Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft
File: 6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft (raw, json)
Hash identifier: YC5IELclA+o6D0D/gSF4jHFf5CNDJ1X5jI+A3qWao9o=
Subject key identifier: 69:B8:56:0C:32:68:49:96:DE:7C:60:B0:23:9A:8A:AC:2B:3E:68:7F
Authority key identifier: 6C:90:A6:3C:C3:4B:7F:1A:71:47:01:D5:16:83:5B:9D:E2:9F:D0:E8
Certificate issuer: /CN=6c90a63cc34b7f1a714701d516835b9de29fd0e8
Certificate serial: 0EB0B798D6EC8140B94F08BFD8A832C55FE16419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJCmPMNLfxpxRwHVFoNbneKf0Og.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft
Manifest number: 21
Signing time: Sun 31 Aug 2025 12:57:24 +0000
Manifest this update: Sun 31 Aug 2025 12:52:24 +0000
Manifest next update: Mon 01 Sep 2025 16:49:24 +0000
Files and hashes: 1: AS205941.asa (hash: r+bbtgiPkbbOdHlzQXuUH9mXbAg7rnacHYEYDTFgWz8=)
2: 6C90A63CC34B7F1A714701D516835B9DE29FD0E8.crl (hash: tp7haUBxwbsoZAwAKdUtwsR5Wtci44ZN1BwlBhdNZkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b0:b7:98:d6:ec:81:40:b9:4f:08:bf:d8:a8:32:c5:5f:e1:64:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c90a63cc34b7f1a714701d516835b9de29fd0e8
Validity
Not Before: Aug 31 12:52:24 2025 GMT
Not After : Sep 1 16:49:24 2025 GMT
Subject: CN=69B8560C32684996DE7C60B0239A8AAC2B3E687F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:61:bc:5c:63:4a:4d:9f:22:49:4a:36:b4:
56:82:90:78:64:36:4e:27:01:23:e8:77:ef:f7:79:
b4:ed:95:d6:bf:12:9f:15:b1:cc:0d:b5:31:34:65:
c5:60:86:b4:6c:46:6e:ca:e1:ba:e0:ca:c1:3c:ee:
11:94:bd:c6:9f:7f:84:3c:3b:85:21:9e:65:58:e7:
fb:b6:7d:a5:55:af:62:b7:b4:db:c3:a1:f9:aa:3e:
01:c5:0e:88:33:1e:06:d1:e3:24:2a:d8:d5:69:7c:
a7:d7:0e:26:ca:57:37:ac:f9:de:69:4c:ae:a9:22:
da:ac:e8:e2:74:1f:52:11:54:32:e7:c0:6f:de:a6:
71:0c:72:16:e0:29:44:6a:ad:a2:e5:e8:20:3d:bb:
a1:bd:50:53:03:cc:db:93:84:83:b5:8e:7c:17:0e:
cf:d0:5a:90:b6:8a:ea:ba:0d:b3:31:aa:1b:08:f0:
b4:84:09:a6:ff:3f:c5:8d:3c:d6:d1:7a:32:6e:e0:
d4:12:ed:db:cd:c5:d0:3d:1b:1c:ef:8c:aa:2d:e2:
ad:86:23:d5:fa:9b:a6:ea:37:40:8b:35:d3:16:78:
3d:ee:a2:12:dc:05:b9:a3:d2:80:7e:18:c8:a3:04:
eb:25:be:0d:8b:62:5a:8f:24:ff:86:4c:db:c6:a4:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B8:56:0C:32:68:49:96:DE:7C:60:B0:23:9A:8A:AC:2B:3E:68:7F
X509v3 Authority Key Identifier:
keyid:6C:90:A6:3C:C3:4B:7F:1A:71:47:01:D5:16:83:5B:9D:E2:9F:D0:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJCmPMNLfxpxRwHVFoNbneKf0Og.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/1/6C90A63CC34B7F1A714701D516835B9DE29FD0E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8f:d8:2f:61:ef:45:0f:9c:73:20:bc:66:2f:ae:e8:28:0a:
