Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: vjHLKyVcdymOLOPgc0cwWVZKk/FsLgG+yH54CEj5O/g=
Subject key identifier: EF:CD:2D:70:3C:F8:93:C4:0E:70:04:DC:48:BE:B5:79:CE:64:E7:7C
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 4CF63BA4FAD87F7FB5A89C28264E020E623D3677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 01DC
Signing time: Mon 15 Sep 2025 16:44:55 +0000
Manifest this update: Mon 15 Sep 2025 16:39:55 +0000
Manifest next update: Wed 17 Sep 2025 18:39:55 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: GxtbuCyBu0iych2PhigVkIrmAb2Rwl+8CE7UFpuj4sg=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f6:3b:a4:fa:d8:7f:7f:b5:a8:9c:28:26:4e:02:0e:62:3d:36:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Sep 15 16:39:55 2025 GMT
Not After : Sep 17 18:39:55 2025 GMT
Subject: CN=EFCD2D703CF893C40E7004DC48BEB579CE64E77C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:22:83:2e:37:26:1c:43:fc:8c:9d:07:b2:
38:60:c3:5d:23:13:0c:46:21:b6:ba:6b:f8:75:7a:
0b:bd:55:42:47:fe:12:1a:47:e0:cd:29:1d:f9:04:
e8:ca:c7:aa:5f:5b:cb:7d:bf:c0:51:64:71:ca:05:
57:74:60:38:8b:ee:cd:f5:bc:24:f7:2b:e0:e8:6d:
2d:c4:a6:8d:9a:69:9e:29:b6:c6:b9:a4:08:8d:30:
e9:16:05:39:67:15:65:90:0c:ef:db:8d:d3:51:33:
90:11:95:55:d9:eb:7c:2b:0c:9a:99:f7:6e:d4:c3:
bb:55:f2:f1:b9:72:a9:89:25:c2:07:c9:0d:c2:bc:
0d:cc:e0:47:ee:d1:0a:55:70:f4:f9:eb:1a:f5:3f:
bd:b3:ea:c2:6a:03:70:84:5f:f1:c5:86:4e:6f:6a:
ff:b3:d7:81:c0:b7:43:79:e6:23:5b:d4:47:47:78:
af:8b:5a:7c:6b:d3:6a:fe:40:fc:53:1b:22:41:38:
a0:c5:1d:0e:41:9c:d4:1a:7c:9a:bb:32:ef:3d:97:
cf:98:e2:ec:4c:58:0d:46:9c:0d:9d:f9:37:94:4c:
c4:db:18:36:4f:44:75:ff:9f:2b:03:55:a4:24:68:
9b:03:d0:78:d8:6a:5f:fd:93:4e:d3:2a:ae:24:6d:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CD:2D:70:3C:F8:93:C4:0E:70:04:DC:48:BE:B5:79:CE:64:E7:7C
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:23:3e:55:09:41:b7:37:4e:43:21:90:14:72:5c:c4:5f:
9d:a9:e2:34:3c:75:f9:6b:54:ac:4e:3b:9e:85:e8:35:79:80:
d3:36:67:fc:d1:81:fa:34:f4:cb:3a:b6:ee:38:f4:34:c0:2e:
ed:62:d0:e8:6e:6c:cf:29:83:ee:df:52:ed:3c:57:c6:a9:8b:
eb:04:44:7e:29:f5:35:47:63:54:67:bc:00:6c:f4:fa:51:78:
0c:1e:8c:1a:90:1c:9d:14:1b:65:00:8c:3b:b6:1d:37:33:a1:
d7:15:b1:ee:b8:c6:c8:4e:04:6e:86:ac:4a:ae:81:d5:18:a9:
52:06:40:8c:eb:d2:41:7c:83:00:32:6d:f8:25:fb:4b:db:a2:
83:36:6d:f4:f2:18:f0:20:f3:80:df:76:20:4b:8c:6c:75:38:
e2:46:e8:f4:64:32:8e:18:e3:c4:f4:3a:08:9c:0a:06:be:a9:
2f:9e:d1:ae:78:71:eb:bd:5f:7c:05:36:d7:f0:52:b7:81:b2:
26:b1:a4:57:5e:0c:39:bf:a2:9e:f4:03:63:4c:cf:31:fb:cc:
47:2c:13:a5:7f:11:ff:e3:4f:c7:c8:55:c3:27:d2:36:5d:73:
fe:65:6c:13:b2:98:f7:af:45:b7:03:aa:8f:05:6e:54:a1:c3:
14:8d:e1:fd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTPY7pPrYf3+1qJwoJk4CDmI9NncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWQ0OWJkMGIyODg0YzZkYzUwODVjMWE2OTRkZjdiOTcw
ZTA1ZGFhYjAeFw0yNTA5MTUxNjM5NTVaFw0yNTA5MTcxODM5NTVaMDMxMTAvBgNV
BAMTKEVGQ0QyRDcwM0NGODkzQzQwRTcwMDREQzQ4QkVCNTc5Q0U2NEU3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21SKDLjcmHEP8jJ0Hsjhgw10j
EwxGIba6a/h1egu9VUJH/hIaR+DNKR35BOjKx6pfW8t9v8BRZHHKBVd0YDiL7s31
vCT3K+DobS3Epo2aaZ4ptsa5pAiNMOkWBTlnFWWQDO/bjdNRM5ARlVXZ63wrDJqZ
927Uw7tV8vG5cqmJJcIHyQ3CvA3M4Efu0QpVcPT56xr1P72z6sJqA3CEX/HFhk5v
av+z14HAt0N55iNb1EdHeK+LWnxr02r+QPxTGyJBOKDFHQ5BnNQafJq7Mu89l8+Y
4uxMWA1GnA2d+TeUTMTbGDZPRHX/nysDVaQkaJsD0HjYal/9k07TKq4kbRGTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU780tcDz4k8QOcATcSL61ec5k53wwHwYDVR0j
BBgwFoAUnUm9CyiExtxQhcGmlN97lw4F2qswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzQvOUQ0OUJEMEIyODg0QzZEQzUwODVDMUE2OTRERjdCOTcwRTA1REFBQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25VbTlDeWlFeHR4UWhjR21sTjk3bHc0
RjJxcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x
OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvNC85RDQ5QkQwQjI4ODRDNkRDNTA4
NUMxQTY5NERGN0I5NzBFMDVEQUFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3gjPlUJQbc3TkMhkBRy
XMRfnaniNDx1+WtUrE47noXoNXmA0zZn/NGB+jT0yzq27jj0NMAu7WLQ6G5szymD
7t9S7TxXxqmL6wREfin1NUdjVGe8AGz0+lF4DB6MGpAcnRQbZQCMO7YdNzOh1xWx
7rjGyE4EboasSq6B1RipUgZAjOvSQXyDADJt+CX7S9uigzZt9PIY8CDzgN92IEuM
bHU44kbo9GQyjhjjxPQ6CJwKBr6pL57Rrnhx671ffAU21/BSt4GyJrGkV14MOb+i
nvQDY0zPMfvMRywTpX8R/+NPx8hVwyfSNl1z/mVsE7KY969FtwOqjwVuVKHDFI3h
/Q==
-----END CERTIFICATE-----
Generated at Mon Sep 15 19:38:15 2025 by rpki-client