Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: ClFQ5EpL9rrblmrdpEjdZMJ5eINigFUYdzAh36BtP3E=
Subject key identifier: 8C:CE:CE:39:8F:E9:51:60:0F:F1:07:E3:BE:BC:F1:62:6D:F4:B1:CD
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 5535B30AE1401910E86DCEBAB2945F8E5A154CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 0270
Signing time: Fri 22 Aug 2025 21:57:33 +0000
Manifest this update: Fri 22 Aug 2025 21:52:33 +0000
Manifest next update: Sat 23 Aug 2025 22:39:33 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: JxMMOXToQ1sdLTk0rBqqrWemCk3gwag01VGscOW7glg=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:35:b3:0a:e1:40:19:10:e8:6d:ce:ba:b2:94:5f:8e:5a:15:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Aug 22 21:52:33 2025 GMT
Not After : Aug 23 22:39:33 2025 GMT
Subject: CN=8CCECE398FE951600FF107E3BEBCF1626DF4B1CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:5f:52:af:9e:73:0b:4e:fe:2e:c6:2a:0b:
38:29:fa:1c:bc:6c:46:a5:cd:d8:5f:f4:1e:41:46:
57:67:5b:c0:af:aa:c9:4a:c5:0d:1e:b5:c2:7a:e2:
ff:79:24:d5:16:93:ac:26:79:ff:75:0b:71:1d:bc:
75:e6:56:c3:19:c3:b5:52:10:a1:3f:d7:ce:ac:e4:
15:35:94:ab:2f:98:97:52:ee:de:43:2b:33:5e:dc:
1d:52:e2:25:7e:e0:38:00:6b:98:56:84:91:9f:7c:
52:a6:d5:de:cc:dc:ea:f7:44:fb:40:b9:0b:c4:db:
ef:43:3c:9a:cd:77:21:15:85:01:e8:e0:fb:e5:2d:
1a:2e:43:aa:c7:41:51:c7:46:49:d9:c0:a1:9e:9d:
bd:2d:ae:8f:16:f3:3d:11:a2:b8:ab:d5:47:79:0c:
77:db:f6:ae:c1:3e:e4:64:0d:f2:9d:a6:77:b5:63:
f3:d1:8a:89:51:6b:93:65:2e:ae:98:5b:d1:ae:a1:
96:43:8a:c2:c8:9f:df:66:d7:ff:76:ba:0d:88:30:
bc:d5:bc:f5:94:f2:29:20:a7:dd:1d:0f:b0:c3:03:
93:63:a3:bd:00:89:e3:e7:58:0f:1a:e0:7f:fc:86:
2c:4b:7c:11:19:d1:88:a9:d8:15:cd:df:ee:aa:c6:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:CE:39:8F:E9:51:60:0F:F1:07:E3:BE:BC:F1:62:6D:F4:B1:CD
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:63:2f:54:ff:e9:d8:01:03:79:6f:ac:87:8f:62:0a:a2:f9:
9e:10:a6:bc:06:08:1d:de:69:68:a4:8f:fb:a8:f6:6a:bf:44:
0f:21:1e:dc:0f:66:1f:51:3e:c6:f3:da:e3:04:7b:74:bf:bf:
15:1f:eb:8c:87:1a:ec:4c:49:05:cd:16:6c:79:25:89:9a:27:
2c:91:08:86:77:b7:c4:e3:62:03:2d:e8:65:16:4a:75:7f:a3:
b9:35:53:06:0e:e5:af:5f:05:4a:8f:18:cf:25:e5:5a:91:a8:
d9:8e:65:03:35:fc:06:a7:6d:d8:00:e3:8a:69:c1:59:de:bb:
33:89:19:27:b0:77:54:38:5c:dc:8e:86:a3:9b:ee:b1:ea:ee:
4d:2b:85:10:5b:7a:22:75:39:b4:f8:f9:52:70:f7:3d:e7:e2:
b5:0a:c2:94:ab:f2:36:44:7e:50:e8:cd:68:b3:60:e1:d4:31:
08:cf:01:c5:9c:28:f5:0b:32:47:8f:73:ba:ac:4b:23:dc:bf:
28:35:f8:9c:08:e7:57:5c:e8:de:88:f9:fb:97:ae:07:ca:4b:
c5:d0:7f:d8:91:ff:2b:75:57:9d:60:c9:14:a6:cc:94:bc:81:
86:bc:7c:3a:c0:50:1d:1a:2f:34:14:06:90:9e:83:f4:b4:ad:
4a:b1:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:16 2025 by rpki-client