Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier: k65YqWGhWjvQHmuWWRuRe8RKe+W2hTrS5kkzlt89ox0=
Subject key identifier: 49:A4:CF:18:7E:D7:83:42:BF:85:A3:91:E6:49:79:2D:6B:BA:FE:1E
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer: /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial: 2ECC50BEE14905ED5A2EA9847608D769299784D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number: 0A
Signing time: Sun 27 Jul 2025 13:32:40 +0000
Manifest this update: Sun 27 Jul 2025 13:27:40 +0000
Manifest next update: Mon 28 Jul 2025 14:59:40 +0000
Files and hashes: 1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: WoJIyXN4fjo7M2nmCqfTqN/LYHLKgKJ1Yupz6z/IBF8=)
2: AS214809.asa (hash: 3MqiLlZEY04ox4OToYgrbXmsSXFbDBylCL3MaP3vqh0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:cc:50:be:e1:49:05:ed:5a:2e:a9:84:76:08:d7:69:29:97:84:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Validity
Not Before: Jul 27 13:27:40 2025 GMT
Not After : Jul 28 14:59:40 2025 GMT
Subject: CN=49A4CF187ED78342BF85A391E649792D6BBAFE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:62:d1:3b:6c:69:be:e3:8f:c8:42:27:c1:
f5:a6:4c:c6:61:b2:e5:ad:68:c3:4d:17:cb:51:18:
eb:31:f4:86:b3:41:c5:bc:c6:b9:6e:57:7a:4c:a1:
4c:b0:ea:d7:7a:71:0e:4d:14:37:96:a9:19:10:a8:
7a:70:8b:61:0d:fa:75:4e:9a:7c:9d:63:34:fd:68:
1a:b8:49:38:71:08:da:4b:7a:33:9d:3d:a5:c0:47:
26:bf:4b:37:a4:9c:65:a7:af:87:fe:ac:2d:ad:27:
be:d7:9c:bc:f0:28:8d:6c:04:b5:34:5e:f3:63:b7:
8b:c9:33:d7:57:58:ea:17:46:9d:fb:54:76:b6:ce:
b5:65:82:97:f6:32:cd:ed:f0:6a:2d:14:e4:6c:d4:
eb:be:2f:23:32:9e:ff:7e:81:4b:f9:23:90:1d:14:
c1:d1:77:5c:9f:2a:f3:56:dd:b8:6f:9f:8b:11:36:
e1:70:40:12:b9:4c:a5:39:e0:08:11:0e:3b:19:fa:
fe:0d:fe:44:1f:ba:7b:83:f1:19:2f:ab:b2:ed:7d:
5d:1c:f7:9a:33:d6:6b:3b:37:77:c8:11:23:b8:8b:
f2:18:5b:59:98:de:65:e3:9d:0c:75:d6:03:e3:15:
f3:83:d3:81:99:7c:d7:23:1d:f0:34:b2:2a:59:bc:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A4:CF:18:7E:D7:83:42:BF:85:A3:91:E6:49:79:2D:6B:BA:FE:1E
X509v3 Authority Key Identifier:
keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cd:96:63:fb:61:4d:c0:05:52:10:a1:93:ff:ef:44:85:7a:
33:0a:4b:7e:68:28:fe:d5:5b:b7:51:65:6b:e5:81:1c:a4:98:
77:64:82:be:4e:e0:ff:a6:0c:07:57:3e:57:84:ee:12:8f:dc:
c9:c3:df:fe:31:fe:a8:a6:6e:6b:01:30:50:0c:57:16:f0:da:
35:48:48:27:92:11:0b:73:8a:8c:77:82:a5:59:3d:49:4c:2e:
00:c6:14:bd:72:b9:81:b3:10:a5:a1:4a:2d:4c:60:ca:b4:05:
5b:12:b7:d1:82:c5:01:a3:64:bb:80:09:23:34:d5:eb:47:c4:
ba:ad:0c:a3:78:85:da:90:53:21:8a:3b:7d:26:cf:b0:09:09:
4a:75:dd:5e:ad:4f:1f:ed:39:e7:53:91:5c:7d:33:79:30:e5:
b4:1a:c6:16:b8:04:14:55:13:b2:1d:e0:f9:6d:ff:f2:2f:3a:
ce:cc:1b:d7:57:c1:6c:4f:63:f2:78:eb:c3:84:ac:8d:2e:06:
a2:a6:99:e9:5a:24:b4:b0:36:f2:e2:56:9d:02:53:25:14:47:
2b:9d:8e:8c:08:f1:52:76:99:c5:e5:23:69:9c:b4:a7:33:fc:
bb:cb:a8:13:8f:27:ce:3a:81:63:60:6b:0d:c6:80:cd:05:bf:
a1:e5:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:53:51 2025 by rpki-client