
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File: 193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier: gQpff/WytDFkEiNKC0XD8uYOT97EUlJtMqDJLCtwEjU=
Subject key identifier: 61:B0:C1:C2:27:BF:3E:19:93:01:F0:A2:55:0F:C1:1E:C1:48:9F:0B
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer: /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial: 5CB7A431C032D8F4BB59BA595BA8141B48BD9CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number: 01B5
Signing time: Sat 28 Jun 2025 11:56:28 +0000
Manifest this update: Sat 28 Jun 2025 11:51:28 +0000
Manifest next update: Sun 29 Jun 2025 14:44:28 +0000
Files and hashes: 1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: QAteV0dqyoxt850ZhBp/ykLkVHktq3bS/dVbCzGWpqU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b7:a4:31:c0:32:d8:f4:bb:59:ba:59:5b:a8:14:1b:48:bd:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
Validity
Not Before: Jun 28 11:51:28 2025 GMT
Not After : Jun 29 14:44:28 2025 GMT
Subject: CN=61B0C1C227BF3E199301F0A2550FC11EC1489F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:b1:1b:b1:1b:1f:c1:47:79:0f:c0:5f:56:
5b:16:f3:1e:2a:fa:c9:e6:c1:35:fc:9d:cf:28:72:
bf:06:70:17:ce:38:6d:f3:b3:99:86:08:6c:18:fd:
af:57:e0:4d:66:31:04:1b:37:d6:11:b0:cd:62:54:
6c:13:d7:36:9d:9d:25:12:6c:41:49:f0:dc:e1:92:
2e:b4:67:a1:bd:bf:f9:40:fb:29:87:2c:56:c5:d3:
0a:bb:d7:c8:6f:bc:c4:c3:fa:14:e1:d6:36:f4:b3:
df:9b:e4:42:84:0f:50:9f:74:5f:63:f2:c0:b3:0d:
f0:97:81:bc:95:63:36:0a:1d:b4:6d:7a:84:c4:de:
70:23:46:76:bd:7a:92:70:94:62:98:98:fb:e0:29:
5a:fa:b2:73:67:ed:6b:cb:c8:f3:c8:32:d3:65:98:
54:e8:92:2c:cc:a6:a9:f8:89:59:18:7a:4c:3d:83:
cb:b7:42:7f:ee:cb:e4:e7:b7:73:42:34:bc:2f:65:
90:a0:77:d8:b1:4e:5d:69:66:f0:29:a2:fe:5c:a9:
45:c8:fc:13:d2:dc:f4:ac:5f:ec:6d:c1:8d:b6:65:
88:48:8e:86:76:90:88:1d:8b:69:46:0f:2e:df:ad:
42:65:08:6c:eb:00:9d:91:cf:52:46:6c:4c:62:c3:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:C1:C2:27:BF:3E:19:93:01:F0:A2:55:0F:C1:1E:C1:48:9F:0B
X509v3 Authority Key Identifier:
keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:03:df:16:21:5c:95:da:c5:5e:75:a7:a7:0c:91:93:be:e2:
36:a0:80:32:e0:ae:08:bf:62:23:28:51:fb:b6:aa:91:57:ae:
5d:c1:cc:6d:bb:2e:4c:7e:ee:5c:7b:39:e8:2b:88:7c:63:ad:
6f:ee:84:76:4e:9c:cf:57:c8:8b:d9:72:8e:1f:63:c1:a4:13:
0e:80:1c:fe:71:9c:fa:1e:42:e2:c7:ac:5c:ff:cd:ed:65:7e:
83:ea:84:51:7b:21:41:4c:74:1b:6f:0b:45:22:1b:5e:cc:85:
72:b5:cf:b2:d9:62:bc:5f:0a:ba:16:36:44:d0:02:7c:5e:63:
f6:8f:eb:63:ef:ad:02:6a:2a:de:b6:c3:a7:40:95:4a:79:65:
f4:b7:3f:f3:2e:d0:19:d4:3f:44:59:df:62:b9:01:8a:96:40:
b4:e3:4f:43:2b:6a:37:bf:be:ad:52:fd:ab:20:e2:70:d9:81:
a3:d9:b6:9d:ae:a8:c2:e1:94:73:be:23:68:2a:60:82:aa:3d:
a4:4d:51:07:17:18:c1:5a:bf:99:21:34:02:bf:ba:b0:26:be:
1b:7a:15:14:d8:15:d4:60:ff:03:e4:b1:51:95:1c:76:3c:7d:
77:c8:ee:e4:8b:6c:cc:ef:80:97:be:f6:14:06:d4:e9:04:b0:
ea:b9:94:23
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXLekMcAy2PS7WbpZW6gUG0i9nLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzYjk3MjY0NjY1M2M4ODZkNDAwMWNkYWQ3M2VjNGU0
NzNkYTE3MzAeFw0yNTA2MjgxMTUxMjhaFw0yNTA2MjkxNDQ0MjhaMDMxMTAvBgNV
BAMTKDYxQjBDMUMyMjdCRjNFMTk5MzAxRjBBMjU1MEZDMTFFQzE0ODlGMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvbEbsRsfwUd5D8BfVlsW8x4q
+snmwTX8nc8ocr8GcBfOOG3zs5mGCGwY/a9X4E1mMQQbN9YRsM1iVGwT1zadnSUS
bEFJ8Nzhki60Z6G9v/lA+ymHLFbF0wq718hvvMTD+hTh1jb0s9+b5EKED1CfdF9j
8sCzDfCXgbyVYzYKHbRteoTE3nAjRna9epJwlGKYmPvgKVr6snNn7WvLyPPIMtNl
mFTokizMpqn4iVkYekw9g8u3Qn/uy+Tnt3NCNLwvZZCgd9ixTl1pZvApov5cqUXI
/BPS3PSsX+xtwY22ZYhIjoZ2kIgdi2lGDy7frUJlCGzrAJ2Rz1JGbExiwzr1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUYbDBwie/PhmTAfCiVQ/BHsFInwswHwYDVR0j
BBgwFoAUGTuXJkZlPIhtQAHNrXPsTkc9oXMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk
OGVmLzAvMTkzQjk3MjY0NjY1M0M4ODZENDAwMUNEQUQ3M0VDNEU0NzNEQTE3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dUdVhKa1psUElodFFBSE5yWFBzVGtj
OW9YTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1j
MzJkLTQ3Y2UtODk0My0wNzUyZWQxM2Q4ZWYvMC8xOTNCOTcyNjQ2NjUzQzg4NkQ0
MDAxQ0RBRDczRUM0RTQ3M0RBMTczLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwPfFiFcldrFXnWnpwyR
k77iNqCAMuCuCL9iIyhR+7aqkVeuXcHMbbsuTH7uXHs56CuIfGOtb+6Edk6cz1fI
i9lyjh9jwaQTDoAc/nGc+h5C4sesXP/N7WV+g+qEUXshQUx0G28LRSIbXsyFcrXP
stlivF8KuhY2RNACfF5j9o/rY++tAmoq3rbDp0CVSnll9Lc/8y7QGdQ/RFnfYrkB
ipZAtONPQytqN7++rVL9qyDicNmBo9m2na6owuGUc74jaCpggqo9pE1RBxcYwVq/
mSE0Ar+6sCa+G3oVFNgV1GD/A+SxUZUcdjx9d8ju5ItszO+Al772FAbU6QSw6rmU
Iw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:53 2025 by rpki-client