
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File: E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier: YFasAkSHNOM/srlgeqxD+lkr5js0nl8OE3QMlBweJtk=
Subject key identifier: 3D:5C:A7:65:8B:5C:97:AE:2E:A4:C0:AB:61:12:86:B1:55:6C:E9:65
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer: /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial: 6CB64064D1237D12DB85B5EABBEA09D9F357098D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number: 019A
Signing time: Sat 29 Mar 2025 06:16:45 +0000
Manifest this update: Sat 29 Mar 2025 06:11:45 +0000
Manifest next update: Sun 30 Mar 2025 08:05:45 +0000
Files and hashes: 1: AS215131.asa (hash: fdxXAZ8vlKpf5EccUmAW+hZmsZidklCajd1vBNkiavk=)
2: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: wI+WG9FW2fIAlz9FywG4H4/Hpvksb9LtIro2lBWmlXU=)
3: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: 8S1mRepLz4anZXttxO74tmjo+5TJ/IvIFNDFY67JQHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b6:40:64:d1:23:7d:12:db:85:b5:ea:bb:ea:09:d9:f3:57:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Validity
Not Before: Mar 29 06:11:45 2025 GMT
Not After : Mar 30 08:05:45 2025 GMT
Subject: CN=3D5CA7658B5C97AE2EA4C0AB611286B1556CE965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:81:ed:c8:55:26:ca:f1:a2:f7:cb:22:c0:
c1:27:b9:87:12:6d:7b:7d:a0:17:56:73:9e:bf:0f:
c8:cc:1c:7e:e3:e8:b1:74:32:4c:89:58:5c:2d:dd:
8c:0b:88:23:a6:02:6c:4a:14:d4:a8:11:9c:df:26:
40:6b:91:6e:af:a4:b6:59:5c:67:66:0d:7c:83:25:
66:51:fb:28:77:15:a6:d3:07:bc:3e:30:a5:3c:b0:
2d:1b:33:5c:d7:f9:e7:1d:83:01:0e:38:a2:b5:3d:
40:04:75:f8:79:c9:34:d8:2a:c3:23:4f:54:a5:63:
80:da:65:7d:5a:65:7e:26:e6:32:47:af:10:47:72:
b8:6d:d4:9f:23:11:b4:af:ac:79:5f:b5:7d:3c:81:
49:63:ea:5a:0f:13:f1:7d:14:76:08:57:de:69:78:
72:8a:45:b6:71:79:7b:bc:0c:76:4e:2a:15:69:e8:
97:44:78:07:0f:2b:f7:0d:43:21:08:3c:50:ab:73:
43:7a:78:5d:23:38:19:83:1b:d0:d7:76:db:ce:3e:
a3:6c:b2:3d:ca:93:32:79:7b:bc:c9:e0:86:7a:aa:
4b:35:28:f0:ef:d5:81:5b:05:dd:2f:1d:d8:46:f3:
a8:0a:34:88:67:e3:7e:d0:3c:0f:ae:30:3f:19:ae:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:A7:65:8B:5C:97:AE:2E:A4:C0:AB:61:12:86:B1:55:6C:E9:65
X509v3 Authority Key Identifier:
keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1b:d0:27:44:16:8b:19:75:69:75:bd:e5:5b:f5:d9:af:1b:
3b:9a:46:f3:d6:d1:6f:d3:c0:49:56:96:9f:b1:19:6c:b0:37:
