
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File: 84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier: XkozB0R3cx0DAYGN6xg1B1gHr8X2JCNu+QKmbsf9VHM=
Subject key identifier: 3F:E6:94:41:D9:57:57:27:32:20:2C:DD:E8:6E:D5:25:0F:77:C5:A6
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer: /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial: BB7CF6356C1B1EB6132D3208C808573BC3FDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number: 90
Signing time: Thu 24 Jul 2025 19:13:50 +0000
Manifest this update: Thu 24 Jul 2025 19:08:50 +0000
Manifest next update: Fri 25 Jul 2025 20:08:50 +0000
Files and hashes: 1: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: sCIWcBalZBXI+P8SKGZxozSkwalpdW+XocyaEXgArBk=)
2: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bb:7c:f6:35:6c:1b:1e:b6:13:2d:32:08:c8:08:57:3b:c3:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
Validity
Not Before: Jul 24 19:08:50 2025 GMT
Not After : Jul 25 20:08:50 2025 GMT
Subject: CN=3FE69441D957572732202CDDE86ED5250F77C5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:da:19:8b:c7:8e:35:89:b3:51:79:5f:dd:
3b:10:e7:b0:f7:56:45:2a:33:25:ef:5b:c3:3a:16:
fa:c3:68:8f:8a:ae:c8:17:23:52:f7:ba:1c:e0:a5:
0f:0a:ee:0b:52:f5:c5:fc:01:b1:23:37:30:b2:a7:
3e:d9:97:7c:82:6c:04:ad:de:12:8d:15:5b:49:d9:
78:2a:35:0d:ea:9c:f8:71:d9:22:5c:89:a7:23:09:
25:f2:19:e3:9f:7c:a6:83:74:c1:b4:a1:d7:c0:83:
fe:7e:24:4c:52:79:75:01:a9:7d:f5:7a:52:c7:50:
08:fb:07:55:50:be:f9:03:35:7d:eb:1b:e3:1e:15:
8f:4c:e2:b4:f8:db:12:d5:df:44:65:2e:79:81:f1:
cc:01:85:80:e0:f0:12:b2:7a:51:eb:00:d3:ae:b6:
35:80:1f:67:ad:62:ee:bb:5f:1f:de:ae:19:5c:72:
9c:b2:8e:1f:d6:1a:50:5a:0b:56:e8:2b:bd:c0:8d:
7f:32:8d:e9:32:55:a7:0f:99:e8:9e:24:0d:a5:b1:
bd:0a:1d:1d:56:1d:88:18:54:99:a1:52:3c:59:02:
0e:75:d2:78:82:50:08:8a:5e:4b:22:9d:0b:0f:61:
f5:5a:b3:7a:1a:eb:e5:c3:50:d7:37:54:e4:10:03:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E6:94:41:D9:57:57:27:32:20:2C:DD:E8:6E:D5:25:0F:77:C5:A6
X509v3 Authority Key Identifier:
keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e3:13:7a:44:65:40:2e:46:25:ee:a4:e3:d8:b4:4a:95:70:
2f:d0:7d:89:38:15:14:e6:95:b7:cd:86:e9:71:ee:85:95:5f:
c1:dd:fc:b1:4a:fb:51:55:f9:ac:d5:78:e0:42:f7:1a:aa:18:
50:44:7b:d9:e1:f2:68:05:48:18:67:c9:95:d4:bb:fb:b1:aa:
84:d9:5b:0a:58:aa:77:01:41:d6:53:fc:e3:07:37:8f:a5:72:
b0:02:5e:44:3d:1e:5d:af:71:96:d2:fe:cb:50:de:b4:50:57:
bd:b5:e5:4e:ad:ea:ec:56:75:25:a1:11:9d:c5:86:f9:92:b5:
fc:80:c7:d6:7e:55:4c:9d:ed:14:77:c1:33:d1:39:d6:5b:2a:
95:66:87:62:31:79:67:18:14:8a:85:9b:a0:75:79:aa:e5:14:
d1:09:0b:77:a0:14:31:39:20:98:13:3e:5c:f1:81:3a:d3:f6:
ea:29:d2:7a:00:dd:0f:be:4c:60:75:62:c4:e8:82:74:16:36:
12:db:2e:5c:8b:1e:1f:ed:4d:7a:0f:a7:00:da:89:56:75:61:
61:ad:a9:23:65:59:c6:ae:67:e9:ed:f3:6d:ca:1e:4e:9e:04:
28:65:fb:a2:0b:0d:71:b3:4d:7a:e9:f4:a1:0d:16:c1:b9:1b:
62:52:ff:40
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUALt89jVsGx62Ey0yCMgIVzvD/fkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxMDFjZWNhYTZhNzE0NjVkY2Y2NjVkNzE2Mjc5YTAw
ODM0MWVhNDAeFw0yNTA3MjQxOTA4NTBaFw0yNTA3MjUyMDA4NTBaMDMxMTAvBgNV
BAMTKDNGRTY5NDQxRDk1NzU3MjczMjIwMkNEREU4NkVENTI1MEY3N0M1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYdoZi8eONYmzUXlf3TsQ57D3
VkUqMyXvW8M6FvrDaI+KrsgXI1L3uhzgpQ8K7gtS9cX8AbEjNzCypz7Zl3yCbASt
3hKNFVtJ2XgqNQ3qnPhx2SJciacjCSXyGeOffKaDdMG0odfAg/5+JExSeXUBqX31
elLHUAj7B1VQvvkDNX3rG+MeFY9M4rT42xLV30RlLnmB8cwBhYDg8BKyelHrANOu
tjWAH2etYu67Xx/erhlccpyyjh/WGlBaC1boK73AjX8yjekyVacPmeieJA2lsb0K
HR1WHYgYVJmhUjxZAg510niCUAiKXksinQsPYfVas3oa6+XDUNc3VOQQA2dJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUP+aUQdlXVycyICzd6G7VJQ93xaYwHwYDVR0j
BBgwFoAUhBAc7KpqcUZdz2ZdcWJ5oAg0HqQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDFiMjAxNzYtNzZiOS00MDAwLWE2ZTYtYmE1NDdiNTI0
MTQzLzAvODQxMDFDRUNBQTZBNzE0NjVEQ0Y2NjVENzE2Mjc5QTAwODM0MUVBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2hCQWM3S3BxY1VaZHoyWmRjV0o1b0Fn
MEhxUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMWIyMDE3Ni03
NmI5LTQwMDAtYTZlNi1iYTU0N2I1MjQxNDMvMC84NDEwMUNFQ0FBNkE3MTQ2NURD
RjY2NUQ3MTYyNzlBMDA4MzQxRUE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceMTekRlQC5GJe6k49i0
SpVwL9B9iTgVFOaVt82G6XHuhZVfwd38sUr7UVX5rNV44EL3GqoYUER72eHyaAVI
GGfJldS7+7GqhNlbCliqdwFB1lP84wc3j6VysAJeRD0eXa9xltL+y1DetFBXvbXl
Tq3q7FZ1JaERncWG+ZK1/IDH1n5VTJ3tFHfBM9E51lsqlWaHYjF5ZxgUioWboHV5
quUU0QkLd6AUMTkgmBM+XPGBOtP26inSegDdD75MYHVixOiCdBY2EtsuXIseH+1N
eg+nANqJVnVhYa2pI2VZxq5n6e3zbcoeTp4EKGX7ogsNcbNNeun0oQ0WwbkbYlL/
QA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:16:56 2025 by rpki-client