Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
File: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft (raw, json)
Hash identifier: N419X9JuS0ZF5yKlLWgvy6uVWKo6597450HdLkHsqCc=
Subject key identifier: BC:A0:41:B9:77:00:E5:0B:25:7C:BB:2B:39:EB:E4:76:4C:31:0D:D8
Authority key identifier: 1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
Certificate issuer: /CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Certificate serial: 063ED53664A0F46B994335D18410954F176748E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
Manifest number: 2E
Signing time: Thu 12 Jun 2025 21:51:42 +0000
Manifest this update: Thu 12 Jun 2025 21:46:42 +0000
Manifest next update: Sat 14 Jun 2025 00:59:42 +0000
Files and hashes: 1: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl (hash: OQghLQ0ZbxgXgmF+fUULVvYzwECfL862IwYJpSaVUYM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 00:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3e:d5:36:64:a0:f4:6b:99:43:35:d1:84:10:95:4f:17:67:48:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Validity
Not Before: Jun 12 21:46:42 2025 GMT
Not After : Jun 14 00:59:42 2025 GMT
Subject: CN=BCA041B97700E50B257CBB2B39EBE4764C310DD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:b8:ad:6d:7e:49:4d:99:37:a1:8b:87:7d:
98:84:1e:83:59:65:a7:e5:09:38:60:5c:91:d8:bc:
04:fd:81:82:b5:07:92:85:07:12:1a:33:5e:f1:3e:
f2:ff:88:8a:0e:cc:aa:ef:79:38:40:41:a0:17:12:
7e:de:7a:a6:e1:de:bf:98:0a:b4:91:f2:b7:21:78:
d2:22:ce:68:96:2a:f2:0c:fd:9c:a5:9b:f1:d9:7c:
0e:bc:5b:3e:97:fc:af:3d:93:09:83:ee:d8:89:39:
a7:ae:a3:0d:8b:97:f3:5b:78:7a:09:64:17:d0:e3:
7c:60:ca:55:5a:c9:31:4c:24:5a:a6:07:de:14:da:
6d:0c:58:50:b1:98:6c:91:79:08:ea:f8:f6:f3:2a:
26:d6:0e:de:81:5c:a3:bc:3a:ac:8e:db:51:e3:d2:
0d:78:80:03:82:12:51:6a:b3:a0:89:85:bc:fe:dd:
a1:b5:db:ce:7f:bf:0f:bd:59:3d:e1:91:5a:d2:c8:
db:39:33:82:7a:33:10:f3:49:16:0c:ec:e3:b3:1e:
5d:63:04:e5:84:b3:7c:c7:f4:41:a4:a8:a1:a7:dc:
8b:44:ea:01:f2:48:3a:84:de:5a:4b:b1:9d:ec:7f:
2b:3c:f7:0b:09:55:fb:44:b8:4b:c8:0e:a5:2f:21:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A0:41:B9:77:00:E5:0B:25:7C:BB:2B:39:EB:E4:76:4C:31:0D:D8
X509v3 Authority Key Identifier:
keyid:1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0b:dc:73:eb:82:28:19:0b:74:15:e4:d8:ec:4a:44:13:02:
9f:e5:cc:38:b6:ee:ee:cf:14:9c:1d:bc:1f:c7:b8:0a:1b:65:
1c:de:5f:b9:df:36:6f:c4:0f:9b:81:4c:44:88:af:55:da:f8:
10:84:06:1e:1b:5a:dd:46:e3:b6:08:1c:6d:ff:c0:f9:38:ed:
01:f5:4c:ab:80:3e:6d:e8:b2:e9:1e:75:ed:3c:5b:b4:db:a1:
c7:2c:3d:62:dd:7e:5d:c3:c3:99:48:f1:90:a8:87:ee:2a:4e:
26:d1:da:ad:5c:84:30:d8:ff:17:15:83:56:b9:18:f7:ee:ff:
28:35:d1:e0:65:cc:e0:db:67:e7:eb:b7:d6:10:64:db:7b:d8:
cf:23:f1:27:de:fc:a6:03:79:ea:01:30:0b:b7:3d:9d:78:e1:
5b:18:27:5c:af:71:98:48:dc:ef:16:6a:a7:2d:55:a0:1f:15:
20:14:c3:01:09:5c:4d:9a:e0:ad:13:02:de:0a:9d:8f:c7:45:
0c:2f:c6:41:15:64:1f:04:42:ed:db:52:47:ad:62:0b:da:64:
c1:0c:ef:53:90:1e:08:a4:51:ff:55:11:5b:c5:90:33:e9:cc:
93:75:f5:c8:ce:a4:b8:85:1c:63:64:0f:f4:74:69:e1:31:ce:
ff:7f:88:21
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBj7VNmSg9GuZQzXRhBCVTxdnSOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWFjNDZhYWZkMTVlZWUwYjFmZTYwNzJlNGYwZGRmMjcx
YzAzZWU1MTAeFw0yNTA2MTIyMTQ2NDJaFw0yNTA2MTQwMDU5NDJaMDMxMTAvBgNV
BAMTKEJDQTA0MUI5NzcwMEU1MEIyNTdDQkIyQjM5RUJFNDc2NEMzMTBERDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTLitbX5JTZk3oYuHfZiEHoNZ
ZaflCThgXJHYvAT9gYK1B5KFBxIaM17xPvL/iIoOzKrveThAQaAXEn7eeqbh3r+Y
CrSR8rcheNIizmiWKvIM/Zylm/HZfA68Wz6X/K89kwmD7tiJOaeuow2Ll/NbeHoJ
ZBfQ43xgylVayTFMJFqmB94U2m0MWFCxmGyReQjq+PbzKibWDt6BXKO8OqyO21Hj
0g14gAOCElFqs6CJhbz+3aG1285/vw+9WT3hkVrSyNs5M4J6MxDzSRYM7OOzHl1j
BOWEs3zH9EGkqKGn3ItE6gHySDqE3lpLsZ3sfys89wsJVftEuEvIDqUvIYxpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUvKBBuXcA5QslfLsrOevkdkwxDdgwHwYDVR0j
BBgwFoAUGsRqr9Fe7gsf5gcuTw3fJxwD7lEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWVhZjFmNmItMjA4MS00NjdhLTgwMzktZjFmOTY5YjRm
YjY2LzAvMUFDNDZBQUZEMTVFRUUwQjFGRTYwNzJFNEYwRERGMjcxQzAzRUU1MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dzUnFyOUZlN2dzZjVnY3VUdzNmSnh3
RDdsRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZWFmMWY2Yi0y
MDgxLTQ2N2EtODAzOS1mMWY5NjliNGZiNjYvMC8xQUM0NkFBRkQxNUVFRTBCMUZF
NjA3MkU0RjBEREYyNzFDMDNFRTUxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggvcc+uCKBkLdBXk2OxK
RBMCn+XMOLbu7s8UnB28H8e4ChtlHN5fud82b8QPm4FMRIivVdr4EIQGHhta3Ubj
tggcbf/A+TjtAfVMq4A+beiy6R517TxbtNuhxyw9Yt1+XcPDmUjxkKiH7ipOJtHa
rVyEMNj/FxWDVrkY9+7/KDXR4GXM4Ntn5+u31hBk23vYzyPxJ978pgN56gEwC7c9
nXjhWxgnXK9xmEjc7xZqpy1VoB8VIBTDAQlcTZrgrRMC3gqdj8dFDC/GQRVkHwRC
7dtSR61iC9pkwQzvU5AeCKRR/1URW8WQM+nMk3X1yM6kuIUcY2QP9HRp4THO/3+I
IQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:42 2025 by rpki-client