Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier: JK5weLTFgdCPx6kDujS49AZTofx20qG/FGMkzRfk+n0=
Subject key identifier: 62:64:ED:AB:9F:97:D3:48:AD:0C:F6:62:E8:24:9E:17:08:54:5F:37
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial: 4D9F31630A04ACABAC97715FA00B7DFF1410D2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number: 01DB
Signing time: Tue 05 Aug 2025 02:59:20 +0000
Manifest this update: Tue 05 Aug 2025 02:54:20 +0000
Manifest next update: Wed 06 Aug 2025 03:42:20 +0000
Files and hashes: 1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: j8UD7N6Qs3k+2pH6wa9HxsP9c5QUiGJz2l6wvkX/xgY=)
2: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 03:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9f:31:63:0a:04:ac:ab:ac:97:71:5f:a0:0b:7d:ff:14:10:d2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
Validity
Not Before: Aug 5 02:54:20 2025 GMT
Not After : Aug 6 03:42:20 2025 GMT
Subject: CN=6264EDAB9F97D348AD0CF662E8249E1708545F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:12:b9:17:26:f6:9e:37:ae:99:b2:21:8b:
89:31:26:9a:e8:b2:e1:bb:93:23:dd:d4:6f:42:38:
7f:2c:d2:f9:fc:a6:eb:d3:db:21:f6:16:6d:f5:5e:
b0:94:5d:14:fe:72:f4:a4:5c:5d:c6:20:01:c4:99:
2f:d4:c0:0c:c2:19:8a:5e:67:0a:ee:48:67:e5:3a:
6a:6f:01:9b:eb:be:de:3e:f9:bd:6b:c1:86:ae:cd:
61:80:ae:0b:21:6c:0e:33:63:04:c3:f0:fc:33:06:
f3:1f:36:d9:54:eb:ab:04:79:c3:b2:ee:9a:04:0e:
8f:a1:51:fd:f9:56:2e:32:f7:06:2b:e0:05:56:69:
b4:3b:69:81:e4:4d:8c:1c:d3:3e:2c:f2:42:bf:25:
59:bc:a5:1f:ec:ec:05:13:b9:27:1f:02:18:68:d7:
bb:e0:21:a4:b8:4f:c0:2d:57:82:28:c8:6e:79:d8:
3c:10:36:36:f7:10:cc:77:b3:22:a2:af:4d:02:90:
c3:80:00:f4:1e:fd:c0:63:4f:03:2e:77:35:08:95:
d4:fe:88:a1:39:4d:46:f7:b2:81:78:16:48:da:78:
9d:09:06:dc:49:01:29:48:fb:e7:44:75:7a:74:0c:
29:8c:f8:06:ec:30:c2:b4:85:d2:d1:71:8f:89:2b:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:ED:AB:9F:97:D3:48:AD:0C:F6:62:E8:24:9E:17:08:54:5F:37
X509v3 Authority Key Identifier:
keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:ef:95:bb:30:71:e9:8d:11:f3:12:89:35:f4:5e:ba:28:
8c:22:cd:d4:36:1a:ba:73:99:44:28:94:ce:38:0e:9a:fe:7a:
ba:32:38:f4:c7:56:3f:a3:d3:34:c2:3f:64:fa:d3:ce:f9:50:
c2:00:19:87:51:ca:90:ed:e5:5a:ad:e4:52:eb:f6:20:a2:d7:
b5:95:cc:4b:06:f2:36:d8:66:04:e8:05:f3:9f:6b:5b:96:f3:
89:5a:0a:6f:d7:5b:b7:06:8f:55:3f:15:a5:29:0d:cf:89:cb:
c2:4c:1e:26:4b:78:8d:7e:66:0e:a7:e3:1b:42:84:5e:9e:87:
56:e3:58:6e:b9:09:84:42:6c:ca:2c:20:21:dd:28:20:92:3f:
1f:13:1c:54:2d:10:1e:16:3c:e3:b0:de:8d:9c:ee:35:da:90:
e2:99:3c:23:73:35:7d:49:ef:54:66:09:fd:d9:13:59:68:2c:
8c:ba:49:85:d8:a1:30:8d:51:9d:3b:62:1b:f2:e7:52:76:25:
12:ca:22:60:65:0a:53:5d:56:1c:35:a5:2c:10:8d:ad:c6:d2:
77:9b:cb:0f:23:a9:16:60:66:4a:4c:ab:78:6e:2b:74:91:5e:
1a:5b:7e:a6:90:de:9e:cc:d0:63:0d:a1:51:25:cc:8c:50:5b:
f9:de:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:21 2025 by rpki-client