Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: x64m4obTNnOfbmWS2x1ftw36i2qhZNv/UvlOHysq4UA=
Subject key identifier: 82:86:F2:A7:DE:46:D6:16:3F:B8:3F:08:64:19:5C:EB:90:F1:D2:0B
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 3385993008F57285ED9FE14176B2CC95FE3F2E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 03DF
Signing time: Mon 20 Oct 2025 02:55:25 +0000
Manifest this update: Mon 20 Oct 2025 02:50:25 +0000
Manifest next update: Tue 21 Oct 2025 03:23:25 +0000
Files and hashes: 1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
2: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
3: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: 0sGFM37cDCc5RLjAW3rnwcwI7IF/cuzsuD/N+qTe+es=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 03:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:85:99:30:08:f5:72:85:ed:9f:e1:41:76:b2:cc:95:fe:3f:2e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Oct 20 02:50:25 2025 GMT
Not After : Oct 21 03:23:25 2025 GMT
Subject: CN=8286F2A7DE46D6163FB83F0864195CEB90F1D20B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:d6:be:88:df:65:ba:89:a7:de:0d:47:e3:
40:54:82:bd:8b:84:f7:a2:d4:1a:02:2e:c2:0e:6a:
83:9e:5c:22:d5:2e:0c:cf:fb:56:c0:3d:5e:86:f4:
58:45:f2:0f:53:f6:cc:56:1e:16:3f:10:64:d5:4f:
d8:57:c6:6a:94:e2:ac:c2:39:15:ee:95:f3:a3:b6:
1a:5e:1c:26:e8:b0:96:eb:fe:ea:18:fe:09:a0:af:
25:af:ad:5f:39:e8:7d:df:64:99:9e:16:e4:80:38:
6a:79:16:a7:15:ac:73:28:37:bc:4a:31:b0:15:96:
38:c2:d0:2d:aa:db:59:76:ab:99:f7:72:63:88:27:
9b:df:23:a3:ad:2e:bd:be:c2:24:a8:40:31:af:ec:
39:6c:6c:dd:11:d9:54:16:11:cc:0a:2a:18:fc:16:
3f:3c:cb:03:59:ef:85:24:a4:41:ea:c5:05:9c:e0:
53:d9:58:8e:a2:c1:96:f2:73:ea:6a:a9:c2:69:11:
6b:92:76:6a:09:d1:30:63:5a:95:25:e7:2e:ba:34:
3b:c7:48:41:ea:49:d9:b4:94:9b:d5:3a:32:d5:dc:
17:e0:56:d2:6d:6f:8b:dc:2e:54:4d:14:e6:97:55:
ad:d3:30:8c:78:b3:fe:cd:25:2d:47:68:a6:a4:4f:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:86:F2:A7:DE:46:D6:16:3F:B8:3F:08:64:19:5C:EB:90:F1:D2:0B
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a6:f8:92:b5:16:3c:02:9a:8a:be:34:92:c3:c1:49:e2:0a:
8a:f0:24:10:28:c6:80:0c:be:39:a4:a8:de:b0:f4:16:6a:75:
2a:93:33:db:89:95:48:f9:fb:52:ea:60:0b:0f:56:ae:a1:63:
38:50:f6:83:b5:03:d0:a4:80:84:1e:3d:24:51:70:07:f9:5c:
4d:87:4b:e1:30:c1:02:33:44:40:47:f4:c7:77:fb:72:5f:80:
d7:53:3c:f5:bc:b0:d5:c9:3f:98:ff:32:49:67:22:9d:0e:6b:
84:36:74:14:3b:6c:6f:28:af:4c:f6:5f:2c:d9:3a:20:27:4c:
14:36:7e:9b:c8:59:9c:f1:77:3b:99:53:25:6d:64:25:30:6b:
33:ca:18:cf:1f:2a:5b:e8:3c:5e:49:90:8f:29:28:03:31:d5:
51:1f:39:02:18:59:f1:9a:72:b9:50:42:db:00:ee:52:97:78:
8d:a9:e6:da:bd:49:36:af:4e:a5:fd:6f:07:14:f1:a7:13:e6:
18:7d:72:18:ee:8f:11:dd:a8:b6:9c:b0:ef:b3:7d:91:cb:56:
f2:0b:a8:c5:02:03:d9:32:fd:22:d8:7c:aa:38:b7:bf:2c:67:
85:57:a9:8d:0c:85:72:1d:00:b3:5c:2b:d3:dd:45:d2:19:11:
ce:34:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:16 2025 by rpki-client