Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: Q5dQScVhYdZ9a3vwVPPB4grZ7nrmJYgTVxFz3M7jo58=
Subject key identifier: D0:3E:DF:2B:85:6D:83:6B:10:62:B9:93:3C:51:46:B6:FC:0D:BE:7A
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 75DBFCE1468046185263C66A4F0F30076433B4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 015D
Signing time: Wed 30 Jul 2025 04:36:25 +0000
Manifest this update: Wed 30 Jul 2025 04:31:25 +0000
Manifest next update: Fri 01 Aug 2025 07:06:25 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: ufRITDMwpuy/VffY4byrERTfdy7lVlgbpoXxLII1I5Y=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:db:fc:e1:46:80:46:18:52:63:c6:6a:4f:0f:30:07:64:33:b4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Jul 30 04:31:25 2025 GMT
Not After : Aug 1 07:06:25 2025 GMT
Subject: CN=D03EDF2B856D836B1062B9933C5146B6FC0DBE7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:d4:21:5b:dc:1b:9d:75:b3:c8:41:55:2b:
92:e6:83:6c:64:c4:56:8b:54:2b:5d:f6:c0:db:3d:
b4:c8:cf:6c:16:ec:69:f3:1d:5e:7a:52:61:5d:ea:
ca:33:b6:8a:13:d0:18:b7:56:79:c1:b3:7d:b3:84:
04:16:dd:d3:18:ac:fa:15:20:c3:7e:2d:91:f0:df:
05:6d:b6:fc:3f:fb:76:7a:0a:aa:6e:fa:50:5c:05:
81:7e:8d:c4:43:6b:4c:e1:82:f2:27:d5:45:52:4a:
c7:45:5b:c9:c9:4b:97:96:68:76:bd:06:fa:2d:c4:
ce:ef:13:10:98:1d:89:c5:21:9c:4e:46:7b:a6:6c:
08:94:33:70:83:7a:17:79:a1:21:a7:92:4b:ea:a3:
06:d9:c9:4f:eb:55:ec:5c:bf:cd:34:31:75:62:9a:
4f:70:96:4a:6a:ed:8a:d1:7c:64:71:03:d6:ac:ea:
45:0f:6f:47:5f:72:7c:2a:71:2a:eb:f9:83:44:66:
5c:b8:4a:bb:b6:b6:2e:5f:50:db:0f:95:4a:7b:e0:
95:3a:df:79:4a:1c:02:46:b5:38:84:29:bf:fe:98:
cc:3e:0a:e0:a0:c8:33:89:44:bc:a7:bd:f7:f6:b8:
ef:09:1c:74:91:44:fc:c6:b2:51:8c:de:85:fe:6d:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3E:DF:2B:85:6D:83:6B:10:62:B9:93:3C:51:46:B6:FC:0D:BE:7A
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:60:f1:30:34:d5:45:43:42:c4:7b:5f:33:45:77:c5:41:
5a:6e:c6:96:40:55:80:16:ff:5f:83:39:f7:9b:f7:ba:12:70:
0a:fd:c2:14:8a:01:d9:89:3b:08:fb:a0:79:7a:33:ac:4e:d6:
08:5e:94:d6:09:07:ed:4e:fe:f9:7e:fb:fd:b6:85:2f:df:15:
d5:6d:18:94:83:35:cf:06:91:0d:10:0d:78:4d:ce:a6:6c:26:
9a:e6:b5:10:2e:d7:4c:f7:33:dc:2f:8d:76:ef:bc:2b:f9:77:
8d:b9:c2:a6:8e:59:16:25:11:3c:e2:c9:8b:bd:a9:eb:d5:40:
7e:3c:f0:95:3c:ab:fb:d9:13:17:ac:da:35:a8:1e:63:d9:7f:
19:dd:e9:61:31:73:d4:de:2d:41:06:b3:c4:90:4a:f1:05:47:
42:8e:6c:e4:be:71:b6:52:99:6a:55:22:70:02:48:b7:8b:5f:
7d:4b:a8:e4:6d:db:9d:d4:dc:5c:94:02:9e:1e:19:8a:9a:ad:
cf:04:6c:6c:ac:28:2d:b0:ba:1a:a4:5b:67:52:e0:77:c5:c6:
58:89:32:4a:17:b8:36:c3:b7:16:6f:cc:12:6f:9f:9b:6d:05:
09:3a:a4:37:c6:63:cd:c5:11:e9:ea:ee:5a:68:3c:ee:c6:1f:
f2:cb:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:01:04 2025 by rpki-client