Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File: E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier: m+g3YCYEnuF+hRINgt3xLxYRzQFp04WziCHdYgvpr1w=
Subject key identifier: AE:B5:65:A0:E0:BC:98:C7:67:3E:E2:93:E2:F6:17:F9:E8:16:F9:F7
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer: /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial: 14BCA16D57EB3EBBC13DE3AC96893EA6F7E3EB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number: 02AA
Signing time: Sun 19 Oct 2025 01:21:23 +0000
Manifest this update: Sun 19 Oct 2025 01:16:23 +0000
Manifest next update: Mon 20 Oct 2025 04:57:23 +0000
Files and hashes: 1: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: i/ZhZVhQeQb9RBiubpMmUcqhn7n7YBHnx0F5iqddEHE=)
2: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: /8lHhKIuzTcsmBKH0ioYgR3QJ/GmZe2e/TKZ5GWlTv0=)
3: AS215131.asa (hash: /Ig9Y9j+GErTcuTTgHxL2iaOhUZXWZH+p25xdO/uCfk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:bc:a1:6d:57:eb:3e:bb:c1:3d:e3:ac:96:89:3e:a6:f7:e3:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Validity
Not Before: Oct 19 01:16:23 2025 GMT
Not After : Oct 20 04:57:23 2025 GMT
Subject: CN=AEB565A0E0BC98C7673EE293E2F617F9E816F9F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:8e:cc:89:9e:cf:61:10:05:77:e5:69:22:
f6:51:6b:ac:31:af:85:8d:a0:fc:14:50:89:7e:63:
c9:29:5b:75:30:1a:c7:92:60:ce:7c:92:0d:a5:ac:
1f:f2:53:1b:51:21:a4:a5:b3:39:08:16:79:93:91:
0b:e8:fd:84:b7:15:50:d3:df:2d:e8:41:41:15:9f:
34:de:b7:fd:79:3f:b7:55:2e:63:7e:a1:0f:7b:d1:
49:7e:b4:62:9d:9b:d9:ab:96:73:2f:e8:83:6d:7c:
7b:39:4f:44:a6:75:60:1d:0e:fc:a6:2c:2e:34:e0:
77:96:9b:4b:87:87:5e:36:ef:58:26:99:85:d6:06:
ca:20:d5:9b:c6:34:81:f5:dc:84:2e:fd:ab:fa:92:
80:01:41:1b:39:a7:cd:ff:4e:4f:f5:c2:56:00:70:
07:03:8e:d8:d2:08:4d:82:23:6f:4c:f5:21:b7:25:
ca:e8:dd:c2:0e:2e:b1:4b:f2:6a:5b:13:d1:6d:f7:
1c:b9:eb:9f:84:96:f0:0f:c1:e3:ac:fc:3b:cd:a0:
a4:2b:a7:90:82:ae:79:5c:64:2f:81:3f:fc:f6:fd:
03:54:29:d4:cc:46:fe:98:6c:19:5c:66:dd:63:49:
73:34:ab:21:66:1b:e8:4b:43:66:87:bc:dc:c7:4e:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:65:A0:E0:BC:98:C7:67:3E:E2:93:E2:F6:17:F9:E8:16:F9:F7
X509v3 Authority Key Identifier:
keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cd:bc:88:58:cb:89:6e:a1:1c:fe:99:ca:dc:61:4e:97:e2:
08:fa:58:e0:cb:56:c4:a1:a0:fe:b7:12:7e:05:3e:de:bd:91:
39:82:52:e6:89:40:31:b6:8f:a1:8a:a1:30:ee:32:66:f6:00:
67:dc:26:d3:69:35:e1:8f:e4:ff:57:19:7b:a6:2d:7f:f4:12:
7a:89:dc:e4:81:46:83:aa:92:62:e7:af:a5:35:5e:f0:1e:08:
81:3e:89:be:ed:24:52:f4:8c:19:a5:72:29:ac:50:20:97:bd:
25:b0:a4:a9:30:1a:a1:38:a1:11:31:5e:fb:63:88:18:fa:66:
21:a8:25:b8:cd:ef:4c:04:af:3c:f5:d6:7e:6c:e9:28:83:2c:
f1:1d:64:85:92:36:45:e8:3c:32:1c:bf:9c:ed:88:34:62:16:
c2:5f:24:75:81:a1:4a:bd:55:e7:a1:f5:71:24:35:c3:3d:5e:
62:98:3b:a4:3a:3f:c8:71:e3:9a:0c:b7:82:e7:c7:80:8d:a1:
93:e2:f0:ed:4c:d2:23:27:03:29:ef:22:7c:77:ea:28:cc:87:
5d:b0:1b:85:0e:cf:28:7c:ba:a5:12:9b:73:97:49:57:9f:7f:
c8:a9:ac:ef:b4:bd:a7:18:15:0b:8a:74:60:45:29:c5:17:d7:
04:55:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:16 2025 by rpki-client