Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: 9tdbstS5Fq4pw1HTCI0Md4u26Qx+59DwjcrUOGWvdGU=
Subject key identifier: B6:A5:7A:19:0B:F7:4B:06:33:43:DC:1B:9B:15:64:03:C5:6D:3A:EB
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 442A57FAE13ED011F3FDA1AFBA1AB4CA5B6051FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: 5A
Signing time: Sat 09 Aug 2025 04:53:46 +0000
Manifest this update: Sat 09 Aug 2025 04:48:46 +0000
Manifest next update: Sun 10 Aug 2025 06:58:46 +0000
Files and hashes: 1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: xZ43DYruw4498C0Z3CPAIiDONIYZadwSHVUfxJ86XRE=)
2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2a:57:fa:e1:3e:d0:11:f3:fd:a1:af:ba:1a:b4:ca:5b:60:51:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: Aug 9 04:48:46 2025 GMT
Not After : Aug 10 06:58:46 2025 GMT
Subject: CN=B6A57A190BF74B063343DC1B9B156403C56D3AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:f4:2f:c8:8e:0c:08:11:0e:c3:cf:10:95:
45:61:c0:a6:fc:cd:ea:9f:e7:43:9f:a4:d6:57:f9:
16:be:ec:3d:e9:1a:84:61:7f:81:e8:54:f7:ba:cf:
fb:e3:e5:31:e4:27:ee:f8:d4:cb:b9:b5:33:f2:53:
44:2d:51:1f:77:9c:38:eb:85:c8:b1:6b:95:ad:13:
25:6b:1a:81:a1:a0:97:ca:5e:33:0d:03:fd:96:eb:
e0:6d:e2:6d:cb:1d:5f:5c:8b:74:b9:c2:2e:3d:c0:
b4:7a:3b:f3:c5:b3:37:46:7d:e6:0e:a9:55:34:48:
01:ed:56:4b:a8:60:37:fa:87:f5:1e:5a:65:5f:96:
63:53:99:53:8a:71:70:58:c4:e5:d7:32:ff:8c:ee:
9e:d3:58:63:00:5c:2f:5d:f7:83:8e:fe:10:a0:3d:
0b:6f:98:bf:d9:c1:5d:b6:db:9a:73:60:89:a4:a1:
82:5c:fa:3f:93:14:39:ec:15:63:89:4c:e0:9f:a5:
a1:bc:a7:87:83:a1:72:b1:58:b1:64:06:e2:34:6b:
2f:9e:9d:8f:06:98:ac:cb:79:5d:32:f0:78:9c:e4:
e6:1b:c9:2b:0b:03:a1:a6:57:5b:df:32:a6:4c:4d:
ee:37:3f:27:99:23:ec:64:6d:a1:ae:74:98:c7:66:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A5:7A:19:0B:F7:4B:06:33:43:DC:1B:9B:15:64:03:C5:6D:3A:EB
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d4:1f:af:c6:e8:d2:b9:05:11:c3:23:14:c9:d7:b1:da:09:
9f:77:35:bc:8d:c6:e1:78:de:4d:5d:74:a4:8f:e6:fe:bb:ac:
39:16:05:d5:2c:19:d0:5f:ba:c2:a4:76:ec:9e:3e:9c:9a:15:
1b:16:30:15:14:57:49:0c:ac:14:d2:db:bf:8b:51:fe:c9:ba:
63:19:1b:61:fe:3f:16:88:41:11:e2:e2:04:03:c3:7f:c2:79:
99:2f:c9:c5:29:a3:ff:62:6e:2e:37:75:5e:d3:e6:02:a5:3b:
52:e2:a7:aa:0f:f7:ee:7b:fa:2e:27:9e:c8:29:7d:40:6e:af:
f4:cc:28:f8:51:e8:a0:91:21:6d:a8:86:f9:9f:a3:1a:c8:3f:
b8:7c:a4:25:3f:ca:c7:1c:c9:5d:9b:82:80:ba:f1:81:4a:91:
b0:b9:11:96:11:9e:23:27:84:9e:05:d9:5c:7d:92:1c:62:09:
07:4d:a3:7e:d0:f6:49:9b:0c:2f:98:ea:b3:7e:fd:a0:88:ec:
f5:5e:d9:0b:65:5c:07:90:f3:50:04:7f:85:93:37:d4:c7:1c:
9c:57:c3:a4:cb:22:97:92:94:41:ee:ae:67:db:65:36:44:f8:
97:26:57:7a:aa:94:15:29:13:13:5c:e5:83:13:07:ae:04:02:
7c:bd:ea:6e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURCpX+uE+0BHz/aGvuhq0yltgUfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA4YzQ4YjlhNjQwYzE0YzYxYWFkNDM5YWIxZmM0NGZh
MmE0MTRlYTAeFw0yNTA4MDkwNDQ4NDZaFw0yNTA4MTAwNjU4NDZaMDMxMTAvBgNV
BAMTKEI2QTU3QTE5MEJGNzRCMDYzMzQzREMxQjlCMTU2NDAzQzU2RDNBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJt/QvyI4MCBEOw88QlUVhwKb8
zeqf50OfpNZX+Ra+7D3pGoRhf4HoVPe6z/vj5THkJ+741Mu5tTPyU0QtUR93nDjr
hcixa5WtEyVrGoGhoJfKXjMNA/2W6+Bt4m3LHV9ci3S5wi49wLR6O/PFszdGfeYO
qVU0SAHtVkuoYDf6h/UeWmVflmNTmVOKcXBYxOXXMv+M7p7TWGMAXC9d94OO/hCg
PQtvmL/ZwV2225pzYImkoYJc+j+TFDnsFWOJTOCfpaG8p4eDoXKxWLFkBuI0ay+e
nY8GmKzLeV0y8Hic5OYbySsLA6GmV1vfMqZMTe43PyeZI+xkbaGudJjHZr7ZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtqV6GQv3SwYzQ9wbmxVkA8VtOuswHwYDVR0j
BBgwFoAUYIxIuaZAwUxhqtQ5qx/ET6KkFOowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1
NTU2LzAvNjA4QzQ4QjlBNjQwQzE0QzYxQUFENDM5QUIxRkM0NEZBMkE0MTRFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lJeEl1YVpBd1V4aHF0UTVxeF9FVDZL
a0ZPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQ2MDUyOS02
OTkyLTRmYzUtOGExNy01MjViNmIyNzU1NTYvMC82MDhDNDhCOUE2NDBDMTRDNjFB
QUQ0MzlBQjFGQzQ0RkEyQTQxNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtQfr8bo0rkFEcMjFMnX
sdoJn3c1vI3G4XjeTV10pI/m/rusORYF1SwZ0F+6wqR27J4+nJoVGxYwFRRXSQys
FNLbv4tR/sm6YxkbYf4/FohBEeLiBAPDf8J5mS/JxSmj/2JuLjd1XtPmAqU7UuKn
qg/37nv6LieeyCl9QG6v9Mwo+FHooJEhbaiG+Z+jGsg/uHykJT/KxxzJXZuCgLrx
gUqRsLkRlhGeIyeEngXZXH2SHGIJB02jftD2SZsML5jqs379oIjs9V7ZC2VcB5Dz
UAR/hZM31MccnFfDpMsil5KUQe6uZ9tlNkT4lyZXeqqUFSkTE1zlgxMHrgQCfL3q
bg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:15:47 2025 by rpki-client