Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: n1Wiuyxn7JIkOiFaFBYx0BYgeDKuTBXyfyftaYV3fs4=
Subject key identifier: 42:74:4F:7D:FE:33:BE:71:15:62:59:58:CA:8E:CD:C8:7F:AE:4B:AA
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 7281715D4301449778CA377DC044222A10D8E17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: D6
Signing time: Mon 21 Apr 2025 15:31:34 +0000
Manifest this update: Mon 21 Apr 2025 15:26:34 +0000
Manifest next update: Wed 23 Apr 2025 16:11:34 +0000
Files and hashes: 1: AS209735.asa (hash: LH39xuFInQIUN2uaAZuKOVXU5e6fBODPhrhpjvBdNYs=)
2: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: DX1Fgayyu4F9LlEY51ayMPgADhpU+h52R6C2BkiZVAo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:81:71:5d:43:01:44:97:78:ca:37:7d:c0:44:22:2a:10:d8:e1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Apr 21 15:26:34 2025 GMT
Not After : Apr 23 16:11:34 2025 GMT
Subject: CN=42744F7DFE33BE7115625958CA8ECDC87FAE4BAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:a1:36:96:18:41:c5:2b:34:81:fa:c0:a1:
5b:68:e5:d2:fb:58:bb:ad:65:4a:81:43:cd:78:35:
83:2e:25:ae:63:76:c2:7e:23:f1:8c:0b:d0:cb:02:
61:cd:1b:23:39:f1:41:b0:bb:a8:45:d8:9f:64:64:
6a:8e:f4:9f:15:60:cc:49:8a:54:fc:d1:ee:e8:d9:
1c:32:ca:15:78:73:fb:92:ee:11:fb:84:55:fd:cd:
70:66:36:a2:ab:bb:a2:7d:85:8f:1f:5c:76:6b:8b:
a9:f4:11:a7:9d:44:1b:12:c7:59:ff:23:90:f8:ee:
7e:19:53:35:0c:ad:bb:7a:2e:89:44:84:30:67:9a:
25:81:49:77:0a:bd:f4:59:13:95:64:43:ef:e8:cc:
18:ca:b1:9b:48:98:30:c7:b5:4b:ba:33:4e:b6:12:
50:06:f4:4b:4d:fb:f2:9c:fc:1a:48:a3:30:63:80:
be:d9:ea:ff:62:b3:b8:9d:34:e1:a5:fb:9b:54:db:
f3:56:7b:16:ee:9c:2c:43:de:5c:e9:91:76:11:24:
fc:3f:61:5e:60:3d:d0:9d:b4:d4:b9:9b:34:16:a3:
75:8c:f8:87:de:29:f3:eb:9a:24:16:5b:c3:40:1d:
9c:49:7c:d3:d7:cd:ac:73:40:ca:ed:32:54:ab:6d:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:4F:7D:FE:33:BE:71:15:62:59:58:CA:8E:CD:C8:7F:AE:4B:AA
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:47:00:33:5b:e0:f9:3f:c5:fe:3b:8c:76:36:e3:f3:b2:06:
ed:9b:81:85:84:81:b2:23:ff:62:b5:0e:ac:0f:c2:9f:11:0a:
de:e3:0a:c4:c6:92:03:b2:9b:61:92:4b:69:db:b6:ee:00:17:
b1:60:ef:81:37:9c:25:18:7e:00:b8:86:e8:20:a1:09:c5:b1:
d6:ee:23:ff:cc:89:70:89:e6:1c:f1:25:7d:4a:83:80:84:82:
e6:e0:4e:34:a0:8d:40:17:35:7b:61:16:fc:84:57:0f:77:eb:
85:29:c7:20:6a:75:84:f9:e6:15:c1:6c:af:0d:8f:1b:ec:0b:
fa:60:85:66:7b:e5:ce:de:9a:39:54:60:91:ce:a7:7a:1d:c1:
18:9e:33:6e:ab:76:60:01:0a:14:be:bc:6f:8a:62:64:e0:46:
03:bf:5e:3f:e9:b1:e1:b6:14:05:29:7d:e7:42:29:ba:d8:e2:
2a:0f:38:05:fc:8b:3f:2d:dd:28:e0:e3:ba:d7:3a:40:6a:38:
c0:3c:87:81:ed:98:de:16:0b:23:9a:3b:25:9e:de:b1:b2:68:
06:c2:82:f8:31:1a:69:2d:61:eb:af:4b:93:0e:d3:47:52:df:
0b:5e:03:69:92:89:ac:93:e2:1e:49:fb:4d:6b:be:60:1f:03:
a3:b8:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:11:47 2025 by rpki-client