Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: jo28ttLhHyeLtwpLw78rP5J5VenQGX+hxCwuf/Mz3dw=
Subject key identifier: 2D:36:47:A4:D0:83:88:00:4B:E7:3D:AF:02:EF:FF:03:F7:DE:03:A6
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 70B2424DF4F7C7F0A70B7E5489DA78B41E20EED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: 82
Signing time: Sat 23 Aug 2025 09:37:56 +0000
Manifest this update: Sat 23 Aug 2025 09:32:56 +0000
Manifest next update: Sun 24 Aug 2025 12:09:56 +0000
Files and hashes: 1: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: LFX4fjhj2t//SX+DS75peXuoSZr15udPHFhjOGgu0+I=)
2: AS213768.asa (hash: h3rS3JyeiVp8FsFljS/efb0MZnxctnTuSuQjoONj0XI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b2:42:4d:f4:f7:c7:f0:a7:0b:7e:54:89:da:78:b4:1e:20:ee:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Aug 23 09:32:56 2025 GMT
Not After : Aug 24 12:09:56 2025 GMT
Subject: CN=2D3647A4D08388004BE73DAF02EFFF03F7DE03A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:78:a4:a8:2d:b9:49:50:46:a0:c5:38:cd:
c7:7b:4b:77:69:eb:9c:88:49:07:57:94:ae:5c:1b:
4e:35:b1:80:8c:a0:f6:08:c9:51:96:2b:08:39:bf:
e4:33:d0:61:ea:ee:ac:83:cc:82:1e:d8:70:30:46:
93:3a:1c:38:b8:9c:a2:52:04:3c:73:49:cb:5e:53:
5e:cd:7c:08:05:a8:f1:c3:fa:34:8b:01:a6:e1:13:
60:10:30:15:1c:58:7b:0b:3e:72:e2:ae:41:43:62:
d3:52:2e:0b:b3:ec:25:ce:24:88:df:34:61:e0:d7:
dc:53:01:73:0f:2b:00:35:a0:e7:92:0e:f6:c4:e3:
b0:b1:a4:6b:e0:bc:95:a9:5b:f4:87:c0:7f:22:f1:
64:d7:02:85:9a:b6:97:84:2b:43:e4:8b:35:2c:c1:
7d:5e:4e:8f:80:3d:85:8d:24:7f:2c:7f:e5:7d:da:
a9:3c:1b:b6:b1:f5:7f:9f:12:bb:d1:8f:cb:42:db:
7c:0c:9a:43:0e:5e:99:87:39:4a:bb:50:6b:48:cf:
6a:c5:0d:02:d0:e3:eb:46:a0:f0:95:b2:e0:0d:68:
b7:99:d6:5a:cb:07:2d:43:ec:db:33:7a:2e:4c:96:
a7:b8:cb:25:31:ba:f9:7e:cf:9f:ef:38:6b:2c:33:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:47:A4:D0:83:88:00:4B:E7:3D:AF:02:EF:FF:03:F7:DE:03:A6
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:eb:4f:4b:27:4e:c2:e8:b6:6a:b2:64:9a:96:1c:3a:38:df:
0f:4a:99:ca:d2:da:dd:95:eb:ac:b9:c8:dc:da:31:31:a9:d1:
a8:2b:fd:5a:d8:68:3d:9f:db:80:d9:2a:ec:99:54:5a:ee:34:
41:69:d0:23:5a:8a:c2:4d:b2:f6:72:14:e4:95:f6:b2:bf:b6:
1b:11:d8:79:de:d2:c3:fd:f6:be:8b:0b:e6:a6:5c:32:88:59:
eb:e5:a6:15:5f:ed:46:69:b3:bf:3f:96:a0:b4:64:3d:18:f8:
02:57:22:1c:3b:e6:7e:7f:24:68:56:64:52:f1:db:8b:55:d8:
c9:e5:56:9b:ff:d7:ff:04:53:c0:f5:7b:b2:c0:60:19:15:a2:
db:f3:23:6f:fd:bd:ad:dd:72:81:77:6c:93:f7:79:9f:06:2f:
03:46:d0:34:af:f0:dc:f7:71:b5:73:0e:07:e2:09:4b:08:87:
08:bd:03:0a:24:87:82:a6:ce:2c:a9:f3:62:13:5a:07:91:28:
a3:9c:33:87:21:1c:a0:23:3a:1b:68:8a:9b:a4:3a:43:5b:6a:
d1:ba:08:61:04:20:84:e5:5d:d6:e2:77:55:15:07:20:69:29:
e1:3b:4e:3e:52:d8:27:3a:4a:b4:e5:2d:0f:63:ef:95:a1:b2:
8d:b6:d8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:20 2025 by rpki-client