Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: yjE2wfTsoeEpVBLdBlhts5CRcoCDWsojCNPeKHsczlI=
Subject key identifier: 1F:0A:18:DF:7A:B2:7D:AA:50:DF:73:04:38:6E:08:55:EC:38:55:90
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 586FBFCD8CE1B6A9A1B29D92FBE728B09C0DDDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 0236
Signing time: Mon 10 Nov 2025 22:47:16 +0000
Manifest this update: Mon 10 Nov 2025 22:42:16 +0000
Manifest next update: Thu 13 Nov 2025 02:06:16 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: AjAZmhqHrAB9SRKxsIcmnZ7oMO9kuofDhW1AS+uCgoU=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6f:bf:cd:8c:e1:b6:a9:a1:b2:9d:92:fb:e7:28:b0:9c:0d:dd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Nov 10 22:42:16 2025 GMT
Not After : Nov 13 02:06:16 2025 GMT
Subject: CN=1F0A18DF7AB27DAA50DF7304386E0855EC385590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:ef:38:28:e3:8a:0b:64:05:c8:65:5c:15:
3b:8e:91:75:e7:7f:a7:be:97:1e:04:0b:72:f5:12:
0c:1d:b6:29:7d:d4:82:34:6e:11:6e:df:82:2a:2d:
19:61:c7:60:31:87:bd:26:14:ad:f3:fc:64:bf:07:
15:3a:16:18:c0:17:d9:6c:01:b9:d3:f1:90:39:dc:
41:b4:ec:76:d5:73:a9:c8:bd:a9:61:98:fb:fd:10:
56:22:80:00:e7:9e:8a:29:eb:e0:33:f2:1b:ff:8f:
2c:0c:14:d3:25:4b:a9:1f:9e:93:77:d0:3b:4a:ba:
b4:41:93:93:58:5c:08:89:ab:73:11:34:7e:ed:a0:
46:fd:4b:7b:b6:1d:52:de:08:5c:15:c9:65:8e:2c:
10:47:c7:17:2d:01:16:82:7e:6c:85:72:16:ec:a2:
fe:6b:d6:8c:3e:83:64:52:79:c9:40:34:07:35:ab:
33:15:8a:7a:80:2e:14:f1:f5:1c:ea:91:40:3b:04:
d7:7a:fd:6e:80:42:2d:95:f0:ff:b0:d6:c8:23:b5:
b4:05:05:ee:ac:e0:7e:23:83:6a:14:46:d0:65:d6:
5b:6c:8a:e7:63:1f:31:0d:f1:0e:a6:fe:20:0e:a8:
b1:a8:dc:75:d3:a3:0d:7d:70:c6:69:c7:0a:f8:85:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:18:DF:7A:B2:7D:AA:50:DF:73:04:38:6E:08:55:EC:38:55:90
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:da:2a:6b:6d:1e:10:2b:8b:a9:7a:e3:de:36:6b:48:2e:12:
7a:62:1f:87:07:14:b8:05:5f:ce:ad:a0:59:ed:48:0b:11:b1:
82:d1:19:f9:35:fa:f5:87:ed:ca:cb:64:ab:27:fc:a1:9f:27:
ce:68:91:3d:42:e0:7e:39:f6:86:5d:17:00:b1:0d:8e:de:79:
db:b7:44:7a:e7:3d:7f:9d:a9:fd:9f:f2:39:72:27:c9:fc:8d:
56:76:17:59:33:9d:7b:49:5a:65:65:ac:fd:ce:84:1e:cd:71:
e2:c0:9d:86:39:2a:39:47:b9:c5:bb:ed:e3:20:a2:d5:ff:dd:
9e:f8:95:1e:fb:f9:28:b6:87:0d:af:62:3b:49:f6:d4:e2:9b:
10:02:c2:45:80:29:de:76:a0:d7:d2:38:d8:1b:a4:a2:51:de:
0c:2c:8c:a9:b0:07:9c:22:0d:44:88:a3:94:63:77:cf:64:cc:
37:80:5a:8d:55:3a:bb:03:7f:f0:16:24:5d:87:3a:e6:d2:83:
b8:0d:2b:4d:8d:76:af:d0:cc:49:d2:21:e4:73:7f:88:a2:58:
fa:2e:ec:93:c4:55:1e:21:50:84:08:6f:0f:0c:df:53:c8:d4:
27:11:f5:2a:dc:99:4a:1a:f6:a6:b5:04:49:96:1e:0b:da:93:
eb:58:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:52 2025 by rpki-client