D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:92:8d:08:eb:09:a0:23:9b:da:11:51:7f:
a1:4e:42:af:6f:3a:c7:88:4d:9e:f3:2e:ea:0a:0e:
97:46:28:17:48:92:3d:b3:dc:ef:86:6e:a7:57:f4:
d3:58:5b:67:5b:24:79:f8:6b:3e:8e:0a:65:0c:7a:
60:2a:0c:0d:b5:4f:3d:0d:da:19:f7:f7:4b:a7:48:
c6:97:ae:c1:38:cd:74:8f:4a:d9:8f:dd:57:1c:aa:
44:1c:d6:5c:f6:5c:e6:68:9f:4e:00:34:cf:db:3e:
9e:a8:23:b5:27:f3:30:a9:eb:b9:ea:9c:67:f5:4f:
23:dd:07:23:4e:13:a7:f8:f6:00:bd:8e:12:2b:fd:
ad:30:2e:04:9d:2a:42:1f:5a:9d:11:f3:6f:e4:ed:
d9:2a:e7:26:23:32:2f:5a:dd:6b:ac:c9:5f:52:fa:
4e:14:19:fe:a6:69:a3:d8:56:d4:eb:0b:0b:28:31:
8e:5e:41:55:b9:61:92:6d:dd:c2:96:99:33:15:1b:
f3:64:f3:63:c6:81:24:9d:83:a9:83:cf:ce:90:b3:
3e:82:20:72:83:1f:00:f2:fc:ab:a2:d2:0a:64:65:
df:19:5c:f0:10:99:65:28:57:49:12:59:53:65:bb:
7c:71:82:1a:5c:28:6f:11:40:21:2f:02:fd:73:f0:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:2E:2E:7B:0F:2C:35:C3:2C:B9:83:C7:1C:4A:14:FD:78:5D:4E
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cf:bf:10:d5:29:b5:dd:0b:ba:01:41:1e:37:5d:69:8a:d8:
14:10:cd:30:c9:33:fd:73:57:80:06:bf:d4:23:35:c0:88:d1:
62:46:1b:2f:10:0e:09:0c:da:c2:97:04:56:3f:ce:53:80:6d:
19:7a:ab:7c:16:eb:7e:39:0e:80:29:c0:19:7d:d4:2a:45:bb:
11:c5:b5:b2:df:ed:22:2f:ba:ea:9c:09:95:c7:4b:32:bc:da:
73:0c:cd:e4:20:98:73:c8:24:96:64:ba:f5:d2:92:d8:c1:75:
92:ff:58:94:79:6f:48:ed:d0:00:ae:11:75:0f:1c:8d:86:01:
22:81:27:a5:fb:fe:3d:9c:7e:94:f2:a7:e7:0f:25:74:5b:1d:
ea:bc:b2:19:9e:d9:bc:8d:15:b7:90:7a:51:e2:f0:79:c6:db:
2f:56:50:c8:d0:df:bc:72:ad:fc:11:8a:6d:7d:02:99:71:5f:
27:85:41:9e:bc:93:a2:20:70:a5:d9:e5:c7:99:80:33:2e:ea:
8c:72:34:31:dd:88:a8:09:22:19:d3:96:aa:60:39:8d:d0:74:
50:f4:b4:4e:4d:18:41:81:0f:55:6b:43:24:eb:43:22:57:80:
4e:60:03:b9:3e:10:f4:f7:49:d0:40:9a:7a:ef:c4:a9:41:fb:
71:25:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:01 2025 by rpki-client