
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File: 84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier: prqMBCCU/qUWQVGM2XoE86GzEkb2KmmkT/c/g4wS0tg=
Subject key identifier: 1D:B8:00:DE:0B:75:8C:69:58:62:63:8F:BA:96:91:A5:7D:D1:DA:DD
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer: /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial: 12F9F13DEA368894825269137C9616529BC80B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number: 6D
Signing time: Sat 28 Jun 2025 08:48:13 +0000
Manifest this update: Sat 28 Jun 2025 08:43:13 +0000
Manifest next update: Sun 29 Jun 2025 10:49:13 +0000
Files and hashes: 1: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: aHDrXlaEPZiLlWPywDrYiHVT+mCIhKyZFSk6iRzyBSs=)
2: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f9:f1:3d:ea:36:88:94:82:52:69:13:7c:96:16:52:9b:c8:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
Validity
Not Before: Jun 28 08:43:13 2025 GMT
Not After : Jun 29 10:49:13 2025 GMT
Subject: CN=1DB800DE0B758C695862638FBA9691A57DD1DADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:f1:81:ab:37:b0:73:ae:7c:85:9a:13:4a:
bb:ee:95:80:50:ed:f7:69:89:62:eb:3a:be:7d:af:
52:31:a0:20:fe:6d:cf:d5:73:b1:03:95:62:aa:5e:
75:ad:2f:82:dc:ff:c0:15:ae:98:8e:70:e6:ba:20:
de:04:5e:f1:e2:dc:7d:5e:55:62:04:23:54:99:20:
1a:e3:d9:c1:9a:1e:89:93:d5:b0:e7:f0:9c:6d:9f:
20:3e:5e:85:60:5e:26:2f:77:7f:59:70:f8:a4:48:
b5:fe:3e:30:bf:1a:bf:9a:29:f7:89:24:b9:68:79:
49:3b:0c:4a:32:07:6f:ae:fd:24:62:56:c8:71:ec:
61:44:8f:6b:a1:aa:b2:68:aa:94:14:89:4d:8e:9f:
0f:5e:ab:0f:d6:4f:12:23:83:5e:cc:ed:40:c6:81:
a6:cd:7e:5d:a6:6c:22:ea:f7:fd:88:90:e2:19:bf:
b2:20:ce:97:05:9e:0d:ac:7f:ae:49:78:20:00:16:
53:c3:38:6c:90:0d:bf:96:34:2e:4f:81:a6:97:be:
13:61:a1:84:dd:74:e8:48:69:15:31:b4:80:c8:36:
bd:d6:3a:ad:91:23:58:82:46:78:11:2d:f0:2d:fd:
70:f5:6e:09:e7:ad:ee:45:bc:d6:3d:9c:89:bf:a2:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:00:DE:0B:75:8C:69:58:62:63:8F:BA:96:91:A5:7D:D1:DA:DD
X509v3 Authority Key Identifier:
keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c2:1f:47:a8:0b:83:37:94:a9:d3:f9:f2:e5:62:db:5b:67:
ce:c1:ec:8f:07:ea:34:51:1f:7b:e1:f3:74:0b:03:ba:09:59:
dc:0f:c6:9a:f6:f0:60:7d:fc:a9:91:61:f4:35:f2:3f:fb:4c:
c2:36:b2:0d:32:4d:68:16:9e:aa:22:8d:9d:70:54:d0:a1:ac:
ad:b6:18:ab:dd:f0:03:01:88:8b:3a:68:de:16:76:44:fd:c6:
25:31:e1:8d:18:1d:a9:5c:7c:46:b1:b8:b4:f5:f2:10:f3:d4:
9d:f2:63:46:eb:6d:52:f1:c4:90:04:b6:69:64:9b:25:c3:e2:
9a:7a:26:5e:c2:06:4a:bc:28:4e:6e:79:13:a4:ea:cd:76:c0:
bf:82:47:f6:3d:ad:61:37:a7:98:50:2f:60:0b:c1:74:50:7d:
d1:d7:8d:8b:50:15:aa:0c:e2:e5:cd:78:a8:00:26:f1:74:52:
32:cf:e0:f9:90:54:70:0d:c4:38:60:10:26:b5:54:92:1a:21:
6b:12:2e:45:fa:e7:fc:09:78:31:ce:b0:51:31:76:7d:fe:a9:
17:8e:50:35:8e:72:ae:8c:6e:cf:7a:a5:d5:43:f3:e0:d5:89:
dc:f6:90:2a:90:63:31:dc:c6:de:e9:09:a3:13:9c:d2:e5:5d:
84:84:b2:cf
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEvnxPeo2iJSCUmkTfJYWUpvICyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxMDFjZWNhYTZhNzE0NjVkY2Y2NjVkNzE2Mjc5YTAw
ODM0MWVhNDAeFw0yNTA2MjgwODQzMTNaFw0yNTA2MjkxMDQ5MTNaMDMxMTAvBgNV
BAMTKDFEQjgwMERFMEI3NThDNjk1ODYyNjM4RkJBOTY5MUE1N0REMURBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1v/GBqzewc658hZoTSrvulYBQ
7fdpiWLrOr59r1IxoCD+bc/Vc7EDlWKqXnWtL4Lc/8AVrpiOcOa6IN4EXvHi3H1e
VWIEI1SZIBrj2cGaHomT1bDn8JxtnyA+XoVgXiYvd39ZcPikSLX+PjC/Gr+aKfeJ
JLloeUk7DEoyB2+u/SRiVshx7GFEj2uhqrJoqpQUiU2Onw9eqw/WTxIjg17M7UDG
gabNfl2mbCLq9/2IkOIZv7IgzpcFng2sf65JeCAAFlPDOGyQDb+WNC5PgaaXvhNh
oYTddOhIaRUxtIDINr3WOq2RI1iCRngRLfAt/XD1bgnnre5FvNY9nIm/ohVhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUHbgA3gt1jGlYYmOPupaRpX3R2t0wHwYDVR0j
BBgwFoAUhBAc7KpqcUZdz2ZdcWJ5oAg0HqQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDFiMjAxNzYtNzZiOS00MDAwLWE2ZTYtYmE1NDdiNTI0
MTQzLzAvODQxMDFDRUNBQTZBNzE0NjVEQ0Y2NjVENzE2Mjc5QTAwODM0MUVBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2hCQWM3S3BxY1VaZHoyWmRjV0o1b0Fn
MEhxUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMWIyMDE3Ni03
NmI5LTQwMDAtYTZlNi1iYTU0N2I1MjQxNDMvMC84NDEwMUNFQ0FBNkE3MTQ2NURD
RjY2NUQ3MTYyNzlBMDA4MzQxRUE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8IfR6gLgzeUqdP58uVi
21tnzsHsjwfqNFEfe+HzdAsDuglZ3A/GmvbwYH38qZFh9DXyP/tMwjayDTJNaBae
qiKNnXBU0KGsrbYYq93wAwGIizpo3hZ2RP3GJTHhjRgdqVx8RrG4tPXyEPPUnfJj
RuttUvHEkAS2aWSbJcPimnomXsIGSrwoTm55E6TqzXbAv4JH9j2tYTenmFAvYAvB
dFB90deNi1AVqgzi5c14qAAm8XRSMs/g+ZBUcA3EOGAQJrVUkhohaxIuRfrn/Al4
Mc6wUTF2ff6pF45QNY5yroxuz3ql1UPz4NWJ3PaQKpBjMdzG3ukJoxOc0uVdhISy
zw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:13 2025 by rpki-client