Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier: zwt/bpnVxF720vQSB1XVK+6pi4Blti9BbBU4wJgf/pM=
Subject key identifier: 5B:94:7E:55:A5:00:C1:A6:BC:C7:33:36:63:75:B5:72:8E:19:0D:5A
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 0DCB47403B352863C4A5EC5672DDB10F8FB634D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number: 0493
Signing time: Sun 19 Oct 2025 04:36:35 +0000
Manifest this update: Sun 19 Oct 2025 04:31:35 +0000
Manifest next update: Mon 20 Oct 2025 07:03:35 +0000
Files and hashes: 1: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=)
2: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: 96zpE0f+VJMtMFcA+Q74UG/uGcvxb2fJ0Eq0FTcB3DE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 07:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cb:47:40:3b:35:28:63:c4:a5:ec:56:72:dd:b1:0f:8f:b6:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Oct 19 04:31:35 2025 GMT
Not After : Oct 20 07:03:35 2025 GMT
Subject: CN=5B947E55A500C1A6BCC733366375B5728E190D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:36:86:8f:91:38:9f:60:49:da:4d:ec:42:
0d:1f:96:85:be:33:7f:34:d1:da:ec:4b:33:8b:bc:
89:cb:26:ba:b0:8e:bf:a8:92:8d:db:05:20:99:e6:
dc:5d:88:7b:df:b5:d6:48:89:a3:e1:b6:b0:3b:cc:
cb:f4:55:0d:2d:46:96:78:24:62:50:7d:4c:8c:bf:
37:40:51:56:a7:13:93:13:e6:5d:bd:d1:ff:36:b9:
6a:88:2a:de:16:98:e8:57:73:18:34:c9:a2:b9:b5:
ce:63:b2:a2:d6:e3:7c:f9:ea:4e:1d:bd:4e:20:28:
19:28:b8:bd:f8:0a:f7:35:80:6a:da:26:4b:85:7f:
f4:ea:d8:9e:84:d2:4d:91:f1:0c:e8:a9:27:eb:ce:
bb:70:4c:4e:0d:f1:4d:f1:82:ca:74:2e:18:87:c1:
48:56:41:c5:9b:49:d5:96:4e:9c:8e:61:53:21:8e:
a6:3e:58:97:f5:86:55:ea:61:61:71:99:ab:e0:36:
1d:70:f5:0c:b8:66:3e:ea:35:31:fe:d2:28:df:3e:
fe:b7:40:1c:58:54:33:3d:dc:10:9a:62:59:af:56:
ea:92:20:4b:ec:ce:66:86:c3:c1:36:b9:b5:6a:53:
38:a9:f6:7b:e5:25:f6:3a:54:db:78:9c:90:d3:63:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:7E:55:A5:00:C1:A6:BC:C7:33:36:63:75:B5:72:8E:19:0D:5A
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:38:17:4c:86:82:56:c2:dc:30:c6:35:b3:56:69:2f:0b:ee:
22:32:39:e2:37:bc:90:15:86:a6:b0:38:2a:d7:d0:1c:e6:07:
b7:5e:aa:9b:7d:9f:2a:40:27:93:2c:fd:74:53:43:1b:c0:bc:
0b:5b:b1:7b:21:38:cb:77:c8:a2:95:55:cb:60:f1:c3:1d:4e:
52:c0:e0:7d:96:9f:18:3a:9b:84:8b:86:9a:67:dc:78:ff:22:
5a:f9:09:b9:fd:f6:65:1d:d9:dd:8e:63:2e:b5:14:68:13:6c:
9e:33:47:42:73:ae:22:80:22:b1:9c:a6:75:4a:de:67:e5:d9:
19:75:b4:98:33:0e:8d:b9:21:7c:45:37:bf:1d:c4:3e:08:f2:
31:2b:5f:b7:37:42:6b:af:c6:cc:dd:37:ae:53:70:a8:35:65:
ab:7c:9f:01:3d:24:ce:02:88:f4:bb:0a:7f:0c:6b:72:f4:57:
cf:3e:8d:8f:4b:34:47:96:f8:73:56:51:d8:da:d0:32:66:2b:
db:e3:b7:a8:a8:6b:21:f8:f3:a7:b1:7f:18:a2:5a:d8:40:0d:
17:9e:95:e5:5c:bd:89:d0:48:1f:20:e2:33:72:bd:c9:43:ac:
41:e6:23:05:70:e6:4c:11:ef:fe:71:26:f7:71:d1:64:d8:d0:
57:f3:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:39 2025 by rpki-client