Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: kpJ0k9864otThIf/Ha/AdCUVJ3gpN2pny0PtxZV7Ggs=
Subject key identifier: E9:A6:B4:FE:8F:2E:25:F0:23:DE:E1:95:CE:13:99:0D:B1:8C:21:E3
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 36E2DC3AA84AE776AC2221140480A9261704BF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: 0B
Signing time: Mon 09 Jun 2025 23:56:11 +0000
Manifest this update: Mon 09 Jun 2025 23:51:11 +0000
Manifest next update: Wed 11 Jun 2025 03:37:11 +0000
Files and hashes: 1: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: YAQ3/GHYvn9tRJI8+kGPZsBG7q9qSVN414PVAoJqy4I=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e2:dc:3a:a8:4a:e7:76:ac:22:21:14:04:80:a9:26:17:04:bf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: Jun 9 23:51:11 2025 GMT
Not After : Jun 11 03:37:11 2025 GMT
Subject: CN=E9A6B4FE8F2E25F023DEE195CE13990DB18C21E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:19:5b:6b:04:53:0b:cd:98:67:a5:e6:c0:
7a:6e:9b:83:a5:5b:d2:14:c0:52:d7:82:00:c7:45:
17:b3:3f:07:94:d6:c0:35:70:0a:f7:e3:63:64:70:
ea:82:c6:ee:1f:26:da:24:82:17:60:f5:d9:9a:e0:
f3:fc:db:df:4f:47:52:12:7e:50:b7:cf:cc:9e:38:
e0:5d:17:37:a6:da:a8:94:59:92:51:72:56:6c:83:
d3:5d:1d:67:2f:6b:98:54:64:10:b8:43:b0:57:9c:
f3:d4:2c:08:37:18:24:05:49:52:e2:03:6a:e0:7f:
e1:65:b2:8a:cc:fa:d6:65:9b:45:81:4e:ba:71:b1:
d2:db:6e:17:71:36:f7:8d:47:4f:e9:c9:5b:0f:93:
8a:e6:71:32:87:1c:52:2d:f5:0c:88:1a:58:7f:36:
76:af:cd:15:e8:d0:fd:31:b7:e4:dd:13:44:fc:19:
47:97:33:49:86:11:78:ad:ff:2f:5c:ad:c0:c1:c2:
07:0a:40:15:f5:d5:2a:12:a9:e4:61:b3:6e:9c:fc:
85:77:7e:a5:df:7b:05:5e:fb:0b:bc:9b:a9:bf:fb:
8a:bb:d1:fc:ce:eb:67:7a:bf:8c:12:f3:e7:ce:c6:
21:0e:91:e8:9a:3f:c5:00:2f:b0:3a:d4:bc:40:bc:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:B4:FE:8F:2E:25:F0:23:DE:E1:95:CE:13:99:0D:B1:8C:21:E3
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:86:d4:fc:87:3d:b7:05:51:a1:8f:26:2d:af:c4:52:ad:
10:2d:6e:7b:fa:97:2f:4d:47:b6:7d:75:51:dc:2e:6b:8f:4d:
59:84:a9:32:44:ef:2d:a9:71:32:1e:2a:49:b7:6d:cd:62:e7:
50:3f:a2:15:48:01:8f:8f:33:f8:f1:3e:90:a2:18:80:bc:3c:
9f:c1:2c:d7:34:c1:b5:bc:4d:57:9f:a5:6b:7d:81:e5:d7:b7:
d3:56:7c:e4:8f:34:01:ee:19:fa:55:b2:7c:62:95:c5:fd:a1:
ea:f3:02:f2:e6:a9:ca:00:4b:4a:2b:c8:52:fb:8b:11:98:6e:
4c:99:61:a6:45:58:f0:02:e5:8f:42:8f:2d:c1:d7:46:f5:63:
64:c5:c0:d2:64:c0:10:be:b7:14:d5:a7:1f:40:f1:e5:de:4a:
90:c0:b6:cc:a4:5c:59:c6:3f:41:ac:b2:63:3b:be:35:a2:56:
f2:b6:25:5e:7c:23:1e:41:c3:ec:85:f7:e7:55:b8:91:fd:0f:
6d:d9:3e:c2:f1:46:a0:7e:e2:85:72:c3:24:70:64:a2:d8:09:
7e:3e:b8:1f:a9:d9:f4:85:f5:e4:bd:a8:0b:de:75:4e:ba:bc:
bb:f7:56:ac:ce:98:d7:44:ac:d9:66:06:fd:0c:fa:79:67:c5:
2b:2b:b2:27
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNuLcOqhK53asIiEUBICpJhcEv2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA4YzQ4YjlhNjQwYzE0YzYxYWFkNDM5YWIxZmM0NGZh
MmE0MTRlYTAeFw0yNTA2MDkyMzUxMTFaFw0yNTA2MTEwMzM3MTFaMDMxMTAvBgNV
BAMTKEU5QTZCNEZFOEYyRTI1RjAyM0RFRTE5NUNFMTM5OTBEQjE4QzIxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjRlbawRTC82YZ6XmwHpum4Ol
W9IUwFLXggDHRRezPweU1sA1cAr342NkcOqCxu4fJtokghdg9dma4PP8299PR1IS
flC3z8yeOOBdFzem2qiUWZJRclZsg9NdHWcva5hUZBC4Q7BXnPPULAg3GCQFSVLi
A2rgf+FlsorM+tZlm0WBTrpxsdLbbhdxNveNR0/pyVsPk4rmcTKHHFIt9QyIGlh/
NnavzRXo0P0xt+TdE0T8GUeXM0mGEXit/y9crcDBwgcKQBX11SoSqeRhs26c/IV3
fqXfewVe+wu8m6m/+4q70fzO62d6v4wS8+fOxiEOkeiaP8UAL7A61LxAvHwDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU6aa0/o8uJfAj3uGVzhOZDbGMIeMwHwYDVR0j
BBgwFoAUYIxIuaZAwUxhqtQ5qx/ET6KkFOowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1
NTU2LzAvNjA4QzQ4QjlBNjQwQzE0QzYxQUFENDM5QUIxRkM0NEZBMkE0MTRFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lJeEl1YVpBd1V4aHF0UTVxeF9FVDZL
a0ZPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQ2MDUyOS02
OTkyLTRmYzUtOGExNy01MjViNmIyNzU1NTYvMC82MDhDNDhCOUE2NDBDMTRDNjFB
QUQ0MzlBQjFGQzQ0RkEyQTQxNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6aG1PyHPbcFUaGPJi2v
xFKtEC1ue/qXL01Htn11Udwua49NWYSpMkTvLalxMh4qSbdtzWLnUD+iFUgBj48z
+PE+kKIYgLw8n8Es1zTBtbxNV5+la32B5de301Z85I80Ae4Z+lWyfGKVxf2h6vMC
8uapygBLSivIUvuLEZhuTJlhpkVY8ALlj0KPLcHXRvVjZMXA0mTAEL63FNWnH0Dx
5d5KkMC2zKRcWcY/QayyYzu+NaJW8rYlXnwjHkHD7IX351W4kf0Pbdk+wvFGoH7i
hXLDJHBkotgJfj64H6nZ9IX15L2oC951Trq8u/dWrM6Y10Ss2WYG/Qz6eWfFKyuy
Jw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:45:49 2025 by rpki-client