
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier: Wv2EgvEIjj4Ng+s5OyKHNmEbfzZi/CvYQz0EePgV6s0=
Subject key identifier: 94:D8:D1:45:3B:8F:6A:BB:C5:41:B1:DA:51:39:75:F4:79:A9:FE:36
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial: 38186E63958831E63CAB6699FCE3A5EEA92184DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number: 0390
Signing time: Sat 23 Aug 2025 07:07:36 +0000
Manifest this update: Sat 23 Aug 2025 07:02:36 +0000
Manifest next update: Sun 24 Aug 2025 10:58:36 +0000
Files and hashes: 1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: SVc+06+kSTZLFSZYHt+18ILRTqVegdlc2kojDgxmDjY=)
2: AS202881.asa (hash: n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=)
3: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: YO8yK5qDEkpMOw4s5W7OZNCO0ULtYnvddhwxmFUopyU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:18:6e:63:95:88:31:e6:3c:ab:66:99:fc:e3:a5:ee:a9:21:84:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Validity
Not Before: Aug 23 07:02:36 2025 GMT
Not After : Aug 24 10:58:36 2025 GMT
Subject: CN=94D8D1453B8F6ABBC541B1DA513975F479A9FE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:2e:ad:ce:ed:ef:55:85:cc:fc:bf:b4:ed:
ff:f0:33:0e:40:39:65:a2:d9:50:be:a2:31:a3:fa:
50:cf:07:a1:6e:eb:2c:ae:56:a2:09:2e:fe:29:0f:
13:46:7f:68:e6:a0:ea:f5:78:0d:6e:42:ab:c2:08:
99:e1:b0:01:0e:d7:ce:a5:0f:df:0e:d9:e4:2d:fb:
3b:b8:a7:33:01:23:ab:c6:4a:97:c5:5d:3e:00:db:
c3:e1:71:8a:6b:76:a3:11:25:5c:41:15:67:73:c6:
9f:ab:0d:eb:ee:85:74:4e:f6:57:c5:57:24:d5:70:
a5:91:2e:9e:fa:4b:29:ad:73:29:9a:a7:01:50:73:
e9:8d:73:82:c2:fa:f5:13:b8:6d:45:2a:b6:7b:5a:
cf:5a:32:ba:ef:bf:07:59:95:0d:e3:f8:31:47:89:
f7:ca:09:21:70:bc:e4:83:90:00:28:cb:a4:74:4b:
52:d6:83:67:0c:54:65:b0:6b:75:9e:4b:2d:41:2a:
6a:7d:8c:32:15:0a:e8:31:83:ec:4b:5e:18:12:55:
56:e8:fb:46:95:3b:32:92:20:c1:66:84:14:49:af:
c3:f1:c8:7e:7c:11:87:c2:99:a8:7c:1b:49:3d:8c:
22:d2:1b:87:1b:19:11:ba:51:25:56:ae:2c:c2:02:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:D1:45:3B:8F:6A:BB:C5:41:B1:DA:51:39:75:F4:79:A9:FE:36
X509v3 Authority Key Identifier:
keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:15:7d:64:d0:8a:16:e2:98:79:a6:a8:ec:d5:9e:ca:f1:
47:78:3b:98:28:40:d2:0e:9a:3f:b8:57:56:8b:53:d6:66:69:
cc:66:e2:df:e0:8f:29:0a:43:3c:0f:b2:88:54:07:d8:4f:8b:
9c:f4:fe:46:53:1e:ef:51:6b:d7:a2:77:ec:59:0d:5a:94:28:
44:89:93:44:86:08:7b:c9:76:77:22:48:7e:8c:8f:ac:c2:05:
3a:dc:54:38:c3:82:00:b8:63:ba:67:ac:ff:ec:48:d2:3c:c4:
30:bf:23:3c:32:97:e9:a2:73:90:0a:e9:9d:47:91:cc:91:d3:
46:25:9c:05:2b:4b:d8:55:fe:32:8e:9b:92:0d:cf:88:15:e1:
d5:39:92:7c:31:00:20:6d:69:7a:da:54:28:73:72:b8:1f:f5:
5b:db:aa:c2:b4:53:da:7c:96:f0:87:3d:d5:73:bf:cd:a8:05:
02:b0:5b:aa:a5:9b:45:9a:4d:27:43:65:bc:c0:d8:fa:cc:e8:
a6:7f:57:95:a2:e3:1d:95:71:c5:29:f4:3e:b8:cf:cb:53:d2:
d4:c1:cc:81:e1:ab:11:cf:c2:7f:68:f9:9c:98:21:ed:0d:f3:
2f:31:a1:37:45:6e:42:b7:e8:3f:c9:f0:53:58:93:dc:d5:40:
6f:31:32:64
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOBhuY5WIMeY8q2aZ/OOl7qkhhN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0
YmM5ZDhkODAeFw0yNTA4MjMwNzAyMzZaFw0yNTA4MjQxMDU4MzZaMDMxMTAvBgNV
BAMTKDk0RDhEMTQ1M0I4RjZBQkJDNTQxQjFEQTUxMzk3NUY0NzlBOUZFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBy6tzu3vVYXM/L+07f/wMw5A
OWWi2VC+ojGj+lDPB6Fu6yyuVqIJLv4pDxNGf2jmoOr1eA1uQqvCCJnhsAEO186l
D98O2eQt+zu4pzMBI6vGSpfFXT4A28PhcYprdqMRJVxBFWdzxp+rDevuhXRO9lfF
VyTVcKWRLp76SymtcymapwFQc+mNc4LC+vUTuG1FKrZ7Ws9aMrrvvwdZlQ3j+DFH
iffKCSFwvOSDkAAoy6R0S1LWg2cMVGWwa3WeSy1BKmp9jDIVCugxg+xLXhgSVVbo
+0aVOzKSIMFmhBRJr8PxyH58EYfCmah8G0k9jCLSG4cbGRG6USVWrizCAsVJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUlNjRRTuParvFQbHaUTl19Hmp/jYwHwYDVR0j
BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2
SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h
Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2
RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHgVfWTQihbimHmmqOzV
nsrxR3g7mChA0g6aP7hXVotT1mZpzGbi3+CPKQpDPA+yiFQH2E+LnPT+RlMe71Fr
16J37FkNWpQoRImTRIYIe8l2dyJIfoyPrMIFOtxUOMOCALhjumes/+xI0jzEML8j
PDKX6aJzkArpnUeRzJHTRiWcBStL2FX+Mo6bkg3PiBXh1TmSfDEAIG1petpUKHNy
uB/1W9uqwrRT2nyW8Ic91XO/zagFArBbqqWbRZpNJ0NlvMDY+szopn9XlaLjHZVx
xSn0PrjPy1PS1MHMgeGrEc/Cf2j5nJgh7Q3zLzGhN0VuQrfoP8nwU1iT3NVAbzEy
ZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:06 2025 by rpki-client