Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: Ap0Og+GL6AqLyAffHThGDu/jdHCz+yI4+pxWtWGyD/E=
Subject key identifier: E3:CD:58:63:05:9D:67:FC:7A:42:3C:0D:7F:AD:AA:8B:8C:66:90:17
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 195ACB8E41428A9F4607762F6B9DC3FCDDE0126E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: 38
Signing time: Sat 28 Jun 2025 19:45:07 +0000
Manifest this update: Sat 28 Jun 2025 19:40:07 +0000
Manifest next update: Sun 29 Jun 2025 20:47:07 +0000
Files and hashes: 1: AS213768.asa (hash: R9ERvttyM23Nz4uP5cMSLIdDTei/lOmIkuEaLWi+d1s=)
2: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: wnjha3+yKo6UlH9P6j+MurE8fEuGp+bbcmy/lKGqhoo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5a:cb:8e:41:42:8a:9f:46:07:76:2f:6b:9d:c3:fc:dd:e0:12:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Jun 28 19:40:07 2025 GMT
Not After : Jun 29 20:47:07 2025 GMT
Subject: CN=E3CD5863059D67FC7A423C0D7FADAA8B8C669017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:62:4e:92:54:1a:2c:33:46:aa:81:99:59:
34:16:ad:73:b5:e8:b5:e8:4a:3e:df:21:25:62:9b:
04:10:26:5e:7a:20:12:a6:64:6b:4e:fd:e5:f5:84:
c2:8a:bb:7b:df:32:da:3c:da:ec:79:0e:af:94:30:
02:1e:a9:90:df:ad:d6:ef:ee:86:ff:26:31:03:28:
29:4f:14:7a:d5:1d:23:8b:ac:fa:60:a5:43:e6:f6:
03:c0:4a:f5:8c:c3:9b:43:f1:13:9d:10:df:e0:e9:
db:d2:85:db:28:86:d8:75:bc:91:01:24:72:11:db:
61:56:b7:7b:cc:12:dd:b6:93:38:ef:63:38:86:ed:
4b:26:c9:fd:ec:f6:6f:f1:74:7b:9a:99:23:1e:d1:
72:35:0b:36:83:6e:92:be:90:4f:05:4b:35:27:7e:
70:8f:f8:67:4f:b8:41:96:d2:c7:95:62:60:49:20:
60:91:a5:06:d6:8e:06:99:ad:e9:fb:8c:c1:99:af:
7a:cf:63:44:2f:f9:16:99:03:25:a6:5a:f1:16:1e:
37:da:22:7a:4e:4f:14:3f:3b:b8:28:cc:c1:82:c4:
69:dc:af:2f:27:75:2b:85:cd:c7:e5:4b:41:62:3d:
12:2c:56:d6:35:a5:4d:d5:17:ad:4e:1a:bc:27:c4:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:58:63:05:9D:67:FC:7A:42:3C:0D:7F:AD:AA:8B:8C:66:90:17
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a7:02:59:aa:f4:78:37:19:fb:a4:36:c6:8b:60:5e:17:f2:
fe:92:ec:f4:95:55:22:bf:3f:02:cd:0e:ab:9e:65:4c:ed:af:
91:3e:d4:34:c3:da:28:cd:be:b3:73:cf:c4:c2:ea:4c:cd:d7:
c7:96:1d:41:19:5c:e3:df:92:02:f2:38:55:b8:33:c9:a7:3e:
81:ec:66:0c:26:0a:49:3d:46:8a:ae:7d:36:9b:e6:43:df:ee:
ae:ad:69:5d:47:6a:f2:40:dc:34:5c:bc:c9:9f:9f:79:12:ec:
e6:d6:fd:e4:f8:a5:9c:ee:fe:75:af:89:e1:4b:7a:ab:17:9e:
da:8e:6f:ab:53:5b:fc:fe:2e:c9:0e:e3:f5:07:01:4b:f0:52:
25:55:cf:6a:32:7b:df:a4:79:36:25:4b:91:4e:78:31:26:84:
3b:49:93:0f:80:19:84:e1:ff:df:26:a0:86:99:bb:16:5d:ba:
90:dc:89:42:51:5b:57:0b:63:6e:f3:5d:f1:ca:6b:49:ec:da:
fd:21:30:ed:ac:31:d5:cd:c1:dc:6d:81:77:89:12:97:d2:03:
34:47:af:38:5a:e2:d1:be:a9:4c:cf:8d:55:52:ff:46:aa:cb:
5f:f8:d2:d7:bf:b4:77:7c:1d:bb:51:db:b0:f9:ea:85:ba:11:
3c:0d:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:31 2025 by rpki-client