Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier: BLIQ9UfWWSaFr+rVNTDE6CSEFCn0s/B5v4AXwOJwG3I=
Subject key identifier: BE:85:D2:88:AE:3D:1B:E7:9F:78:71:BD:38:DC:93:7E:40:81:48:32
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer: /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial: 2286A7006BC4A56B1C0B5EBF1816B3100E51A3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number: 023E
Signing time: Sat 28 Jun 2025 16:08:49 +0000
Manifest this update: Sat 28 Jun 2025 16:03:49 +0000
Manifest next update: Sun 29 Jun 2025 18:05:49 +0000
Files and hashes: 1: AS216107.asa (hash: cPuop4pbwWrqg2KspcT+JrKPt7Dz8kv0Dj2WzIb29Zo=)
2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: K0ydRRbUJFCp6BleJLedz8V0ZsQN4BC7PQK6l3sF1VI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:86:a7:00:6b:c4:a5:6b:1c:0b:5e:bf:18:16:b3:10:0e:51:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Validity
Not Before: Jun 28 16:03:49 2025 GMT
Not After : Jun 29 18:05:49 2025 GMT
Subject: CN=BE85D288AE3D1BE79F7871BD38DC937E40814832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:48:95:c8:8e:25:e5:4c:96:c6:84:99:d3:
7c:4d:f4:30:87:2d:2f:8f:42:5f:85:96:af:f8:16:
34:b9:89:85:b1:74:6d:c2:2a:ab:c6:b1:b2:2d:06:
19:a3:35:2c:61:15:ed:3e:96:81:47:8f:b4:07:f1:
5d:bc:98:53:1c:8b:e4:52:fa:e8:e9:cb:68:87:46:
38:ab:4c:fc:e5:a0:14:88:d0:a5:9a:28:60:47:df:
d1:dd:b7:22:55:a5:d9:e8:d8:96:6e:a0:dd:ee:1d:
e1:67:96:28:d7:cb:29:10:76:e0:04:e7:de:c4:b7:
33:5f:ce:ff:a8:32:67:ec:56:0b:b1:0a:c5:50:56:
54:bf:ca:77:7c:da:88:f3:ba:d8:32:99:14:1e:5d:
90:ea:54:54:ca:33:8e:e9:36:09:da:c4:b9:59:b9:
5f:7d:a1:41:40:84:30:ae:2e:fa:8c:0a:0b:3b:af:
8f:5b:6e:53:3b:2a:9f:92:65:58:4f:fe:84:b6:79:
d0:e6:96:34:9f:44:7e:41:74:2f:6e:fc:bd:0b:82:
39:60:c4:e7:0c:45:5a:4d:50:bd:18:e3:d3:93:93:
d6:da:a7:26:1f:69:09:73:fc:3d:ee:f3:ac:11:4f:
6e:8c:dd:7c:c8:fb:f5:8b:a0:8f:e9:50:04:f7:e7:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:D2:88:AE:3D:1B:E7:9F:78:71:BD:38:DC:93:7E:40:81:48:32
X509v3 Authority Key Identifier:
keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:aa:d8:d2:15:80:47:d4:24:46:e2:68:92:02:96:f0:09:43:
3c:f8:b2:b7:76:a1:31:33:c9:a0:f9:48:c9:7c:36:24:9a:bc:
04:0d:95:53:ad:36:74:1a:d1:ee:4f:42:12:60:45:94:93:42:
ce:6e:1a:53:e1:cc:3c:5b:41:40:29:da:28:40:5c:d2:18:f5:
a8:7e:00:d9:8e:e8:e8:42:5f:c7:40:26:72:f5:3b:85:7c:94:
1a:e0:0e:61:63:81:8a:f4:e5:03:12:b5:4c:fe:6e:d9:11:43:
b7:4b:5f:2c:42:08:34:3d:3f:56:e5:c5:c9:d9:a2:4c:80:b0:
de:d9:84:88:e9:cc:a4:34:01:fd:94:83:e9:6f:5b:69:cd:3b:
62:ca:fa:ab:97:45:dc:eb:3e:e3:1f:0d:53:a0:7d:ac:56:6e:
4f:ca:64:f2:d1:ac:a6:22:92:10:76:23:4c:5d:f9:47:2f:73:
8f:b6:cc:59:ce:9a:0a:a6:4a:f9:28:64:76:4a:b3:4e:e0:b6:
e3:c9:41:16:f2:bc:45:bb:4c:43:fd:a3:a4:78:83:e4:05:4f:
f3:8c:de:30:e6:3b:84:d6:2e:ee:fb:29:a8:53:05:74:a2:c1:
c2:b7:ad:fd:21:71:7c:53:40:a9:65:15:08:08:c4:bc:5a:52:
8a:04:2a:64
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIoanAGvEpWscC16/GBazEA5Ro80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNTA2MjgxNjAzNDlaFw0yNTA2MjkxODA1NDlaMDMxMTAvBgNV
BAMTKEJFODVEMjg4QUUzRDFCRTc5Rjc4NzFCRDM4REM5MzdFNDA4MTQ4MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVEUiVyI4l5UyWxoSZ03xN9DCH
LS+PQl+Flq/4FjS5iYWxdG3CKqvGsbItBhmjNSxhFe0+loFHj7QH8V28mFMci+RS
+ujpy2iHRjirTPzloBSI0KWaKGBH39HdtyJVpdno2JZuoN3uHeFnlijXyykQduAE
597EtzNfzv+oMmfsVguxCsVQVlS/ynd82ojzutgymRQeXZDqVFTKM47pNgnaxLlZ
uV99oUFAhDCuLvqMCgs7r49bblM7Kp+SZVhP/oS2edDmljSfRH5BdC9u/L0Lgjlg
xOcMRVpNUL0Y49OTk9bapyYfaQlz/D3u86wRT26M3XzI+/WLoI/pUAT35xTDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUvoXSiK49G+efeHG9ONyTfkCBSDIwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKrY0hWAR9QkRuJokgKW
8AlDPPiyt3ahMTPJoPlIyXw2JJq8BA2VU602dBrR7k9CEmBFlJNCzm4aU+HMPFtB
QCnaKEBc0hj1qH4A2Y7o6EJfx0AmcvU7hXyUGuAOYWOBivTlAxK1TP5u2RFDt0tf
LEIIND0/VuXFydmiTICw3tmEiOnMpDQB/ZSD6W9bac07Ysr6q5dF3Os+4x8NU6B9
rFZuT8pk8tGspiKSEHYjTF35Ry9zj7bMWc6aCqZK+ShkdkqzTuC248lBFvK8RbtM
Q/2jpHiD5AVP84zeMOY7hNYu7vspqFMFdKLBwret/SFxfFNAqWUVCAjEvFpSigQq
ZA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:56 2025 by rpki-client