e5:74:70:8e:8f:ca:6b:d9:8e:bb:98:11:ed:ac:25:80:3a:8e:
4f:b8:bb:42:7d:d5:39:70:91:66:0c:ad:72:ff:06:94:bb:66:
b0:ab:6e:92:d9:f9:70:a7:cb:71:40:db:ac:7a:4a:d4:7d:90:
ef:0a:f6:6d:29:f5:8f:81:ea:ab:a1:b2:c0:e8:56:2c:69:d4:
68:c0:0c:b9:31:9e:88:36:2a:ff:c1:3f:81:12:67:ac:70:2a:
18:ac:49:80:d2:ac:58:c1:46:28:3c:2c:7d:29:ca:dc:cb:a1:
1a:e9:36:14:8e:40:88:4f:d4:65:cb:22:d0:0d:af:6a:39:64:
b6:41:f6:4a:03:b3:a3:16:85:76:ef:35:9e:6f:48:4b:0a:da:
39:a0:8c:78:fa:b6:a2:72:20:eb:a0:25:f1:7a:d1:9d:6a:f9:
fa:8d:51:90:a9:8c:33:5f:ff:b6:9a:d0:54:fc:f8:2d:35:bc:
bf:f4:b0:09:b4:83:89:ce:9e:07:5b:c9:23:84:5a:81:ef:2b:
6a:49:3a:16:38:00:71:8a:35:5d:cc:a6:02:d8:34:f3:97:bd:
ed:d1:c6:ce
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbLZAZNEjfRLbhbXqu+oJ2fNXCY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTRiYTk4ZmMzZWJlODA2Yzc4MmU1ODlmYWY1Mjk1YzMy
NTkyMTJhODAeFw0yNTAzMjkwNjExNDVaFw0yNTAzMzAwODA1NDVaMDMxMTAvBgNV
BAMTKDNENUNBNzY1OEI1Qzk3QUUyRUE0QzBBQjYxMTI4NkIxNTU2Q0U5NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWoHtyFUmyvGi98siwMEnuYcS
bXt9oBdWc56/D8jMHH7j6LF0MkyJWFwt3YwLiCOmAmxKFNSoEZzfJkBrkW6vpLZZ
XGdmDXyDJWZR+yh3FabTB7w+MKU8sC0bM1zX+ecdgwEOOKK1PUAEdfh5yTTYKsMj
T1SlY4DaZX1aZX4m5jJHrxBHcrht1J8jEbSvrHlftX08gUlj6loPE/F9FHYIV95p
eHKKRbZxeXu8DHZOKhVp6JdEeAcPK/cNQyEIPFCrc0N6eF0jOBmDG9DXdtvOPqNs
sj3KkzJ5e7zJ4IZ6qks1KPDv1YFbBd0vHdhG86gKNIhn437QPA+uMD8Zrq5jAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUPVynZYtcl64upMCrYRKGsVVs6WUwHwYDVR0j
BBgwFoAU5LqY/D6+gGx4Llifr1KVwyWSEqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjY0MjE5MDgtNzVkYy00MzBiLThmYjktNzQ4Yzc1YmIw
MmMyLzAvRTRCQTk4RkMzRUJFODA2Qzc4MkU1ODlGQUY1Mjk1QzMyNTkyMTJBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMcVlfRDYtZ0d4NExsaWZyMUtWd3lX
U0VxZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iNjQyMTkwOC03
NWRjLTQzMGItOGZiOS03NDhjNzViYjAyYzIvMC9FNEJBOThGQzNFQkU4MDZDNzgy
RTU4OUZBRjUyOTVDMzI1OTIxMkE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBvQJ0QWixl1aXW95Vv1
2a8bO5pG89bRb9PASVaWn7EZbLA35XRwjo/Ka9mOu5gR7awlgDqOT7i7Qn3VOXCR
Zgytcv8GlLtmsKtuktn5cKfLcUDbrHpK1H2Q7wr2bSn1j4Hqq6GywOhWLGnUaMAM
uTGeiDYq/8E/gRJnrHAqGKxJgNKsWMFGKDwsfSnK3MuhGuk2FI5AiE/UZcsi0A2v
ajlktkH2SgOzoxaFdu81nm9ISwraOaCMePq2onIg66Al8XrRnWr5+o1RkKmMM1//
tprQVPz4LTW8v/SwCbSDic6eB1vJI4Rage8rakk6FjgAcYo1XcymAtg085e97dHG
zg==
-----END CERTIFICATE-----
Generated at Thu Apr 3 11:03:43 2025 by rpki-client