Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: 8Q/nziYdxoUYI0yQuadcPcBr7E7Afxlnc9IgOYR++5k=
Subject key identifier: 04:5E:CD:B3:D5:57:77:FD:2B:D5:32:DA:B5:8D:18:91:23:1A:A4:54
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 5DEB9CBE17DD368A15FC17319FBD1564F3D5D770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 017E
Signing time: Sat 09 Aug 2025 13:48:32 +0000
Manifest this update: Sat 09 Aug 2025 13:43:32 +0000
Manifest next update: Mon 11 Aug 2025 17:45:32 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: BBIZD1IIMFxFKWZHv7tB+OSg98/dMSD4M0pBGf+B+b8=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:eb:9c:be:17:dd:36:8a:15:fc:17:31:9f:bd:15:64:f3:d5:d7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Aug 9 13:43:32 2025 GMT
Not After : Aug 11 17:45:32 2025 GMT
Subject: CN=045ECDB3D55777FD2BD532DAB58D1891231AA454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:9b:d9:4c:b9:60:80:68:49:b6:a5:e6:f6:
2d:3c:08:73:95:c5:ab:48:36:0f:38:ef:c0:2e:95:
34:6d:f5:a4:ac:04:b6:a0:b5:30:cd:ef:16:fa:68:
24:1e:df:87:6b:fa:dd:73:02:9c:ce:c0:f7:be:f2:
2a:b6:4c:b4:cb:03:e0:6b:9e:c3:bf:61:e6:8b:f1:
64:6c:06:a6:50:c0:d6:6b:78:34:f1:91:ab:d9:92:
32:dd:87:d5:82:56:c2:17:77:82:27:02:fc:75:71:
19:39:71:16:68:09:c3:e3:6e:ba:6e:1c:28:e5:5a:
70:87:d9:fd:24:18:b9:41:d0:67:fd:c9:ca:3e:05:
36:9d:06:ef:b3:af:44:8c:88:4b:1e:ff:7c:7c:04:
d6:cd:d2:06:fb:d9:d8:5d:d5:e1:7b:26:b2:44:b7:
56:62:13:8e:2d:98:db:c1:9d:e4:cd:2c:36:84:4d:
c9:59:ce:91:64:50:63:52:04:d4:c4:24:f3:6d:16:
b5:28:06:41:4a:b2:b1:de:14:ae:c1:ab:2b:e6:97:
6f:81:93:aa:5f:cc:5d:13:09:88:35:f2:68:57:4b:
81:4f:67:44:bb:7f:c6:37:86:7c:28:65:5e:4d:6f:
db:f4:39:d6:c1:8a:95:d1:2b:2b:b5:46:65:16:62:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:CD:B3:D5:57:77:FD:2B:D5:32:DA:B5:8D:18:91:23:1A:A4:54
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:d1:f7:8c:9a:98:bc:e4:70:42:0e:94:1f:b4:6b:9c:da:
91:df:73:60:62:61:29:c6:e7:51:5c:01:91:30:ca:07:4e:74:
25:fd:be:79:84:7f:63:1f:c3:33:7b:ed:52:5d:f0:ad:07:06:
0e:3d:a2:80:1f:b5:76:09:a4:0e:d2:3b:8b:9a:7e:9e:b1:71:
41:57:b3:3f:dc:9c:69:6f:17:eb:80:e2:a2:6c:45:16:3e:52:
28:01:7a:dc:ae:c1:3e:72:aa:ff:7a:2d:26:71:8d:84:d5:dc:
b8:24:86:eb:b6:d9:03:c7:53:74:65:f2:36:b1:ec:b4:01:0d:
69:9f:45:da:62:cb:db:fc:0f:9b:87:19:21:94:52:f1:65:bd:
03:ca:a1:44:4b:cd:99:48:26:b4:dc:5e:13:9d:e0:70:65:74:
9b:58:da:3b:bd:49:1a:6b:97:fc:f0:8a:f7:9f:da:47:c1:a4:
19:78:ab:11:4e:b5:2c:15:42:b6:7a:0c:18:3d:51:2f:b6:cf:
a5:e3:db:f4:87:5a:6e:6a:85:16:66:9d:88:e4:e1:61:e7:b6:
63:d1:4d:7c:8d:8d:08:b2:d0:53:4b:9c:ad:cb:fc:91:87:ce:
f5:78:e4:2c:eb:94:7c:e3:f2:00:9f:1c:00:9b:6c:26:f7:94:
31:0c:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:57:54 2025 by rpki-client