Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: Q5LIo7Zi3RyMtIWgVPv3zpZXZGKVR3UOnbifwy0EuD0=
Subject key identifier: A3:22:E1:E4:FF:91:B6:F3:42:73:DA:A9:B0:74:FF:FD:18:DE:0E:2F
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 3B19A2FCFABA460035208A249BBDCDDDB1166DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 02BC
Signing time: Sat 18 Oct 2025 21:26:32 +0000
Manifest this update: Sat 18 Oct 2025 21:21:32 +0000
Manifest next update: Mon 20 Oct 2025 00:18:32 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: sEXclVHnB5juSDBPlm4kvDoJ6nolruddn/RJWReWYag=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:19:a2:fc:fa:ba:46:00:35:20:8a:24:9b:bd:cd:dd:b1:16:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Oct 18 21:21:32 2025 GMT
Not After : Oct 20 00:18:32 2025 GMT
Subject: CN=A322E1E4FF91B6F34273DAA9B074FFFD18DE0E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:62:4a:63:1b:90:fd:09:7b:fe:91:6e:75:
8f:15:9d:dd:79:af:7f:31:8d:87:ee:3a:e3:03:92:
d3:85:5d:37:20:e8:f0:03:87:25:ae:1c:8e:0e:20:
d0:8e:fa:89:cc:eb:e7:33:8e:7c:d9:f8:c9:f5:13:
46:6e:30:c6:4c:53:83:26:b4:01:5f:e3:86:bd:3b:
b5:91:56:25:14:1e:15:72:27:8b:38:8c:99:db:a3:
32:9d:0f:75:4d:25:d6:34:b7:c7:4f:62:e9:7a:60:
e2:69:58:e4:db:a1:d6:d2:b1:86:22:72:16:30:a2:
a2:cc:03:c5:32:7b:94:f0:9d:63:42:b8:2b:a6:66:
12:1e:00:02:36:79:01:25:a8:48:5e:ce:d5:9e:ca:
fa:87:d4:03:86:24:47:36:ec:bf:62:8f:07:05:82:
b0:81:99:25:d3:6d:df:68:c2:d3:85:b9:99:4a:25:
36:2d:65:4d:46:3a:4b:a0:de:c6:c5:88:cf:25:a0:
1d:c6:36:0b:2b:8c:f0:dd:f8:99:65:08:e4:83:d5:
4f:0a:d0:3c:81:00:e4:82:f3:7a:af:12:9b:dc:58:
d0:6a:e5:02:28:e6:63:25:3c:86:1c:1d:40:61:55:
30:bd:44:92:ff:80:1a:c1:f3:3b:59:65:71:6d:8a:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:E1:E4:FF:91:B6:F3:42:73:DA:A9:B0:74:FF:FD:18:DE:0E:2F
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e4:02:cd:5e:48:98:ec:07:db:bc:a3:22:8e:6d:f0:cf:c1:
c1:07:69:94:11:f8:42:0c:f9:b4:8e:83:4b:a9:44:00:c9:7a:
88:2c:ce:86:d4:b3:43:5d:c2:ad:31:c7:7d:21:27:2c:54:a1:
9f:02:5b:83:fa:ed:11:ae:bc:6e:03:60:d1:6c:87:b2:eb:9c:
c7:34:39:bd:9a:71:6f:15:22:9e:5c:d5:36:18:15:a8:f5:13:
41:04:bb:30:cd:2b:a6:2a:f1:09:a9:ed:e6:6b:bf:02:c7:21:
67:2b:45:91:8a:af:0a:d6:94:68:87:82:de:e5:d6:56:d0:0e:
2a:52:8e:07:65:86:7e:03:a2:3c:cb:4a:7b:04:a1:f1:ec:b8:
30:5f:9d:74:57:6a:35:14:41:49:e1:00:6c:53:65:2d:3b:86:
58:40:c5:2e:3a:5e:1b:9f:61:f4:52:35:fd:68:6b:6a:52:49:
5d:a8:f8:e5:f5:af:bc:3c:35:8c:cc:14:96:c0:c7:2d:86:0d:
e8:69:22:72:d1:c5:7e:09:e7:08:2a:94:4c:18:bc:12:6a:87:
be:d9:34:9b:a7:53:59:69:be:8c:0c:05:a1:50:fb:38:31:7a:
ee:99:05:90:56:73:f8:fc:0d:df:bc:ad:02:2f:b7:91:b4:9a:
0c:e8:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:00 2025 by rpki-client