Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: bkAlGkUubL6Z5KQpEr9gdm1nDHkLWC2hO6S3Q+l74gg=
Subject key identifier: A2:34:24:3D:9D:2B:FD:44:A2:1D:81:BD:0F:B6:62:A4:FD:32:E5:61
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 4E5CE148C688802AD8F54374D9F71245D3102324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: CC
Signing time: Tue 11 Nov 2025 01:06:40 +0000
Manifest this update: Tue 11 Nov 2025 01:01:40 +0000
Manifest next update: Wed 12 Nov 2025 01:15:40 +0000
Files and hashes: 1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: f6h2Ag3+lz5xC3nRxcKZWEYwqNraBWc2Xf/5atPNAJc=)
2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5c:e1:48:c6:88:80:2a:d8:f5:43:74:d9:f7:12:45:d3:10:23:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: Nov 11 01:01:40 2025 GMT
Not After : Nov 12 01:15:40 2025 GMT
Subject: CN=A234243D9D2BFD44A21D81BD0FB662A4FD32E561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:b3:d0:b6:34:86:6c:f0:2a:59:2b:9a:08:
4f:1f:6a:df:8a:49:f8:f2:95:1e:67:f9:59:22:16:
ae:72:65:c4:b7:02:62:17:7a:a9:55:b6:c7:08:d1:
f0:10:3a:ef:8f:b6:d1:51:d3:42:a5:79:8a:b1:bc:
6b:57:79:57:7d:ec:dc:a8:e8:f8:66:d1:59:2f:4e:
f9:4e:a7:11:44:f3:f7:aa:b7:e8:77:6f:43:0c:12:
5e:15:bc:84:7a:1c:11:ad:97:eb:ce:20:0a:02:0b:
36:4c:57:ff:a6:81:b9:a9:30:12:04:c3:e2:33:6b:
3a:aa:ac:e6:a2:78:dc:16:7b:b2:6c:68:e0:3e:80:
09:0f:f6:4a:8b:89:14:30:a1:87:28:f4:c4:25:19:
9c:1f:27:b0:66:9e:d8:e8:1d:22:c6:ec:ca:84:61:
c8:aa:ba:b0:43:cc:6d:b7:96:31:b1:5e:4f:f7:74:
2a:f6:f7:0b:ec:d4:98:03:8b:f2:68:f4:a7:e0:28:
37:dd:a2:6b:99:d6:94:9f:21:96:2d:89:6e:d2:8a:
c0:54:37:14:cc:49:97:01:8a:96:bd:1c:d7:d4:de:
df:c8:cf:5c:f8:87:0b:18:1e:e4:d6:15:d8:3a:3d:
50:95:1e:db:71:16:7c:72:63:fc:1c:90:10:74:33:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:24:3D:9D:2B:FD:44:A2:1D:81:BD:0F:B6:62:A4:FD:32:E5:61
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ed:af:d8:7d:86:f8:ec:1a:12:29:60:3c:33:84:c6:20:94:
49:26:65:aa:f2:f9:0a:4f:7c:60:60:eb:72:1d:f8:25:c2:20:
3e:c7:c9:d2:b0:3b:64:aa:d9:5b:e8:26:85:e6:14:dc:d4:92:
44:5c:eb:32:99:1f:e4:5b:60:40:a0:0d:b9:6e:4a:df:17:04:
d8:25:54:9f:dc:6d:62:6c:71:34:14:81:4a:a9:6b:89:34:23:
98:6e:ac:e2:ae:36:0c:bd:2a:86:c4:b6:57:ca:65:b7:f4:e0:
48:3a:4a:f1:16:56:db:59:c8:09:98:2b:ce:9b:97:9b:bf:63:
6e:d5:4e:1f:21:77:b1:1c:5a:f8:5a:1b:1a:54:64:21:1d:32:
4d:15:d0:6d:36:25:64:87:78:f5:1c:4d:50:94:47:f9:6a:6d:
8d:ba:81:b0:c8:84:61:40:1f:8b:f5:18:c3:c4:8f:1c:f5:70:
11:8b:1c:f1:07:38:72:3d:2e:72:ed:df:0b:79:00:df:96:33:
05:6e:0c:b2:eb:85:c3:3b:21:41:c4:b2:5f:65:54:ae:21:39:
41:3e:c2:cb:1c:65:cc:98:30:cd:f5:c3:59:9c:02:b2:36:5a:
f6:c3:28:ba:8c:34:e4:b0:8f:57:3b:74:e0:36:10:93:01:16:
b4:94:b8:47
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTlzhSMaIgCrY9UN02fcSRdMQIyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA4YzQ4YjlhNjQwYzE0YzYxYWFkNDM5YWIxZmM0NGZh
MmE0MTRlYTAeFw0yNTExMTEwMTAxNDBaFw0yNTExMTIwMTE1NDBaMDMxMTAvBgNV
BAMTKEEyMzQyNDNEOUQyQkZENDRBMjFEODFCRDBGQjY2MkE0RkQzMkU1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MrPQtjSGbPAqWSuaCE8fat+K
SfjylR5n+VkiFq5yZcS3AmIXeqlVtscI0fAQOu+PttFR00KleYqxvGtXeVd97Nyo
6Phm0VkvTvlOpxFE8/eqt+h3b0MMEl4VvIR6HBGtl+vOIAoCCzZMV/+mgbmpMBIE
w+IzazqqrOaieNwWe7JsaOA+gAkP9kqLiRQwoYco9MQlGZwfJ7BmntjoHSLG7MqE
YciqurBDzG23ljGxXk/3dCr29wvs1JgDi/Jo9KfgKDfdomuZ1pSfIZYtiW7SisBU
NxTMSZcBipa9HNfU3t/Iz1z4hwsYHuTWFdg6PVCVHttxFnxyY/wckBB0M+HhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUojQkPZ0r/USiHYG9D7ZipP0y5WEwHwYDVR0j
BBgwFoAUYIxIuaZAwUxhqtQ5qx/ET6KkFOowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1
NTU2LzAvNjA4QzQ4QjlBNjQwQzE0QzYxQUFENDM5QUIxRkM0NEZBMkE0MTRFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lJeEl1YVpBd1V4aHF0UTVxeF9FVDZL
a0ZPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQ2MDUyOS02
OTkyLTRmYzUtOGExNy01MjViNmIyNzU1NTYvMC82MDhDNDhCOUE2NDBDMTRDNjFB
QUQ0MzlBQjFGQzQ0RkEyQTQxNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+2v2H2G+OwaEilgPDOE
xiCUSSZlqvL5Ck98YGDrch34JcIgPsfJ0rA7ZKrZW+gmheYU3NSSRFzrMpkf5Ftg
QKANuW5K3xcE2CVUn9xtYmxxNBSBSqlriTQjmG6s4q42DL0qhsS2V8plt/TgSDpK
8RZW21nICZgrzpuXm79jbtVOHyF3sRxa+FobGlRkIR0yTRXQbTYlZId49RxNUJRH
+WptjbqBsMiEYUAfi/UYw8SPHPVwEYsc8Qc4cj0ucu3fC3kA35YzBW4MsuuFwzsh
QcSyX2VUriE5QT7CyxxlzJgwzfXDWZwCsjZa9sMouow05LCPVzt04DYQkwEWtJS4
Rw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:00 2025 by rpki-client