Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: pXF8WQILrzPbvPyNcd14q7sHS3b9IPFWlHVT9BpZkMM=
Subject key identifier: EA:99:8B:87:D8:5B:86:D0:46:FD:FD:6A:EA:BF:65:7E:BB:0F:3C:FE
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 139DC31A5F7E46EEE25D4D571841669C81874843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0242
Signing time: Sat 14 Jun 2025 04:11:49 +0000
Manifest this update: Sat 14 Jun 2025 04:06:49 +0000
Manifest next update: Sun 15 Jun 2025 07:36:49 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 3tVd+V8Ikl3NbB6pSWSgbYeL8nY0jTEB9EUv20NMy2w=)
2: AS215828.asa (hash: oCe8lfkLRpbP1aezyZ0vYkeabSvW/l+xGg4D/nr874Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9d:c3:1a:5f:7e:46:ee:e2:5d:4d:57:18:41:66:9c:81:87:48:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Jun 14 04:06:49 2025 GMT
Not After : Jun 15 07:36:49 2025 GMT
Subject: CN=EA998B87D85B86D046FDFD6AEABF657EBB0F3CFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:42:1d:f5:69:52:3e:f4:7a:00:3d:3e:8c:
d5:50:6b:9e:ee:9d:76:8a:61:86:ba:a8:bb:68:47:
29:e7:6b:3e:ad:02:7c:55:1a:12:0e:05:61:3d:1a:
79:7e:6b:95:1f:45:10:4c:a1:d8:d0:cc:77:a1:0a:
cb:8c:d1:2d:7c:d1:37:1c:bc:ec:a7:bb:29:a8:e1:
7e:33:e9:3b:b2:cd:f8:b2:e7:0e:3f:d6:ec:d3:68:
53:2a:eb:43:cd:b7:a5:5c:dc:38:df:3c:d1:37:ee:
e2:b6:5b:b5:32:34:03:61:a3:51:c1:8b:c6:63:7e:
8d:71:8b:cd:6f:1c:78:b9:fe:14:7c:91:cc:ef:6a:
21:1f:e7:85:7b:74:82:ab:bf:23:97:23:42:73:42:
a1:dc:7e:e3:cc:06:da:4d:9f:15:ae:44:2a:86:85:
aa:42:10:07:a0:85:4a:c8:c4:97:58:a4:79:77:e0:
43:d1:a6:2a:63:56:44:be:78:ae:2d:a7:38:ee:61:
62:4f:28:67:7f:a2:a5:78:f4:3a:18:ca:6b:9f:df:
53:fc:db:82:49:12:f7:3b:0a:7d:79:f2:59:f9:26:
3d:a1:4c:57:ee:a6:83:fa:2c:d3:da:a5:b3:38:a8:
68:5e:de:1f:a3:16:6f:28:f5:49:38:31:ef:a0:1c:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:99:8B:87:D8:5B:86:D0:46:FD:FD:6A:EA:BF:65:7E:BB:0F:3C:FE
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:16:33:13:66:cd:c1:dd:cb:fd:5a:80:18:c9:0d:ab:06:
96:82:29:de:2b:0f:34:c5:f9:ee:c6:00:7e:94:7f:8f:67:97:
0a:de:25:2b:f3:3f:59:c1:c1:34:17:68:2c:0b:fa:94:6d:de:
50:c7:3e:08:e3:ac:f6:f1:f7:e5:b7:9e:17:5a:98:49:b8:6e:
6b:86:23:f1:00:b3:bc:49:be:8f:d6:0e:82:78:a0:06:61:56:
91:5a:a1:61:0a:38:4a:e7:65:88:4c:4c:9a:8b:0d:a5:e7:d4:
a2:3f:19:a0:da:f7:80:eb:86:da:06:96:a3:f5:98:aa:bc:d0:
bb:09:9d:fc:60:6a:86:3c:b5:d4:66:34:9c:0f:a2:8d:4f:00:
c4:13:df:1a:fc:dd:4d:94:f6:98:f5:b9:86:13:78:c8:f9:aa:
72:ab:56:ee:c1:25:16:09:d3:51:e8:bd:cf:68:2b:05:30:1e:
03:ae:b1:40:b4:04:20:f2:89:b3:ec:f4:27:66:e6:44:39:28:
71:35:b0:1b:12:c9:4e:71:9a:07:5f:91:21:67:3c:74:a9:97:
3d:a3:8e:b8:72:85:f0:37:a5:90:cf:b8:13:21:7b:a2:18:36:
f9:55:4b:3c:26:46:49:bb:c1:98:4a:f4:7b:2f:49:5c:46:6e:
b4:53:af:cf
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUE53DGl9+Ru7iXU1XGEFmnIGHSEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNTA2MTQwNDA2NDlaFw0yNTA2MTUwNzM2NDlaMDMxMTAvBgNV
BAMTKEVBOTk4Qjg3RDg1Qjg2RDA0NkZERkQ2QUVBQkY2NTdFQkIwRjNDRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtkId9WlSPvR6AD0+jNVQa57u
nXaKYYa6qLtoRynnaz6tAnxVGhIOBWE9Gnl+a5UfRRBModjQzHehCsuM0S180Tcc
vOynuymo4X4z6Tuyzfiy5w4/1uzTaFMq60PNt6Vc3DjfPNE37uK2W7UyNANho1HB
i8Zjfo1xi81vHHi5/hR8kczvaiEf54V7dIKrvyOXI0JzQqHcfuPMBtpNnxWuRCqG
hapCEAeghUrIxJdYpHl34EPRpipjVkS+eK4tpzjuYWJPKGd/oqV49DoYymuf31P8
24JJEvc7Cn158ln5Jj2hTFfupoP6LNPapbM4qGhe3h+jFm8o9Uk4Me+gHLwTAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU6pmLh9hbhtBG/f1q6r9lfrsPPP4wHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE
M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzoWMxNmzcHdy/1agBjJ
DasGloIp3isPNMX57sYAfpR/j2eXCt4lK/M/WcHBNBdoLAv6lG3eUMc+COOs9vH3
5beeF1qYSbhua4Yj8QCzvEm+j9YOgnigBmFWkVqhYQo4SudliExMmosNpefUoj8Z
oNr3gOuG2gaWo/WYqrzQuwmd/GBqhjy11GY0nA+ijU8AxBPfGvzdTZT2mPW5hhN4
yPmqcqtW7sElFgnTUei9z2grBTAeA66xQLQEIPKJs+z0J2bmRDkocTWwGxLJTnGa
B1+RIWc8dKmXPaOOuHKF8DelkM+4EyF7ohg2+VVLPCZGSbvBmEr0ey9JXEZutFOv
zw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:39 2025 by rpki-client