Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier: nhZoWiSAEGpasgHp5SEUI8TgFY/WUcmCS+9qf3odz30=
Subject key identifier: AD:75:88:61:52:89:C2:23:E0:38:ED:98:4F:6A:9B:9C:3A:BC:E5:33
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer: /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial: 7CE6307BCA7258C55BF4545B9C39A4895A911DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number: CF
Signing time: Sun 19 Oct 2025 08:14:10 +0000
Manifest this update: Sun 19 Oct 2025 08:09:10 +0000
Manifest next update: Mon 20 Oct 2025 08:23:10 +0000
Files and hashes: 1: AS213768.asa (hash: h3rS3JyeiVp8FsFljS/efb0MZnxctnTuSuQjoONj0XI=)
2: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: Bncfp4Lu29thdH7Rydlhctw3Fe2Wb9WfV/Snx4DL+gc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e6:30:7b:ca:72:58:c5:5b:f4:54:5b:9c:39:a4:89:5a:91:1d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Validity
Not Before: Oct 19 08:09:10 2025 GMT
Not After : Oct 20 08:23:10 2025 GMT
Subject: CN=AD7588615289C223E038ED984F6A9B9C3ABCE533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:86:10:cd:8f:17:f2:1e:5d:52:01:09:35:
e4:e1:12:6c:31:b7:31:92:b3:95:ec:96:6e:b4:96:
e5:30:32:e1:70:69:da:ff:fc:47:6d:ca:de:a4:b9:
94:85:9c:f3:4f:10:76:36:63:05:03:31:66:cb:09:
15:58:58:6c:41:98:fa:de:93:49:d3:ce:6d:10:21:
d5:bc:5e:26:07:ea:5e:eb:d4:6e:87:69:ae:d8:c5:
5f:af:39:71:71:34:c1:0b:a7:03:27:2b:06:b3:8a:
52:b0:46:9c:b9:b0:df:17:dc:ee:4a:33:03:97:5f:
02:a5:3e:66:40:05:19:55:2e:8f:a2:8a:d1:40:97:
f0:21:96:92:ed:cc:bf:01:fc:4f:a3:33:1b:e5:3e:
19:38:24:e5:c0:45:9a:1b:a3:54:9d:c9:c2:a6:dc:
11:78:ce:1a:d0:89:50:8e:73:eb:0e:f4:44:9a:d7:
66:0a:ac:aa:46:db:2d:dd:d1:99:02:81:09:ea:af:
c3:45:eb:0b:b4:0c:92:bb:38:c0:17:1d:c9:04:75:
4e:74:3b:41:a1:33:77:18:4d:94:3c:59:f7:25:4c:
6f:fa:a6:e8:fb:de:37:f2:7c:52:be:40:f6:42:a3:
1f:8e:40:e4:e1:de:5f:81:25:23:dc:90:83:3e:19:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:88:61:52:89:C2:23:E0:38:ED:98:4F:6A:9B:9C:3A:BC:E5:33
X509v3 Authority Key Identifier:
keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e9:ad:fa:6e:49:a7:d4:b5:9d:27:02:07:8c:84:46:ab:ee:
be:58:5a:36:14:e3:30:00:c8:3c:d4:9c:88:69:e7:a5:43:7b:
5b:c2:75:d6:0a:04:87:66:13:f9:67:0e:3d:c9:4c:9e:46:d6:
35:2f:0f:cd:b2:00:d8:48:a2:16:89:5b:58:29:b7:a2:3f:09:
b1:78:0c:fb:31:6c:fb:e8:bf:89:b6:25:b7:e7:3c:06:1b:a0:
33:4d:c9:74:b6:f2:77:df:bb:fe:9b:ec:be:ab:3c:f1:13:08:
a6:5a:1d:e4:c6:31:3a:97:a0:b7:d4:32:0e:8b:19:c2:c1:f8:
b2:48:f9:ce:3b:67:6c:93:c1:0c:00:11:40:79:f6:04:e5:ed:
5d:93:6b:a9:cc:ff:9f:98:ee:14:5f:34:57:6b:1f:86:2f:b8:
8a:8a:4f:75:b8:e3:e7:bf:29:42:5c:49:46:87:77:33:3d:2d:
59:75:11:b8:78:9d:76:16:16:6a:54:14:75:13:7b:d6:a0:3b:
18:e6:7c:a3:16:f8:74:d2:45:dd:07:9b:62:2f:9d:b1:6f:07:
4c:c4:f6:72:9c:48:70:60:c0:02:86:e5:7b:3b:3d:75:8f:97:
80:2e:75:ab:fc:20:e5:25:e9:b1:e4:66:08:74:44:36:d8:d0:
ed:22:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:02 2025 by rpki-client