Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: GPhBcVy8ZuYqFuz08qQlBFpHESchCSnrGtATUlGCpxI=
Subject key identifier: 91:A8:A2:34:D9:9C:CF:94:A0:46:B8:42:D1:77:42:B4:6D:39:27:E1
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 557A5C758E9096EFA7197449D208AF23076DA27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0132
Signing time: Thu 21 Aug 2025 02:31:40 +0000
Manifest this update: Thu 21 Aug 2025 02:26:40 +0000
Manifest next update: Fri 22 Aug 2025 15:02:40 +0000
Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: tnCTSJl7C0sQ+l/w9qPQB4DyRHwboJIVv3j/RUjzHN8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7a:5c:75:8e:90:96:ef:a7:19:74:49:d2:08:af:23:07:6d:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Aug 21 02:26:40 2025 GMT
Not After : Aug 22 15:02:40 2025 GMT
Subject: CN=91A8A234D99CCF94A046B842D17742B46D3927E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:ee:9d:2b:4c:af:d2:dd:9b:78:fe:6b:78:
e1:c4:00:95:25:1a:21:ab:3b:0f:e9:9f:17:9c:01:
65:50:7c:8c:df:ec:6e:14:5c:19:5d:65:7c:c5:63:
ad:31:a5:f5:21:14:61:64:a5:60:0f:4d:10:83:02:
10:a5:aa:33:b9:aa:50:a6:5d:42:f7:23:07:7e:74:
8c:41:04:38:77:b8:7c:47:3e:fe:00:7c:f4:5a:b9:
95:31:8e:4c:02:90:1e:e3:91:fc:9d:37:5a:c6:eb:
e5:86:8e:af:d8:e2:ad:e3:24:a4:4d:dd:f3:ad:d4:
f7:60:33:04:ad:bc:4d:7d:cf:b0:79:0a:d4:20:bb:
20:c3:31:02:e1:2d:32:f2:32:29:0e:1c:e4:46:6e:
ff:bb:7d:1d:1d:14:7e:cb:31:98:27:40:44:8a:7f:
03:66:9d:c8:c7:06:0d:fe:04:c1:8c:44:83:4d:87:
f8:4c:c3:da:ce:9d:c6:06:1c:fc:e0:01:cd:22:41:
40:2f:96:89:66:52:6c:20:55:84:13:f5:47:30:e4:
12:ab:60:ae:6b:17:4d:a6:03:88:9d:22:cd:2b:d8:
cb:33:78:e1:89:be:d0:1f:eb:31:91:5c:fd:8f:bf:
a1:81:bc:83:6c:19:54:0b:81:37:98:ea:30:17:ec:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A8:A2:34:D9:9C:CF:94:A0:46:B8:42:D1:77:42:B4:6D:39:27:E1
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:30:c7:b6:8e:96:85:b3:b1:f7:31:45:d7:08:1c:b7:7a:a3:
06:9b:2e:fe:9d:2e:01:e9:d4:10:ca:d5:3a:2c:e6:05:fb:31:
6d:9a:64:76:f1:71:5a:b0:b8:c0:e4:26:07:ce:49:a1:c3:fd:
f4:32:9c:72:72:62:78:7c:0e:f2:a8:fd:1d:13:f0:c8:da:7b:
ee:0d:39:dd:da:32:b4:96:fa:43:1f:42:aa:96:81:23:64:b7:
57:16:91:4a:e6:45:ce:05:70:d8:95:40:01:6f:4c:ae:58:00:
2b:c1:bf:4b:ff:5e:a9:a8:c0:1e:df:1c:7e:1e:6f:50:df:82:
89:1d:fb:d9:81:53:77:78:86:f8:be:b9:27:de:42:45:5e:bd:
b3:4d:54:b3:00:f1:5d:4d:7a:4d:54:f1:6d:bf:d1:c4:e3:62:
6d:8c:4c:6c:64:23:05:86:9c:67:ba:49:0c:99:9d:5b:5e:26:
06:3c:6f:52:e9:f1:f5:04:15:02:e9:1e:1a:4e:3e:13:df:4d:
42:2c:23:fa:6e:18:68:fd:3d:1b:c0:43:36:c7:25:84:ea:60:
54:3f:e6:dd:27:71:a4:da:7a:28:b9:5d:58:f8:49:3a:c1:8b:
b2:60:60:d5:34:10:49:7a:7c:3a:a9:e5:54:66:f8:02:35:77:
db:dd:d6:c7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVXpcdY6Qlu+nGXRJ0givIwdton4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz
NDcwNTRmZDAeFw0yNTA4MjEwMjI2NDBaFw0yNTA4MjIxNTAyNDBaMDMxMTAvBgNV
BAMTKDkxQThBMjM0RDk5Q0NGOTRBMDQ2Qjg0MkQxNzc0MkI0NkQzOTI3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ju6dK0yv0t2beP5reOHEAJUl
GiGrOw/pnxecAWVQfIzf7G4UXBldZXzFY60xpfUhFGFkpWAPTRCDAhClqjO5qlCm
XUL3Iwd+dIxBBDh3uHxHPv4AfPRauZUxjkwCkB7jkfydN1rG6+WGjq/Y4q3jJKRN
3fOt1PdgMwStvE19z7B5CtQguyDDMQLhLTLyMikOHORGbv+7fR0dFH7LMZgnQESK
fwNmncjHBg3+BMGMRINNh/hMw9rOncYGHPzgAc0iQUAvlolmUmwgVYQT9Ucw5BKr
YK5rF02mA4idIs0r2MszeOGJvtAf6zGRXP2Pv6GBvINsGVQLgTeY6jAX7BPnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUkaiiNNmcz5SgRrhC0XdCtG05J+EwHwYDVR0j
BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5
YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS
d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l
YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG
NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5TDHto6WhbOx9zFF1wgc
t3qjBpsu/p0uAenUEMrVOizmBfsxbZpkdvFxWrC4wOQmB85JocP99DKccnJieHwO
8qj9HRPwyNp77g053doytJb6Qx9CqpaBI2S3VxaRSuZFzgVw2JVAAW9MrlgAK8G/
S/9eqajAHt8cfh5vUN+CiR372YFTd3iG+L65J95CRV69s01UswDxXU16TVTxbb/R
xONibYxMbGQjBYacZ7pJDJmdW14mBjxvUunx9QQVAukeGk4+E99NQiwj+m4YaP09
G8BDNsclhOpgVD/m3SdxpNp6KLldWPhJOsGLsmBg1TQQSXp8OqnlVGb4AjV3293W
xw==
-----END CERTIFICATE-----
Generated at Thu Aug 21 15:33:21 2025 by rpki-client