
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: 2JnfHIes0VYEv4RL8SxZG/XMLpygj7RoRypRZix0xOE=
Subject key identifier: 64:8B:44:FA:B4:BC:76:66:F0:DA:C4:53:16:E7:8C:EF:B8:33:D2:E0
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 14C273ECA725444B6A18A889C73126CF6A72291B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0117
Signing time: Tue 05 Aug 2025 13:51:51 +0000
Manifest this update: Tue 05 Aug 2025 13:46:51 +0000
Manifest next update: Thu 07 Aug 2025 03:04:51 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 6WfGP55e4OgO3HtEx/GLTLNWGKOy/3+seCA7EE/qkmg=)
2: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c2:73:ec:a7:25:44:4b:6a:18:a8:89:c7:31:26:cf:6a:72:29:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Aug 5 13:46:51 2025 GMT
Not After : Aug 7 03:04:51 2025 GMT
Subject: CN=648B44FAB4BC7666F0DAC45316E78CEFB833D2E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:df:c1:9a:9a:b5:79:0f:ef:b4:30:47:b4:
37:c0:51:3b:7b:47:25:0c:78:4e:46:27:34:7d:0f:
c0:a3:fb:03:ea:7e:8a:17:dd:d5:7f:b4:db:b8:be:
61:f4:b1:3b:48:94:07:c9:a2:aa:ff:38:4c:99:d1:
81:50:7c:ac:87:d5:27:a4:dc:a6:82:dd:65:01:27:
55:f9:1f:68:cb:d2:20:cb:35:3d:d4:da:42:4e:13:
16:98:cc:cc:bc:0a:c9:8d:dc:f9:3a:63:69:b4:bb:
6c:7b:4d:3a:fc:28:fd:65:ea:6a:de:49:f6:9b:da:
4b:d3:d9:65:32:69:12:6a:fe:1c:27:99:cc:cd:17:
3a:8c:48:85:31:e2:c1:0f:c2:df:a8:bc:50:cd:56:
f6:83:22:3e:1d:ee:e0:3b:66:6a:ff:ea:03:4f:a5:
b7:ab:9a:98:f9:e5:29:3e:1b:31:8b:ef:17:45:f8:
7c:8f:8b:bc:72:bc:9d:00:b8:07:8b:94:3c:cd:5f:
ea:75:0c:b4:a2:b1:7a:33:53:6b:2d:06:62:08:0e:
72:10:b7:4e:57:7b:38:87:34:53:78:12:10:82:f8:
a4:c9:f4:12:4b:e4:b4:e8:44:a8:6e:38:7f:43:a6:
ac:1a:49:08:27:0e:f4:a1:35:55:0b:a9:1b:8f:d1:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:44:FA:B4:BC:76:66:F0:DA:C4:53:16:E7:8C:EF:B8:33:D2:E0
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:22:dd:e0:ce:6b:1a:98:9a:90:c2:4d:ea:f1:e3:63:ee:41:
c2:be:b4:be:40:b3:7e:af:f9:86:64:c7:39:ea:1e:28:96:b6:
d2:86:03:2d:c9:bf:a4:db:10:f5:9d:d0:bf:61:07:89:77:0d:
03:a2:9d:a8:a4:0a:7c:68:04:be:70:b5:78:8e:44:db:d7:e0:
c3:04:34:44:fb:df:b0:9b:96:ba:19:ab:bd:dd:85:0b:78:88:
c4:0e:19:cb:fb:39:2a:8a:28:32:a2:cc:0d:1e:b7:e7:13:31:
fb:ab:98:0b:6b:ba:d4:b9:dc:ce:8a:59:10:58:ab:1d:b3:3c:
74:65:31:5b:83:b7:84:29:fd:80:b1:c0:79:a3:a3:09:04:60:
96:5c:b5:16:c2:88:df:f5:a1:eb:79:af:b1:c0:cd:59:72:f9:
d4:2a:e9:c4:e9:51:79:1f:4a:2a:a3:2f:61:b8:d7:f2:b6:24:
db:34:c3:14:28:fd:36:a2:7c:8a:46:1e:89:04:ff:54:9a:10:
32:90:d3:c5:d9:8d:66:0a:f2:ff:be:40:bc:e9:4b:12:f0:13:
94:c8:67:73:13:f1:46:ea:48:5a:d6:71:53:35:b4:77:dd:2b:
d1:5a:d0:73:a1:87:50:56:c2:e1:c3:b0:e1:3f:ee:57:d1:22:
a2:55:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:18 2025 by rpki-client