Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier: 2i2CJEBGRQWYWRmR/g/nnfOVfr51gbeUmIf/s3luvak=
Subject key identifier: AB:CD:3D:68:FB:24:72:9B:88:5D:CF:8C:8F:EC:E9:C2:5B:89:9B:99
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer: /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial: 5D077FC22E3E7CD47A88F916BE1AA56F8B4F1267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number: 4C
Signing time: Mon 15 Sep 2025 08:08:19 +0000
Manifest this update: Mon 15 Sep 2025 08:03:19 +0000
Manifest next update: Tue 16 Sep 2025 11:38:19 +0000
Files and hashes: 1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: Kz6BiaF9Uov1pQMsxlfyPcFSv2Zi5swdFqqnM4gbFRs=)
2: AS214809.asa (hash: twDSgOmLlkZzcvx0mDRRIi71WRXYCfTsSol/H2pUsYI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 11:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:07:7f:c2:2e:3e:7c:d4:7a:88:f9:16:be:1a:a5:6f:8b:4f:12:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Validity
Not Before: Sep 15 08:03:19 2025 GMT
Not After : Sep 16 11:38:19 2025 GMT
Subject: CN=ABCD3D68FB24729B885DCF8C8FECE9C25B899B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:8a:fe:09:ed:f3:84:1b:05:ad:69:f8:48:
d1:89:4f:33:0b:83:30:f6:6a:51:be:90:e0:d1:f2:
14:d5:84:29:73:62:78:f4:bb:3e:21:56:a2:c1:db:
27:3e:97:43:fe:66:57:c1:9d:69:84:c0:a0:ed:02:
63:2d:3c:5a:5a:76:1d:1b:ac:af:8c:60:ad:16:26:
c9:cf:94:b9:16:94:0e:ed:95:41:03:d0:5e:ed:53:
6b:56:bf:06:87:0d:2d:43:75:2d:35:cb:f7:d6:5a:
50:ab:cd:78:71:8c:e2:d7:28:80:94:ff:8a:19:d3:
13:14:fd:e5:df:a3:3c:84:ab:43:d8:3c:59:df:d8:
4f:41:1a:91:e9:88:68:34:eb:29:a6:14:8b:22:6c:
7c:40:45:e6:f7:d9:a4:b8:b9:76:ee:65:e2:4b:af:
05:f3:5d:97:9a:41:2f:98:ce:cb:4c:cc:be:45:64:
b8:37:2f:3c:af:33:99:b2:19:30:d8:07:e0:2b:53:
3c:32:6f:62:78:88:a1:ab:26:ae:74:31:b1:96:7c:
0c:69:2e:87:7e:97:db:97:f0:3d:bc:1c:c3:40:c6:
dc:65:09:b9:ac:d8:87:cf:c3:88:71:ae:1e:0d:1e:
75:77:67:4a:b9:a1:9c:da:ee:b9:13:8c:8f:57:e7:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CD:3D:68:FB:24:72:9B:88:5D:CF:8C:8F:EC:E9:C2:5B:89:9B:99
X509v3 Authority Key Identifier:
keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:55:3b:49:02:20:fb:f9:16:d4:7a:ba:ca:e2:b8:43:6e:70:
31:ed:78:6a:5a:a4:0a:c2:c3:5e:94:12:e3:32:69:25:fb:9e:
3f:54:27:37:a9:bc:56:bd:4d:df:12:8f:ed:a9:8b:03:d1:c8:
bf:eb:f6:94:13:b3:83:bb:ae:a1:59:8a:10:ae:c5:a9:d7:54:
7b:74:3b:74:a5:3c:b1:ab:a8:e6:19:7b:f5:6e:cc:38:4b:f8:
5c:a2:ba:bc:aa:50:fc:bc:3e:b8:d5:06:76:c1:0e:aa:bb:71:
85:d7:ed:74:56:98:ca:d1:74:6a:67:f4:59:38:18:fc:24:85:
eb:90:d4:1a:34:72:c7:8d:20:53:75:b1:1f:76:db:f2:5c:5d:
bd:e2:bd:e9:30:5f:75:a3:f7:1e:61:3b:2f:da:fa:e2:9f:15:
0f:ee:4c:5a:ad:c2:b9:8c:b9:94:bc:97:d5:57:d6:cd:0c:d6:
dc:62:46:91:44:ce:fe:c0:ab:5c:5c:77:83:fd:13:87:61:84:
25:66:c7:5a:9d:7e:b1:5f:31:7f:e0:1b:4e:1c:cd:35:46:e1:
80:69:99:04:51:a7:82:61:2d:8e:ec:3f:01:a0:cc:f9:d7:18:
40:ae:8c:2b:aa:61:65:67:2c:94:aa:dd:75:a7:11:89:6b:c7:
8d:81:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:41:06 2025 by rpki-client