Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: zNN6w+0AhYAJUYy/lz0iV05xDU3BTnjrnj6GmtXpvXI=
Subject key identifier: 8F:87:09:72:47:92:C0:54:12:16:1C:EE:D0:C8:C3:D8:7B:F5:D6:49
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 310C50C0AAB80418E007F6E4F9C73C411761341B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 0183
Signing time: Tue 12 Aug 2025 23:09:05 +0000
Manifest this update: Tue 12 Aug 2025 23:04:05 +0000
Manifest next update: Thu 14 Aug 2025 23:41:05 +0000
Files and hashes: 1: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
2: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: kbcZM5XIeLq3XR/JBAWPAAR3n/uYKrZ1nj9qyYWwQlA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0c:50:c0:aa:b8:04:18:e0:07:f6:e4:f9:c7:3c:41:17:61:34:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Aug 12 23:04:05 2025 GMT
Not After : Aug 14 23:41:05 2025 GMT
Subject: CN=8F8709724792C05412161CEED0C8C3D87BF5D649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:d1:6a:0c:d5:64:f9:74:b2:c2:95:5a:38:
53:59:b6:33:0a:6e:74:f7:1c:fe:ff:c0:07:c7:3d:
2c:c7:47:1a:3e:36:c8:53:0d:d3:aa:0b:54:0e:42:
c0:18:ad:0a:55:93:c0:3c:6a:e1:b6:f8:5b:f9:cc:
11:a8:c0:42:c9:e2:35:78:4b:f3:5e:0e:f0:75:12:
8c:b1:00:e9:70:05:d6:57:8c:9d:c2:3e:b9:bd:a6:
81:97:91:45:44:c7:7a:7b:65:94:b0:ef:1c:4e:c3:
b8:fb:c4:5a:0d:80:22:ae:c9:ff:01:92:e6:f5:72:
99:2e:38:94:02:7b:06:20:40:98:43:ed:64:f3:82:
ee:6e:89:5f:b3:9e:e6:1c:0f:04:21:aa:9f:81:30:
e4:8f:9a:a3:b9:96:ab:88:9f:a5:d2:11:d6:5c:6e:
da:9a:be:ab:3c:d2:30:b1:0b:b0:5f:f7:a1:c6:2c:
ef:83:bc:bc:90:eb:50:1b:e4:62:df:74:90:fd:fc:
d4:bc:ec:b5:eb:40:db:34:60:8c:9a:9f:2f:fc:bd:
1d:bd:ff:da:c4:c1:51:af:16:99:43:7f:4f:eb:e0:
9c:27:8a:7d:16:51:ec:32:e6:76:af:81:71:9e:67:
39:47:ba:9a:d3:6d:47:d3:e6:1d:b3:11:1a:b5:7d:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:09:72:47:92:C0:54:12:16:1C:EE:D0:C8:C3:D8:7B:F5:D6:49
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ec:e2:58:37:bc:77:5b:64:00:74:ab:e1:c1:e3:d9:71:cd:
26:fc:32:8a:b4:57:df:f4:79:40:47:9e:74:fe:0a:c9:9a:26:
b1:98:da:02:2d:37:bf:27:35:c5:37:e0:15:8c:38:2a:96:39:
e4:a7:15:6c:b7:ce:6d:1f:2d:25:a5:f0:91:33:a0:59:19:07:
d1:76:7e:3c:20:82:3f:c1:e3:2a:59:25:cf:5f:e2:df:ed:a5:
e0:2b:f9:f1:f8:e3:02:9c:05:9f:62:17:17:7f:ca:cf:c3:4a:
1a:a5:bf:6b:4c:ef:fa:a8:cf:4f:ca:f8:c6:86:91:dd:21:b9:
7e:75:1e:af:f9:d1:3a:4f:6b:99:a5:4d:42:2e:22:58:90:69:
eb:52:b8:27:42:e8:2f:3d:6f:b8:2d:5e:ba:d5:00:74:db:70:
f8:1e:1e:7b:f7:10:8b:27:97:5a:6c:ec:31:59:38:30:b1:10:
e3:51:ef:16:fb:64:ae:4d:d0:6b:39:54:d3:f8:7b:a1:02:86:
3e:6f:b6:63:fd:7a:80:ce:d0:cd:80:f3:26:f7:2a:00:ed:46:
c1:87:15:50:f1:2d:92:4e:c3:f8:be:db:17:e8:e2:a2:a5:5a:
8b:bf:87:d6:f8:a2:c6:c4:6c:04:09:6b:fc:ac:de:01:57:e0:
37:5d:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 14:33:08 2025 by rpki-client