Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier: zl2nKgXsP8GFNQ3+tXm7OF9xY1fCnUnpsJObC/h1fsY=
Subject key identifier: E4:B9:27:13:E0:2B:E6:E1:1B:F0:EC:B5:44:6B:A4:2F:5A:F4:13:8C
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 1CD2751A8520229775449C098783457D1E80E13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number: 03FE
Signing time: Sat 28 Jun 2025 20:54:11 +0000
Manifest this update: Sat 28 Jun 2025 20:49:11 +0000
Manifest next update: Sun 29 Jun 2025 21:19:11 +0000
Files and hashes: 1: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: 7Mr63AuoLpeNzPrZX9PquYZxTpDe0gUeot3F8rJ9RxU=)
2: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d2:75:1a:85:20:22:97:75:44:9c:09:87:83:45:7d:1e:80:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Jun 28 20:49:11 2025 GMT
Not After : Jun 29 21:19:11 2025 GMT
Subject: CN=E4B92713E02BE6E11BF0ECB5446BA42F5AF4138C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:04:32:5d:42:78:91:de:ab:e2:a6:25:f6:
0b:96:4b:0f:05:ad:e5:a0:50:04:75:93:54:6a:55:
15:00:df:cd:7e:7a:8c:7b:b7:fd:57:3c:56:95:43:
3b:ba:46:d1:9e:c2:1b:de:12:0a:c2:f2:04:45:e7:
ab:e9:14:81:ad:2f:ea:91:62:36:93:35:e8:d4:4d:
1c:79:bc:d8:cb:5d:75:30:f3:09:95:75:03:ee:1c:
fb:8b:8e:3e:ec:ca:8a:4c:0c:3e:68:ad:17:71:fb:
80:8d:3e:da:0a:dd:ef:a0:e0:9c:64:4a:20:58:f2:
be:c4:1e:41:21:ce:04:54:8c:5a:7e:c4:2d:4f:77:
5b:04:de:e8:e1:82:aa:22:6e:ed:92:a8:5b:80:fc:
7d:60:f4:be:42:3e:eb:34:c6:6a:13:95:22:7c:36:
f0:9c:dd:9a:9c:2c:69:3f:08:a8:6a:6e:e7:c0:d9:
58:b0:22:ad:04:6f:cf:82:6d:51:be:7d:8e:b9:d2:
6c:8d:df:61:f8:d5:fa:21:56:06:34:dd:b5:f0:fb:
39:69:cb:57:1c:f1:f0:e5:c5:2a:68:8c:54:61:a7:
b5:e9:e7:27:d2:b5:d5:3c:0b:f1:f0:17:87:20:48:
af:f2:69:bd:2d:53:26:5f:ae:03:05:cd:79:76:26:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:27:13:E0:2B:E6:E1:1B:F0:EC:B5:44:6B:A4:2F:5A:F4:13:8C
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:6f:73:68:90:36:27:c3:be:22:49:b4:90:91:5b:6e:d5:
b2:54:18:93:22:cd:2c:2e:aa:bb:e5:77:6a:2d:5e:0d:a5:a5:
61:14:b6:16:08:2f:63:46:fe:3c:c0:61:f9:06:e2:76:ce:34:
2c:82:35:94:de:ec:1a:9b:99:20:4e:67:5c:6b:90:fa:fc:f7:
0a:47:fd:6e:3d:e1:3b:81:4e:44:60:3b:ac:51:83:d1:5d:08:
34:b2:15:c1:a3:88:cb:30:a4:a0:69:5e:07:16:6d:99:e8:f3:
e3:02:f9:75:ef:23:f7:a4:2e:91:b7:2d:e0:3b:05:eb:0a:48:
e0:e1:34:0b:8f:5b:da:29:10:87:b5:f3:3a:09:d5:e6:43:26:
4f:47:93:6b:d1:eb:e4:65:05:5b:ad:81:c4:91:fb:63:45:99:
19:94:38:d5:66:19:53:15:f3:bc:b6:f8:f7:84:b5:de:e2:2a:
03:90:6b:e9:39:a1:bb:c2:27:35:d6:56:3b:0e:2d:f5:46:e7:
f5:96:22:66:a4:40:eb:77:d2:11:9a:34:ee:ed:f4:88:48:3c:
ab:d9:d2:ee:b2:6f:96:39:6f:5a:24:14:af:4b:37:41:57:73:
15:7a:bd:b5:1b:02:88:7f:c0:14:fe:36:39:96:04:e9:97:27:
75:e2:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:26 2025 by rpki-client