
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier: lkAFsS0QlXyZom+APKPKVjdYSuJ6TrtJs/Qw0Dd4o8E=
Subject key identifier: AF:F6:79:50:3B:D9:15:AD:F3:36:96:A7:95:5D:28:3E:09:45:A1:EB
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer: /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial: 30763DE2200DCBA03EBCD90FF5D093813DD72738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number: 0195
Signing time: Fri 13 Jun 2025 20:12:35 +0000
Manifest this update: Fri 13 Jun 2025 20:07:35 +0000
Manifest next update: Sat 14 Jun 2025 23:31:35 +0000
Files and hashes: 1: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: GtWBkj4uv+3mwia3df0fok0cCtQP7HB4wmk87Mu/rNw=)
2: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: cdfMKTJdIDROnWRX3ePB7aEvma9a4XSp/cOBrzuz6w0=)
3: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: cAb30fVqTd8++M4lv8QD26BvmJIcWc1fy7zzqGZ9Hbs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:76:3d:e2:20:0d:cb:a0:3e:bc:d9:0f:f5:d0:93:81:3d:d7:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Validity
Not Before: Jun 13 20:07:35 2025 GMT
Not After : Jun 14 23:31:35 2025 GMT
Subject: CN=AFF679503BD915ADF33696A7955D283E0945A1EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:82:83:e5:ea:07:a0:2e:de:f6:ea:23:36:6d:
15:ad:2f:0c:7c:21:54:fa:c2:b9:0c:0b:58:7e:5c:
cb:9e:44:50:69:b9:9f:5b:dd:54:f4:2e:f9:70:ee:
5a:d9:ea:8d:86:95:59:8e:20:b3:c4:04:b7:2b:c0:
db:3e:92:25:c5:20:b3:ff:2f:6f:fd:54:30:a3:1a:
25:b9:86:d8:38:d7:a8:4d:5e:35:a1:5e:82:be:e2:
a9:ae:d0:75:3b:53:6c:ed:4c:de:87:e6:1e:25:55:
d8:01:04:64:88:b1:bd:46:07:70:2f:ef:64:1a:d1:
37:08:47:94:71:9e:84:16:ee:3c:9c:80:63:e4:69:
3c:df:58:c4:d0:5c:3d:69:87:3d:e0:83:c5:2d:9c:
29:da:2f:01:5b:5d:13:07:aa:cc:49:e2:0d:5b:de:
54:92:03:55:ca:29:03:82:5d:15:79:16:6b:1c:54:
e6:b0:9a:77:5a:42:44:4c:7c:0b:54:22:46:02:4b:
72:01:5e:19:63:27:9f:df:39:82:a7:91:5a:1a:92:
75:89:ca:75:24:d3:c1:7e:3c:11:30:74:2c:09:57:
ce:b2:24:1d:91:2b:c2:6b:f1:b9:b3:f4:bc:6f:de:
90:fc:4e:1d:b2:8d:9a:0a:47:3f:0e:f0:90:64:ea:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:79:50:3B:D9:15:AD:F3:36:96:A7:95:5D:28:3E:09:45:A1:EB
X509v3 Authority Key Identifier:
keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:67:2d:bc:f4:b6:3b:7b:6a:a4:dd:79:f2:8b:f2:84:0e:05:
88:79:a8:7f:3f:3a:9a:4b:88:fc:0f:8b:9f:5b:fa:85:01:e4:
1d:49:85:62:74:68:e2:57:03:9c:55:ec:64:1d:97:2f:99:fa:
e3:02:6f:a9:f6:ba:e6:1a:72:f3:45:d6:74:59:90:05:23:b8:
9a:df:e1:84:06:97:9c:50:99:04:10:1a:d6:c6:d5:9f:38:b7:
ae:b7:5b:3e:f3:61:ca:70:2b:dc:56:5c:a6:5e:df:b5:25:14:
4c:d1:43:3c:74:ef:d7:8e:0a:20:47:a3:0d:f7:db:ac:6b:3f:
e7:92:fe:e0:83:e7:ca:9a:07:76:0b:1d:2d:23:70:64:e5:1c:
fd:f9:cb:dc:1c:42:25:96:47:14:3a:44:c9:14:9a:c5:a5:1d:
ee:0b:44:a1:e6:85:26:d4:22:2a:57:7a:7c:63:46:10:25:75:
6d:ab:31:c3:d9:d2:12:46:e3:98:60:54:1f:ed:bc:42:24:4b:
0c:6a:c6:0d:6c:32:a7:d3:5f:9b:8a:9c:60:fa:34:eb:e1:1c:
3f:ca:a0:27:84:b3:16:cb:63:80:7e:44:a4:b6:fe:0b:e1:8c:
db:67:1b:76:e2:85:c9:36:80:d0:df:a7:5a:39:89:fb:84:a2:
f0:30:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:37 2025 by rpki-client