Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: kjcP1Cw9Hs4kSeZEsDgxGn3RS3p1pFDVPOUPUamw7eA=
Subject key identifier: 41:0F:E5:14:90:B8:4C:1B:6B:07:2F:E7:93:77:17:B9:D5:A8:B8:80
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 72AA1105EC404BF2E4ABAD2DC88103DD3816CBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: 24
Signing time: Sat 28 Jun 2025 14:27:02 +0000
Manifest this update: Sat 28 Jun 2025 14:22:02 +0000
Manifest next update: Sun 29 Jun 2025 16:03:02 +0000
Files and hashes: 1: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: KChcf8ubtq7ppHNo18vq5F1znOlF5gwRFJzNPoyg6pw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:aa:11:05:ec:40:4b:f2:e4:ab:ad:2d:c8:81:03:dd:38:16:cb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: Jun 28 14:22:02 2025 GMT
Not After : Jun 29 16:03:02 2025 GMT
Subject: CN=410FE51490B84C1B6B072FE7937717B9D5A8B880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:fa:b2:cd:0c:09:4f:4b:e1:3b:f3:13:a1:
d9:c0:7f:f4:bb:ee:f5:b7:ea:25:e7:f7:30:86:6d:
1f:02:ec:3b:50:31:df:aa:19:d9:c0:ee:c1:58:d7:
29:c2:5a:87:57:47:be:0c:4c:f5:ca:4e:94:c7:10:
c8:02:90:b8:a2:2d:50:ea:6f:53:6a:ce:4e:fc:5b:
4d:1b:e4:10:5a:dc:e4:d3:95:08:5f:f2:7e:4f:82:
8d:29:38:5b:ce:1c:33:0f:e3:6f:5e:5e:e0:be:17:
55:c1:96:ce:d3:01:13:b0:d4:20:be:9d:ea:3e:59:
76:4c:ec:ed:d5:aa:45:67:87:6e:8e:3c:ea:50:e6:
1e:70:58:4f:cf:c2:6b:1b:67:1e:41:16:2c:35:80:
18:bb:77:34:19:ad:13:a0:ac:fe:c2:b2:4b:f0:57:
e1:21:62:04:b3:de:34:db:77:ac:de:ed:2c:75:e0:
fb:00:13:61:94:30:8f:5a:6a:f7:6a:f2:9f:7e:58:
3d:ff:b6:a4:6e:0a:c1:ea:48:6c:db:65:ae:ae:16:
04:e7:00:75:db:8b:b0:0c:66:9a:4d:55:8e:63:69:
3c:c0:8f:1e:6c:c7:06:ae:90:a2:7c:19:cf:0a:c8:
da:23:5e:69:6d:34:d5:0a:fb:e2:91:36:a3:57:c1:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:E5:14:90:B8:4C:1B:6B:07:2F:E7:93:77:17:B9:D5:A8:B8:80
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:2d:1d:0d:f0:27:0d:8b:8b:91:6d:73:13:b1:46:9c:cf:
48:dc:83:3a:b8:1d:66:25:d4:8d:ba:5e:94:a2:47:58:19:6c:
3f:bf:9f:39:fa:e2:a2:e8:46:0d:cb:03:3a:22:aa:31:d6:4e:
78:44:13:ce:6a:9d:01:93:4b:ac:ef:0b:50:10:ae:6c:3c:10:
0f:67:2a:df:f5:2b:7f:41:5f:4c:1b:43:d3:d4:b8:6e:28:0c:
33:18:82:8d:a0:ed:99:fc:c6:bc:77:a7:2e:e5:28:c1:b6:44:
61:93:4c:45:0c:aa:20:2a:82:3c:70:ec:2e:fc:7c:5a:b7:d5:
8a:c4:fc:d6:a2:8e:64:35:35:25:40:58:18:65:cb:14:6c:4a:
b0:a3:5b:ef:a1:76:e2:69:80:3d:e6:17:b2:5c:1a:d3:5c:ae:
ab:b8:a0:45:84:cd:3a:37:fc:1c:a3:c9:be:13:a4:56:05:69:
e0:8b:e2:1f:7b:8b:27:b6:4d:42:54:09:b5:24:10:f5:f2:b9:
9c:19:ab:96:99:fb:85:87:19:a2:e0:d6:8e:cf:cb:47:aa:c4:
e1:ad:e9:54:4d:3b:6c:08:7a:71:46:1c:c7:53:df:ae:90:71:
8d:10:4b:04:83:06:46:83:26:7d:a3:22:30:98:80:d2:9b:6a:
94:a4:ce:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:05 2025 by rpki-client