Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: USRWL2ulKN5KxqkSpzGeWJperX/SKEZxv9gjfzu3+EA=
Subject key identifier: 58:63:CC:C3:89:51:19:9F:72:A7:BD:EB:1E:93:C6:C6:41:AA:FF:FF
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 7FACBBA884A2B3F5DB07F469C294CBBB7B389800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 034B
Signing time: Sat 28 Jun 2025 00:02:11 +0000
Manifest this update: Fri 27 Jun 2025 23:57:11 +0000
Manifest next update: Sun 29 Jun 2025 02:17:11 +0000
Files and hashes: 1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: kzIiKa78uyzgIwp38B3VckxTAvGVZjyeobfym4ZXmx8=)
2: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: s6iEqTf8UOXFe/hdvrlvsrFQjDH9iBa3L5AxsNnySWU=)
3: AS205329.asa (hash: Dd7JzyQ5+gSfY/FnpvRoNBmxG+ibp+5DFVs8PxvskHk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 02:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ac:bb:a8:84:a2:b3:f5:db:07:f4:69:c2:94:cb:bb:7b:38:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Jun 27 23:57:11 2025 GMT
Not After : Jun 29 02:17:11 2025 GMT
Subject: CN=5863CCC38951199F72A7BDEB1E93C6C641AAFFFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:d8:62:82:c4:dc:0b:b8:f0:ab:97:03:57:
53:84:56:76:8a:a1:fc:c6:49:ed:28:40:1c:67:45:
ee:51:d0:ae:b8:0a:5d:20:5d:f3:0b:c6:b9:92:2b:
e2:47:ca:27:7e:b0:a7:a0:1f:bc:f2:b2:73:1c:f3:
85:bd:f1:de:19:f6:1c:8b:c6:2c:a3:dc:50:98:5e:
b0:5d:40:ff:3b:56:cb:f7:03:8c:d1:11:47:88:b6:
af:18:df:10:3b:ec:d6:9c:21:44:32:7a:62:66:c9:
d1:07:48:9c:0a:b8:1d:76:66:18:a8:48:3c:85:62:
35:bc:16:c7:00:ae:07:a5:74:b1:46:93:a1:e3:f0:
80:1d:2a:b7:fd:68:41:e9:21:4a:86:70:f8:d7:28:
f5:95:01:97:3f:8e:34:10:57:57:72:39:29:11:27:
be:70:cc:f3:62:b3:26:51:2c:ed:e6:f0:58:f9:58:
7e:fe:b0:95:a4:97:3c:df:aa:f3:7f:cf:e9:25:93:
ad:80:c8:86:49:39:79:66:a7:dd:36:38:6b:26:62:
01:c9:3a:2c:f8:16:de:13:7d:fe:39:95:a4:74:c3:
bb:7b:85:06:14:26:a0:ae:80:f8:0b:85:dd:3e:b1:
71:9a:08:79:b2:d5:21:02:ec:9e:e6:f1:a7:74:23:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:CC:C3:89:51:19:9F:72:A7:BD:EB:1E:93:C6:C6:41:AA:FF:FF
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d9:98:59:02:c3:b2:17:9c:dc:d2:af:eb:b0:98:4d:e9:9d:
01:df:08:53:cd:c7:ad:6d:ab:03:27:c2:aa:6f:dd:a9:d5:79:
08:42:cd:d4:69:7d:d7:97:5f:8e:7e:2c:e7:a0:a3:a4:67:c2:
05:7b:f4:82:b7:03:4b:68:1e:c2:d6:09:d2:cb:28:bb:af:c7:
90:76:20:e5:76:88:79:d7:8c:a8:9e:8a:98:cd:00:ca:46:6a:
51:18:d4:47:e7:9d:da:41:2a:e9:93:85:45:64:4d:ae:f7:49:
92:9a:cd:9a:ab:e9:12:60:02:3a:63:6c:ea:e3:f9:8c:52:29:
25:00:0e:a5:d0:de:fb:f6:2e:b3:84:e5:e6:76:28:8e:92:3a:
10:b7:99:8a:ed:f2:c0:14:7d:a2:b4:9a:ce:dc:34:70:4e:2b:
fa:bb:2b:b6:7b:5f:d7:35:25:3d:7e:86:b2:17:59:92:b4:83:
5a:c6:93:3e:e0:a0:50:de:a9:c3:e6:c1:78:f9:e9:aa:0c:7c:
1d:d2:df:82:ca:ad:8b:a5:d6:56:d5:58:26:bf:8a:32:b3:8b:
ce:cf:c1:58:d9:97:89:ee:f4:29:bb:0c:62:bb:dc:4c:02:13:
ae:be:79:14:5b:ee:b8:ea:b0:11:6e:31:ea:d5:0d:65:09:66:
4a:64:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:59 2025 by rpki-client