Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: XQIO8pHpBTYZEJeGKgGGhWNsLzQ6Vzq36Gv2f1xATJo=
Subject key identifier: 70:A1:BC:A7:7C:FB:6B:BC:A1:4E:E2:F3:D7:F1:C7:2E:AC:49:E8:6A
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 1E1F0B678E8D2064CCF2E0405E8C1426DD2B1536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 022A
Signing time: Wed 05 Nov 2025 05:05:47 +0000
Manifest this update: Wed 05 Nov 2025 05:00:47 +0000
Manifest next update: Fri 07 Nov 2025 07:21:47 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: F87xZL0JIf9cGhi0c8PtqYDGLy+lugdtpQ2Hhwon88Q=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1f:0b:67:8e:8d:20:64:cc:f2:e0:40:5e:8c:14:26:dd:2b:15:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Nov 5 05:00:47 2025 GMT
Not After : Nov 7 07:21:47 2025 GMT
Subject: CN=70A1BCA77CFB6BBCA14EE2F3D7F1C72EAC49E86A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:a5:05:2c:fa:5b:6a:84:4a:20:13:0c:5d:
c7:00:ae:9a:72:11:cf:d3:c9:60:31:24:01:b1:51:
26:70:a4:49:2b:ee:cc:67:33:ef:06:c9:a1:52:ec:
a5:13:ad:91:9f:8c:fe:6b:81:9f:00:76:57:f0:30:
6c:91:80:85:cc:78:12:06:27:83:3e:c2:62:a4:34:
9e:82:a4:54:5b:a5:75:f5:31:fa:0c:2c:66:33:e3:
4b:46:86:7b:66:89:7c:55:f9:7f:08:5b:ac:e6:35:
eb:e9:54:50:0e:0c:a1:6d:00:40:01:15:8c:65:cc:
be:e1:59:0d:b1:c8:90:ab:b5:b2:af:7d:82:95:ca:
9e:42:27:b9:61:c0:2b:96:11:84:a3:66:ff:57:8e:
35:5f:e1:62:3b:20:3c:67:89:cd:60:ff:83:55:3c:
3f:e1:23:1f:d8:b3:a4:1c:b9:6f:97:6f:e7:68:05:
7c:90:a7:ac:94:ed:32:62:d8:34:87:de:f7:1a:e6:
39:4a:ac:2a:a9:f9:0a:8a:d6:71:3a:5b:f5:68:ae:
2f:6b:38:11:8b:92:d5:4a:5e:56:dc:99:d9:80:b7:
61:39:ba:88:22:96:da:4d:a0:4e:33:4a:98:9b:f9:
55:30:17:78:1c:01:6a:59:ff:83:ce:66:15:4f:43:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A1:BC:A7:7C:FB:6B:BC:A1:4E:E2:F3:D7:F1:C7:2E:AC:49:E8:6A
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:91:69:f3:eb:52:47:a0:20:ff:c7:20:83:1a:c0:b3:7c:f0:
75:c6:b3:bd:b0:9e:59:d0:80:fc:e9:b1:9c:60:cf:66:bd:07:
73:bc:2b:1f:a0:c7:61:60:9f:4f:0b:b8:b8:7b:2f:89:c6:8b:
37:8c:1c:2f:69:b4:08:71:3c:b5:11:f9:11:57:4b:97:c8:c8:
e1:ab:71:c5:5e:52:46:e0:6f:d1:e8:d3:77:6d:50:6c:6a:56:
d3:28:44:0b:66:90:a1:e6:b4:41:ab:54:ef:2d:23:0c:d4:45:
20:5b:7f:b3:da:b3:6c:a8:89:c1:91:b5:63:40:77:19:15:1f:
03:84:6f:7d:24:17:89:fa:38:c6:41:c6:ca:6b:9a:32:13:85:
b1:06:3c:a5:df:1c:52:63:63:3e:ab:76:09:82:04:0d:60:a9:
a4:88:e8:c9:02:fb:d9:e4:64:a0:10:71:66:88:80:d7:ad:80:
a1:87:89:71:25:33:f1:18:3e:80:15:f6:5e:5f:8c:94:c6:b3:
a4:0d:74:0b:2f:7c:d6:c2:c9:fb:5a:82:fa:5e:66:57:01:f1:
e0:90:d9:25:2c:2c:c3:67:5c:ef:21:59:91:a9:5f:b9:0a:87:
09:d4:e0:83:00:75:18:32:44:ce:25:ae:b6:ee:c7:bc:90:15:
12:9d:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:04 2025 by rpki-client