Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: YWcZPGpZs63q0qV98XKXWUhx1rwDJxwrBDwcmstFrvk=
Subject key identifier: D4:DC:47:F5:84:06:00:3E:9A:26:90:F9:E2:C9:ED:16:F8:2A:32:AC
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 729FCEE600D4ABBEAB9F97693F8277FD9B9C0015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: E6
Signing time: Fri 02 May 2025 16:34:17 +0000
Manifest this update: Fri 02 May 2025 16:29:17 +0000
Manifest next update: Sun 04 May 2025 17:26:17 +0000
Files and hashes: 1: AS209735.asa (hash: LH39xuFInQIUN2uaAZuKOVXU5e6fBODPhrhpjvBdNYs=)
2: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: D9F2mXojqpQE+1oluLX9NV24Tb5hIoXxYKfg2tpRSAA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9f:ce:e6:00:d4:ab:be:ab:9f:97:69:3f:82:77:fd:9b:9c:00:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: May 2 16:29:17 2025 GMT
Not After : May 4 17:26:17 2025 GMT
Subject: CN=D4DC47F58406003E9A2690F9E2C9ED16F82A32AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2e:38:c9:d4:6c:a4:61:0a:93:f3:d0:94:ed:
95:0d:ce:e0:e3:8f:78:83:75:ac:f6:b7:dc:2c:7e:
40:fe:0c:1b:1a:98:af:91:ad:e4:2a:15:07:3a:24:
e0:4b:d9:ce:d5:22:8c:e7:17:00:01:94:4e:ec:d5:
3d:17:3b:25:e9:fb:7d:41:45:b1:ce:53:f9:69:d1:
b4:79:71:47:ef:32:66:29:9d:dd:08:16:5e:62:1f:
bb:60:46:d9:dd:ad:9f:53:9e:bf:16:59:d9:a9:72:
39:0c:66:e8:fb:eb:94:6d:95:47:26:03:4b:ba:c0:
51:d8:cd:d4:29:00:20:ec:3f:c8:3f:7f:ba:f0:0e:
20:28:fc:16:54:2a:2e:64:6b:5c:57:cb:63:7d:f8:
8b:23:ad:63:05:14:0d:42:26:25:44:ba:c6:28:bb:
d5:04:ab:bd:84:3f:08:5e:d8:b0:71:67:76:3e:2d:
bc:e6:d2:3b:54:16:d6:1b:ec:b4:f3:1d:f6:99:9e:
0a:ea:a6:c0:be:ec:7d:79:16:ce:ca:df:bc:be:b4:
72:9f:27:12:39:02:d5:dc:16:bd:75:d0:a0:70:a4:
f0:62:67:d2:eb:7d:0e:9f:94:19:43:cd:d4:71:61:
d1:d4:1f:24:25:8e:97:08:8c:30:af:33:59:68:0c:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:47:F5:84:06:00:3E:9A:26:90:F9:E2:C9:ED:16:F8:2A:32:AC
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:d1:29:4e:d8:b5:ee:79:9c:48:94:85:05:a3:18:d8:cb:
61:90:d3:dc:cd:86:a6:84:e9:68:44:ee:a5:c5:ce:c1:46:24:
b0:90:57:9c:d0:50:44:d7:b8:1d:d7:1d:3c:4b:de:2e:37:e7:
bf:9e:27:ba:94:7e:42:8e:ea:db:1f:0d:a8:77:c7:ec:b9:2e:
51:a6:9c:bc:e3:fe:fd:2a:68:ff:dc:d1:6b:08:0e:6a:08:a0:
f9:e7:8e:e2:13:7c:e8:8c:7c:4d:43:a2:4f:56:19:32:c5:b9:
90:18:67:51:6b:18:c9:54:a5:32:19:a6:c8:f9:1d:a7:1c:2c:
8f:b4:9b:3a:3b:74:7a:bb:95:ba:29:58:69:72:f9:91:ff:0f:
11:7a:94:8c:c9:4b:79:5d:21:c5:d1:58:07:1b:f1:f7:d2:1a:
bc:4f:6e:72:45:55:84:87:d0:b5:94:7a:09:59:46:f4:47:d1:
45:6a:0e:50:0b:d3:74:cb:e6:df:51:76:34:b6:e0:51:5e:bd:
5d:fd:ae:8f:62:03:8f:1f:e9:b1:1b:4b:3d:1e:98:5a:82:dd:
dc:66:b0:c2:d5:12:9d:28:4b:2b:33:60:30:af:26:c5:0e:02:
ec:2a:38:7d:d2:aa:1e:89:9b:70:46:05:6b:40:18:3e:c4:4b:
9c:50:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:47:41 2025 by rpki-client