Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: eHEiZn26ppINCrVwtl9CT+IH66v7CL+P0xRPUl/nrz0=
Subject key identifier: 9D:57:1D:75:BB:FC:D6:01:74:BD:30:DF:69:BB:12:96:A6:AB:2C:AC
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 66FA98080EA8AD245BD441DC8D38A068CF5163C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 0211
Signing time: Thu 12 Jun 2025 22:27:46 +0000
Manifest this update: Thu 12 Jun 2025 22:22:46 +0000
Manifest next update: Sat 14 Jun 2025 01:10:46 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: U0PcfQiC25NFjW2OPhHJINf5PsIb08HZS4tQwQ9yjPE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 01:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:fa:98:08:0e:a8:ad:24:5b:d4:41:dc:8d:38:a0:68:cf:51:63:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Jun 12 22:22:46 2025 GMT
Not After : Jun 14 01:10:46 2025 GMT
Subject: CN=9D571D75BBFCD60174BD30DF69BB1296A6AB2CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:c9:bb:f2:21:24:fd:45:07:cb:9c:ad:b0:
ff:9c:93:98:e3:eb:79:dd:58:e8:7d:79:44:7b:39:
ea:c0:ce:41:07:e4:86:ce:e0:ca:a6:94:92:c5:a0:
c5:70:63:09:d8:43:b1:f3:8d:a6:61:7d:5d:e1:df:
d5:75:12:30:16:92:70:3e:a1:87:5c:f6:52:7c:02:
2d:fb:16:9b:e6:41:0c:d7:26:6e:a3:6e:fa:4c:ec:
6e:bc:57:a3:4c:3d:6e:8b:91:87:33:f7:17:ab:cf:
99:b6:a7:fc:bc:31:f6:f1:29:89:dd:32:af:e7:5e:
54:a6:df:84:a5:f6:48:fd:69:f8:2c:23:26:2c:c6:
b7:b8:44:ae:79:f4:81:43:63:c4:2e:03:6b:70:3c:
66:8f:0f:c9:28:58:1f:73:9a:89:df:cc:1b:c0:da:
53:39:3e:ae:2c:50:ec:9f:6a:41:c2:1e:02:19:02:
5f:96:e5:6c:bc:35:57:01:c1:66:e2:bd:7b:bf:fd:
87:f1:78:cc:ef:d7:90:7f:e9:df:a5:6e:5f:e0:2d:
b8:e0:5c:1b:09:b6:47:81:5b:dd:96:9b:a1:e1:19:
c1:10:f1:9a:15:f7:ad:ac:0e:e4:12:0b:23:a6:cd:
fe:d6:38:67:e1:21:20:fd:4c:f8:2d:a0:4e:df:9a:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:1D:75:BB:FC:D6:01:74:BD:30:DF:69:BB:12:96:A6:AB:2C:AC
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:67:27:75:96:82:27:c5:95:96:d1:20:93:64:ae:39:0c:09:
1c:51:f4:17:cc:3e:09:ac:c1:8a:f0:db:23:a9:ff:fc:b2:6a:
fb:45:85:c8:18:b2:b8:43:ee:f4:f1:4c:83:39:05:60:b0:54:
9b:8d:fa:af:6b:02:29:af:95:f6:fb:9e:ab:fc:b5:01:75:3a:
2c:b3:b6:27:ae:c8:1d:6f:c2:c8:bf:a9:c8:f8:3e:39:e1:c5:
21:44:35:46:24:a8:36:b8:52:fc:cf:6a:93:f6:5a:9f:b7:76:
8f:46:85:32:15:98:9d:28:b3:d9:f0:1a:51:52:02:01:9e:c3:
c5:83:4c:7c:94:f1:df:b7:e0:95:c6:cf:ac:53:97:99:c9:1d:
46:a5:a8:ed:23:4e:ce:eb:8e:52:86:65:ca:4e:d4:45:0c:82:
dc:e8:97:96:8c:20:d8:88:79:27:c7:cb:df:eb:d9:78:9d:ec:
d2:2f:09:64:98:9b:b9:06:b1:89:ac:c4:be:0e:22:51:fc:c5:
12:45:4c:ac:64:e3:45:5e:76:74:73:f6:33:1a:00:fe:29:b3:
7a:25:a6:8e:27:de:1a:27:5b:09:04:b1:12:62:92:30:33:e3:
f1:95:59:a6:75:aa:94:e0:9f:2c:6c:13:78:be:be:09:17:71:
59:fc:9b:46
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZvqYCA6orSRb1EHcjTigaM9RY8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk5MzI4OWIxNjhhMzdkNDQ5YmMwZDQ0YjFhZDM1ZTUz
MjAyNWNmMTAeFw0yNTA2MTIyMjIyNDZaFw0yNTA2MTQwMTEwNDZaMDMxMTAvBgNV
BAMTKDlENTcxRDc1QkJGQ0Q2MDE3NEJEMzBERjY5QkIxMjk2QTZBQjJDQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxcm78iEk/UUHy5ytsP+ck5jj
63ndWOh9eUR7OerAzkEH5IbO4MqmlJLFoMVwYwnYQ7HzjaZhfV3h39V1EjAWknA+
oYdc9lJ8Ai37FpvmQQzXJm6jbvpM7G68V6NMPW6LkYcz9xerz5m2p/y8MfbxKYnd
Mq/nXlSm34Sl9kj9afgsIyYsxre4RK559IFDY8QuA2twPGaPD8koWB9zmonfzBvA
2lM5Pq4sUOyfakHCHgIZAl+W5Wy8NVcBwWbivXu//YfxeMzv15B/6d+lbl/gLbjg
XBsJtkeBW92Wm6HhGcEQ8ZoV962sDuQSCyOmzf7WOGfhISD9TPgtoE7fmuHhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUnVcddbv81gF0vTDfabsSlqarLKwwHwYDVR0j
BBgwFoAUCZMomxaKN9RJvA1Esa015TICXPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNiZDJkMmUtZjQwZS00NzJlLTlmOGYtODk4NGZlYWFh
NWM3LzAvMDk5MzI4OUIxNjhBMzdENDQ5QkMwRDQ0QjFBRDM1RTUzMjAyNUNGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NaTW9teGFLTjlSSnZBMUVzYTAxNVRJ
Q1hQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2JkMmQyZS1m
NDBlLTQ3MmUtOWY4Zi04OTg0ZmVhYWE1YzcvMC8wOTkzMjg5QjE2OEEzN0Q0NDlC
QzBENDRCMUFEMzVFNTMyMDI1Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWcndZaCJ8WVltEgk2Su
OQwJHFH0F8w+CazBivDbI6n//LJq+0WFyBiyuEPu9PFMgzkFYLBUm436r2sCKa+V
9vueq/y1AXU6LLO2J67IHW/CyL+pyPg+OeHFIUQ1RiSoNrhS/M9qk/Zan7d2j0aF
MhWYnSiz2fAaUVICAZ7DxYNMfJTx37fglcbPrFOXmckdRqWo7SNOzuuOUoZlyk7U
RQyC3OiXlowg2Ih5J8fL3+vZeJ3s0i8JZJibuQaxiazEvg4iUfzFEkVMrGTjRV52
dHP2MxoA/imzeiWmjifeGidbCQSxEmKSMDPj8ZVZpnWqlOCfLGwTeL6+CRdxWfyb
Rg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 09:47:22 2025 by rpki-client