Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
File: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft (raw, json)
Hash identifier: HxwDnc3bhesxrl9ZHU6m2JdOv7nPTFu0Ul+7JbkSe/k=
Subject key identifier: F4:C5:B2:9D:D9:B6:97:EA:3E:CE:68:FF:B7:29:A5:A3:46:47:75:55
Authority key identifier: 4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
Certificate issuer: /CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Certificate serial: 296BCFD07AE82A2EEC431F4ED60D7C3EE9CA18D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
Manifest number: CD
Signing time: Fri 13 Jun 2025 16:29:30 +0000
Manifest this update: Fri 13 Jun 2025 16:24:30 +0000
Manifest next update: Sat 14 Jun 2025 20:23:30 +0000
Files and hashes: 1: AS213915.asa (hash: WNoePLBPk99sollnieSJLQGheEbE8N7gHweNXQmzvJc=)
2: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl (hash: 9Nl8KeGS7onl0NSJOXN11Uti5o/WN04WrhDPNkgr5kk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 20:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6b:cf:d0:7a:e8:2a:2e:ec:43:1f:4e:d6:0d:7c:3e:e9:ca:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Validity
Not Before: Jun 13 16:24:30 2025 GMT
Not After : Jun 14 20:23:30 2025 GMT
Subject: CN=F4C5B29DD9B697EA3ECE68FFB729A5A346477555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:5b:77:a8:8f:14:87:2d:50:17:43:e7:95:
ae:6c:f6:b5:26:6c:a9:c7:e2:0f:c4:4a:aa:8c:1c:
16:0a:6e:e8:a7:1b:b7:95:9c:f4:f9:9b:fc:09:52:
41:4e:2e:f9:66:d8:f6:67:59:64:47:30:3b:c4:b4:
19:ea:01:74:49:84:8d:e9:ab:de:b5:a4:0a:1f:71:
1e:8c:ae:67:a0:3f:3e:d3:8c:63:cb:c5:c8:26:55:
aa:80:b9:77:c9:f4:4f:17:02:fd:a6:e5:40:6d:39:
69:ed:b4:3d:f2:57:7a:a4:61:9a:16:6d:7a:7a:14:
51:94:38:57:b1:a5:28:55:13:fc:38:75:46:d4:60:
aa:8d:cc:b4:55:f6:28:0c:d4:89:ef:f5:98:9c:44:
81:15:50:c4:8f:9f:a4:ca:6a:99:31:df:5f:20:0c:
d7:80:62:2f:45:4d:44:f5:73:0a:b9:46:27:20:62:
b3:6b:47:d5:1d:c2:80:61:22:c8:94:a8:de:48:a5:
90:5e:64:19:60:0b:80:b8:4e:22:e2:f3:2b:eb:64:
54:49:4b:a7:fb:3b:a7:e9:c4:6d:ce:18:1b:9a:8a:
8d:45:25:b6:ca:a0:77:53:b0:39:79:83:fa:9a:79:
2f:43:77:11:0d:d8:4d:6f:02:a2:ee:56:9c:e3:3c:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C5:B2:9D:D9:B6:97:EA:3E:CE:68:FF:B7:29:A5:A3:46:47:75:55
X509v3 Authority Key Identifier:
keyid:4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:be:e4:8b:63:17:e3:ec:db:d6:0c:6e:80:98:e6:fb:6c:58:
18:9b:94:8e:2a:50:0f:2d:0a:2d:d2:e5:03:01:0a:31:20:1b:
b4:b4:9e:1b:b8:4c:0b:6b:52:9b:1e:ac:fd:6a:ea:c8:62:ef:
00:d0:9a:2b:fe:32:fc:40:b3:44:81:7f:61:d4:06:20:3b:b7:
fa:7a:87:30:15:c8:51:61:bc:3a:78:1a:81:53:15:6d:ff:17:
dc:4a:fb:75:e7:66:86:c4:75:2b:94:69:13:d5:78:06:7b:83:
e1:c9:1a:45:0f:59:4b:d7:01:94:dc:f3:4f:e9:90:59:cb:fc:
b1:2d:b2:b7:02:1a:21:d0:15:86:c0:61:14:a2:74:41:ff:c4:
4a:1c:1f:d0:d9:0c:21:b4:3c:ec:9e:ef:7f:18:c1:c8:a5:21:
c0:38:fb:7e:14:cd:98:e2:21:1e:7b:ea:a0:89:a5:68:de:f5:
8e:eb:c8:68:61:f8:01:0b:ac:d0:86:b9:5c:64:1d:61:e9:6c:
0f:cc:46:bb:21:23:d2:21:44:a5:03:d1:42:0d:1e:ff:2a:02:
e4:54:5d:35:9a:4e:e5:ac:b4:be:fe:1d:0b:ce:1f:2f:72:fe:
d3:4d:86:1e:0d:64:2d:53:7b:ee:53:36:af:67:d6:b8:ee:69:
0d:12:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:53:22 2025 by rpki-client