90:e8:29:40:61:24:6c:d3:02:f2:23:e2:74:0d:fc:4c:3a:8a:
d2:c9:6a:83:2a:11:10:ca:09:a4:14:32:88:8c:26:cd:0c:72:
4d:54:cd:a9:0d:ff:f6:9e:4c:12:d4:16:49:7c:5d:eb:41:88:
a1:b6:65:51:ee:ad:92:e6:ee:e6:36:bc:09:e0:68:43:b6:f7:
eb:44:8b:6e:b9:09:62:38:e6:3e:bc:8e:8a:01:aa:a9:ca:bd:
3b:69:9e:56:08:ad:9e:3f:6b:b2:02:75:29:38:ed:24:5a:33:
de:87:83:62:8c:6c:92:3c:ea:cc:f9:f2:c7:f7:07:35:52:51:
c9:9d:52:c7:f9:c7:5b:e1:48:fe:97:2a:8e:f1:d7:83:72:97:
f8:34:26:ca:9d:cc:23:59:c2:5a:b0:25:23:13:30:7d:f2:40:
d9:ef:0f:a8:bb:50:10:55:88:c1:fb:16:86:1d:d4:7c:8f:16:
94:5e:01:4d:17:89:4a:99:32:64:6e:31:38:3e:55:84:17:36:
08:84:ee:ac:89:3c:45:a7:4e:17:76:c7:8a:f2:65:e6:7e:af:
10:f7:aa:90:3a:d5:ec:14:85:72:da:90:6c:82:55:51:fd:dd:
bd:e8:8c:83
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDrC3mNbsgUC5Twi/2KgyxV/hZBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmM5MGE2M2NjMzRiN2YxYTcxNDcwMWQ1MTY4MzViOWRl
MjlmZDBlODAeFw0yNTA4MzExMjUyMjRaFw0yNTA5MDExNjQ5MjRaMDMxMTAvBgNV
BAMTKDY5Qjg1NjBDMzI2ODQ5OTZERTdDNjBCMDIzOUE4QUFDMkIzRTY4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRl2G8XGNKTZ8iSUo2tFaCkHhk
Nk4nASPod+/3ebTtlda/Ep8VscwNtTE0ZcVghrRsRm7K4brgysE87hGUvcaff4Q8
O4UhnmVY5/u2faVVr2K3tNvDofmqPgHFDogzHgbR4yQq2NVpfKfXDibKVzes+d5p
TK6pItqs6OJ0H1IRVDLnwG/epnEMchbgKURqraLl6CA9u6G9UFMDzNuThIO1jnwX
Ds/QWpC2iuq6DbMxqhsI8LSECab/P8WNPNbRejJu4NQS7dvNxdA9GxzvjKot4q2G
I9X6m6bqN0CLNdMWeD3uohLcBbmj0oB+GMijBOslvg2LYlqPJP+GTNvGpAT7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUabhWDDJoSZbefGCwI5qKrCs+aH8wHwYDVR0j
BBgwFoAUbJCmPMNLfxpxRwHVFoNbneKf0OgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjdlYmRlMDMtMzRkZi00ZjJjLTkyZmEtOGZlMWQwODNk
MTVkLzEvNkM5MEE2M0NDMzRCN0YxQTcxNDcwMUQ1MTY4MzVCOURFMjlGRDBFOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JKQ21QTU5MZnhweFJ3SFZGb05ibmVL
ZjBPZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yN2ViZGUwMy0z
NGRmLTRmMmMtOTJmYS04ZmUxZDA4M2QxNWQvMS82QzkwQTYzQ0MzNEI3RjFBNzE0
NzAxRDUxNjgzNUI5REUyOUZEMEU4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY/YL2HvRQ+ccyC8Zi+u
6CgKkOgpQGEkbNMC8iPidA38TDqK0slqgyoREMoJpBQyiIwmzQxyTVTNqQ3/9p5M
EtQWSXxd60GIobZlUe6tkubu5ja8CeBoQ7b360SLbrkJYjjmPryOigGqqcq9O2me
Vgitnj9rsgJ1KTjtJFoz3oeDYoxskjzqzPnyx/cHNVJRyZ1Sx/nHW+FI/pcqjvHX
g3KX+DQmyp3MI1nCWrAlIxMwffJA2e8PqLtQEFWIwfsWhh3UfI8WlF4BTReJSpky
ZG4xOD5VhBc2CITurIk8RadOF3bHivJl5n6vEPeqkDrV7BSFctqQbIJVUf3dveiM
gw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:52 2025 by rpki-client