Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
File: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft (raw, json)
Hash identifier: 8LgZcnfHgncBn3mEvtjMp3UcnDvDTaims8DXuc+tT3E=
Subject key identifier: 39:3F:07:29:9A:BF:E2:A5:FA:C5:74:88:81:2A:02:5C:83:3D:34:14
Authority key identifier: 4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
Certificate issuer: /CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Certificate serial: 224C634110F139A5F1035557A55D7B2BDE1E7E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
Manifest number: D6
Signing time: Fri 20 Jun 2025 10:47:48 +0000
Manifest this update: Fri 20 Jun 2025 10:42:48 +0000
Manifest next update: Sat 21 Jun 2025 13:44:48 +0000
Files and hashes: 1: AS213915.asa (hash: WNoePLBPk99sollnieSJLQGheEbE8N7gHweNXQmzvJc=)
2: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl (hash: TjJNq3GALGYHxqKlEB+5+1Rvek6GgmvpokrZSxuo9HM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4c:63:41:10:f1:39:a5:f1:03:55:57:a5:5d:7b:2b:de:1e:7e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Validity
Not Before: Jun 20 10:42:48 2025 GMT
Not After : Jun 21 13:44:48 2025 GMT
Subject: CN=393F07299ABFE2A5FAC57488812A025C833D3414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:7c:ab:1a:67:be:a9:d3:fb:26:c0:4d:9e:
a2:70:0b:08:11:9a:b7:06:56:0e:b5:99:0a:87:ed:
fa:61:36:8f:82:ee:4f:d6:d9:06:84:15:70:9e:b4:
5d:8d:96:f7:02:82:b0:cb:a8:e2:96:c2:93:b5:00:
98:e7:a2:de:47:dd:48:df:29:a1:5c:3b:91:f9:5c:
e2:14:66:41:87:44:96:37:c2:13:2e:60:28:6a:21:
cd:de:31:1e:15:b1:39:3b:69:8e:e7:52:07:d6:54:
f2:3c:01:e5:c3:98:ad:41:5c:4d:b2:2e:57:4e:be:
1c:cf:fa:1d:f5:25:93:28:83:88:e6:39:56:9b:05:
fb:c3:de:57:e4:4d:7b:7c:ac:7c:51:9a:4b:88:8e:
d5:28:ec:2f:bf:65:f9:6a:38:b2:14:b3:75:75:e5:
6b:7b:4b:18:eb:f2:ac:d2:e1:a2:1a:0f:d8:a0:89:
60:6d:16:1f:53:e4:54:2e:12:bd:71:ad:c1:38:f5:
dc:f2:52:87:de:a4:90:f8:ef:24:99:c1:8c:4a:79:
bb:35:ba:1c:ff:ca:29:a2:40:ff:73:11:ef:c1:8c:
de:40:a2:1d:b3:cb:61:14:75:02:e6:68:3a:4e:16:
12:24:14:3a:fd:a9:38:57:e7:90:f0:45:ba:08:c5:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3F:07:29:9A:BF:E2:A5:FA:C5:74:88:81:2A:02:5C:83:3D:34:14
X509v3 Authority Key Identifier:
keyid:4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:7d:a6:f9:32:77:49:51:c6:7f:24:c0:92:bc:aa:f7:4c:
9d:d6:c2:f0:4a:ee:ec:00:2a:af:ba:e3:07:d7:d6:30:ca:8a:
18:67:5f:37:2d:5a:05:99:ab:9d:87:56:f6:22:c8:5e:97:5b:
f6:14:2a:87:86:b0:99:3a:04:de:6d:92:22:cd:93:77:d1:a9:
a6:c5:26:2f:7a:7f:d0:7a:17:18:11:5a:7b:54:a9:52:76:c8:
52:f9:bc:10:47:b0:db:d1:5c:eb:c5:a0:91:49:2c:ec:17:48:
47:dc:45:08:05:d9:4a:39:84:9e:03:2f:cb:1f:4e:54:b4:44:
d1:2a:74:77:71:c0:40:84:4d:7e:18:97:a4:ec:b0:a1:47:08:
7d:73:ed:ef:35:62:58:f2:ce:e9:a2:ee:3d:f3:0e:68:43:e3:
24:54:e5:1b:f0:e7:be:b1:c5:93:ee:18:cf:98:59:e6:02:d8:
08:73:3a:c1:48:6d:f6:54:b6:1d:09:98:b3:6f:1c:5a:48:a8:
34:ac:23:ad:08:00:a6:7d:d6:3d:0d:c3:eb:82:89:0d:ea:f6:
25:6d:7c:c1:10:ac:90:82:d9:59:40:3c:55:84:8b:67:42:98:
63:74:4e:2e:09:f9:b0:03:2c:55:74:ea:09:55:9b:06:cf:94:
33:54:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 17:58:58 2025 by rpki-client