Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: a0efdAjMEyuC31MsR/FpixzGuf9JCGmCkOo4gAZYJ5A=
Subject key identifier: D9:88:E9:D6:57:F3:37:F9:A4:73:E7:98:A3:73:68:E9:A7:DB:17:7B
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 672A0F4F4856F1A25509C9F27DBCC68E4BB75695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 0208
Signing time: Fri 06 Jun 2025 02:37:29 +0000
Manifest this update: Fri 06 Jun 2025 02:32:29 +0000
Manifest next update: Sat 07 Jun 2025 04:02:29 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: e6gKm2ScgbhH9HvbFubzLc9S1fQdB0qXnt+xeOcf7Mc=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 04:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2a:0f:4f:48:56:f1:a2:55:09:c9:f2:7d:bc:c6:8e:4b:b7:56:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Jun 6 02:32:29 2025 GMT
Not After : Jun 7 04:02:29 2025 GMT
Subject: CN=D988E9D657F337F9A473E798A37368E9A7DB177B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:ce:cd:b0:a6:39:50:38:21:84:7b:65:08:
61:71:d8:22:49:f7:b8:f7:00:33:05:60:d7:9e:4d:
91:c0:f7:28:b7:9d:a8:7e:7d:11:f1:a0:01:ef:ae:
dd:43:ce:49:38:2e:7c:24:de:6e:03:c2:76:a7:26:
ab:56:28:d8:1e:4a:6d:8d:84:1f:39:70:39:69:9a:
54:de:b1:26:37:df:4d:4d:f1:9b:99:08:7c:dc:23:
0b:1b:3b:9a:00:07:ba:cf:b0:ca:63:7a:27:d4:97:
af:59:23:50:a6:a8:29:8a:e8:54:66:5d:7b:f6:0c:
46:e2:67:ed:4b:e0:3d:e7:4b:53:75:1a:b3:f5:43:
97:65:19:a8:72:57:c3:0e:30:ee:ab:56:43:e5:c8:
a8:48:66:12:fb:46:77:f3:d7:e6:73:be:90:e4:93:
de:c2:85:f6:4a:4c:ae:d8:97:45:b6:52:89:02:4e:
78:20:37:ac:c5:72:39:dc:9a:b5:47:34:b4:33:3e:
62:71:6a:7f:f4:f3:29:b9:ba:6d:be:4b:df:57:b4:
9c:fc:eb:2c:8e:f9:dd:7e:6c:ca:ab:07:d5:9e:25:
d4:7a:03:a6:4c:38:5c:03:25:c0:11:60:be:64:21:
2d:e4:2d:04:d9:a2:a3:bd:c9:05:ba:d8:f9:42:a9:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:E9:D6:57:F3:37:F9:A4:73:E7:98:A3:73:68:E9:A7:DB:17:7B
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:94:ec:1e:da:04:44:f4:c6:b1:90:17:58:54:56:b1:ac:a4:
c1:ab:7c:27:6f:d4:81:3a:05:cf:7e:b9:88:12:44:7b:37:08:
ff:05:bf:50:42:3d:46:42:0a:eb:dd:0d:d0:c7:53:8a:55:83:
6e:fa:75:5d:23:1e:88:34:f9:b9:3c:26:01:4e:1d:e3:29:3e:
f2:0b:ca:ed:6d:e8:73:f4:56:1a:0c:81:f1:86:f2:ce:c5:20:
9f:3c:37:c9:d6:97:7d:51:04:b9:de:a2:c9:a5:34:9b:55:42:
13:ea:2f:ab:e4:7d:35:07:bd:02:0e:7a:b7:a6:32:0e:91:2e:
a8:77:a4:61:14:08:a2:c1:de:a4:92:ab:17:8e:2b:b2:38:ab:
3a:51:30:35:94:6a:d0:e7:73:65:ab:83:ab:c5:9a:58:d7:2e:
94:22:3d:0b:3a:ff:84:f6:45:02:7f:bd:9e:2d:2c:ca:0a:69:
fe:d6:23:82:8b:6d:1f:50:f2:03:7c:51:9c:17:41:76:64:47:
06:3b:86:be:b2:c8:6b:54:ce:2d:93:33:84:58:a6:99:be:5d:
ad:3d:46:e0:34:1f:3d:64:34:1e:07:cb:93:78:9e:b2:54:d6:
1e:e4:83:21:83:a1:46:26:d1:60:34:9a:77:1e:d3:8f:c9:c3:
0c:76:6a:0b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZyoPT0hW8aJVCcnyfbzGjku3VpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk5MzI4OWIxNjhhMzdkNDQ5YmMwZDQ0YjFhZDM1ZTUz
MjAyNWNmMTAeFw0yNTA2MDYwMjMyMjlaFw0yNTA2MDcwNDAyMjlaMDMxMTAvBgNV
BAMTKEQ5ODhFOUQ2NTdGMzM3RjlBNDczRTc5OEEzNzM2OEU5QTdEQjE3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEv87NsKY5UDghhHtlCGFx2CJJ
97j3ADMFYNeeTZHA9yi3nah+fRHxoAHvrt1Dzkk4Lnwk3m4DwnanJqtWKNgeSm2N
hB85cDlpmlTesSY3301N8ZuZCHzcIwsbO5oAB7rPsMpjeifUl69ZI1CmqCmK6FRm
XXv2DEbiZ+1L4D3nS1N1GrP1Q5dlGahyV8MOMO6rVkPlyKhIZhL7Rnfz1+ZzvpDk
k97ChfZKTK7Yl0W2UokCTnggN6zFcjncmrVHNLQzPmJxan/08ym5um2+S99XtJz8
6yyO+d1+bMqrB9WeJdR6A6ZMOFwDJcARYL5kIS3kLQTZoqO9yQW62PlCqeKnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2Yjp1lfzN/mkc+eYo3No6afbF3swHwYDVR0j
BBgwFoAUCZMomxaKN9RJvA1Esa015TICXPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNiZDJkMmUtZjQwZS00NzJlLTlmOGYtODk4NGZlYWFh
NWM3LzAvMDk5MzI4OUIxNjhBMzdENDQ5QkMwRDQ0QjFBRDM1RTUzMjAyNUNGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NaTW9teGFLTjlSSnZBMUVzYTAxNVRJ
Q1hQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2JkMmQyZS1m
NDBlLTQ3MmUtOWY4Zi04OTg0ZmVhYWE1YzcvMC8wOTkzMjg5QjE2OEEzN0Q0NDlC
QzBENDRCMUFEMzVFNTMyMDI1Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJTsHtoERPTGsZAXWFRW
saykwat8J2/UgToFz365iBJEezcI/wW/UEI9RkIK690N0MdTilWDbvp1XSMeiDT5
uTwmAU4d4yk+8gvK7W3oc/RWGgyB8YbyzsUgnzw3ydaXfVEEud6iyaU0m1VCE+ov
q+R9NQe9Ag56t6YyDpEuqHekYRQIosHepJKrF44rsjirOlEwNZRq0OdzZauDq8Wa
WNculCI9Czr/hPZFAn+9ni0sygpp/tYjgottH1DyA3xRnBdBdmRHBjuGvrLIa1TO
LZMzhFimmb5drT1G4DQfPWQ0HgfLk3ieslTWHuSDIYOhRibRYDSadx7Tj8nDDHZq
Cw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 22:18:42 2025 by rpki-client