Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: qZhAdUkV0hVZkfDYvuT4L69+Uc9OiHpGMQcfynq/0w8=
Subject key identifier: BA:E9:47:E4:37:22:4A:30:74:96:A3:65:04:BC:CD:4F:E7:91:3A:22
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 5F4899849138E1EA88B17CA54A35B1DB98CD39BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: B2
Signing time: Sat 07 Jun 2025 03:00:38 +0000
Manifest this update: Sat 07 Jun 2025 02:55:38 +0000
Manifest next update: Sun 08 Jun 2025 17:12:38 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: AVOixH5DrGadgU0tfP9qIap2EcWE4rrM3YXYM4zU0CM=)
2: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:48:99:84:91:38:e1:ea:88:b1:7c:a5:4a:35:b1:db:98:cd:39:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Jun 7 02:55:38 2025 GMT
Not After : Jun 8 17:12:38 2025 GMT
Subject: CN=BAE947E437224A307496A36504BCCD4FE7913A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:e2:d8:ca:60:59:cd:d7:2e:72:1b:eb:47:
84:e2:7c:fc:01:f9:8b:7f:cb:e5:57:32:8d:bc:b5:
32:7e:05:33:06:85:6d:14:5b:30:b9:84:d7:1d:9c:
dd:f6:35:4a:e2:9b:bc:60:eb:b3:73:b6:ea:b3:2f:
8b:07:fd:48:75:fb:12:dc:96:0c:98:b1:15:7c:b2:
30:2a:02:72:72:b4:b9:e5:11:e9:b5:b4:61:51:dd:
ee:0f:01:15:5e:16:ff:c3:b4:9f:78:53:e4:ae:5a:
7b:16:8d:a8:47:bb:5d:38:7e:d9:14:13:7f:8e:73:
64:b0:59:39:cd:0a:16:3f:45:7b:84:29:e3:f9:82:
7e:59:16:63:ce:b0:bb:3e:68:f8:26:19:77:a8:2f:
36:7f:1c:85:1a:15:26:07:a1:c2:e7:43:24:f2:6b:
50:5f:00:11:0f:4b:00:bb:8c:91:36:db:99:01:06:
00:45:84:1e:9d:5f:c6:2b:ff:57:12:d8:fb:38:2c:
ae:7c:df:16:ba:6e:3c:56:4a:1e:97:7e:fd:1d:85:
44:57:a5:96:a9:be:9e:b4:a7:a7:63:b1:7d:42:79:
89:b1:17:ba:5e:07:05:69:2f:d1:9f:3f:36:d0:5a:
c2:f8:bb:a2:88:65:a9:05:56:13:9c:fa:03:23:f4:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:47:E4:37:22:4A:30:74:96:A3:65:04:BC:CD:4F:E7:91:3A:22
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a1:66:b8:17:0c:a7:39:17:c3:b1:42:e9:d1:d0:80:f3:b6:
78:f1:c5:09:df:9e:59:73:23:9a:31:69:67:a0:db:41:ac:d6:
0d:4d:a6:d1:a8:79:da:31:5d:c7:20:af:65:4d:f5:99:d7:60:
a8:f9:af:52:62:fd:a0:75:90:21:50:be:c6:63:94:3f:7d:a2:
49:9f:c8:d9:f6:57:ac:ba:ee:ff:39:f2:50:c9:0f:d3:70:0d:
45:54:e3:9b:2c:8f:93:be:67:38:85:e5:cf:db:ae:75:54:2a:
17:7a:f0:09:4c:6b:93:18:5f:e9:4e:f2:1c:a0:36:ec:51:90:
ea:b4:e7:8c:1b:f6:29:af:4f:95:de:72:d3:c7:02:7e:64:57:
43:57:ce:4d:c4:8f:4f:54:1c:1a:22:e3:d8:e1:1d:00:ea:72:
2c:6b:1a:56:76:71:41:c7:63:26:1e:42:83:08:b0:33:94:db:
fb:65:46:7b:e2:00:a7:14:be:84:da:16:c1:92:be:8f:79:50:
ef:be:24:25:cc:2f:e9:0b:f4:d8:39:66:4a:0d:6f:f7:f1:38:
e6:e1:99:80:fd:ba:f4:48:fb:24:15:46:7e:45:75:41:20:76:
44:1b:9d:6b:26:55:c4:d7:c9:00:27:9f:6d:75:3c:78:ae:39:
b5:e9:35:c4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUX0iZhJE44eqIsXylSjWx25jNOb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz
NDcwNTRmZDAeFw0yNTA2MDcwMjU1MzhaFw0yNTA2MDgxNzEyMzhaMDMxMTAvBgNV
BAMTKEJBRTk0N0U0MzcyMjRBMzA3NDk2QTM2NTA0QkNDRDRGRTc5MTNBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6eLYymBZzdcuchvrR4TifPwB
+Yt/y+VXMo28tTJ+BTMGhW0UWzC5hNcdnN32NUrim7xg67NztuqzL4sH/Uh1+xLc
lgyYsRV8sjAqAnJytLnlEem1tGFR3e4PARVeFv/DtJ94U+SuWnsWjahHu104ftkU
E3+Oc2SwWTnNChY/RXuEKeP5gn5ZFmPOsLs+aPgmGXeoLzZ/HIUaFSYHocLnQyTy
a1BfABEPSwC7jJE225kBBgBFhB6dX8Yr/1cS2Ps4LK583xa6bjxWSh6Xfv0dhURX
pZapvp60p6djsX1CeYmxF7peBwVpL9GfPzbQWsL4u6KIZakFVhOc+gMj9D2tAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUuulH5DciSjB0lqNlBLzNT+eROiIwHwYDVR0j
BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5
YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS
d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l
YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG
NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqFmuBcMpzkXw7FC6dHQ
gPO2ePHFCd+eWXMjmjFpZ6DbQazWDU2m0ah52jFdxyCvZU31mddgqPmvUmL9oHWQ
IVC+xmOUP32iSZ/I2fZXrLru/znyUMkP03ANRVTjmyyPk75nOIXlz9uudVQqF3rw
CUxrkxhf6U7yHKA27FGQ6rTnjBv2Ka9Pld5y08cCfmRXQ1fOTcSPT1QcGiLj2OEd
AOpyLGsaVnZxQcdjJh5CgwiwM5Tb+2VGe+IApxS+hNoWwZK+j3lQ774kJcwv6Qv0
2DlmSg1v9/E45uGZgP269Ej7JBVGfkV1QSB2RBudayZVxNfJACefbXU8eK45tek1
xA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:54:31 2025 by rpki-client