
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: RaqkIE/Xg1oRw1Ja8eZD3W93uF0Js+xG0kdUzQuAEUY=
Subject key identifier: F1:27:68:E5:8D:6B:2B:FC:10:E6:73:A9:BA:31:E8:EA:9F:72:B5:1E
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 41F7D146CC25D3017E95D9C798537FD1DA77D9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 013F
Signing time: Thu 03 Jul 2025 02:20:21 +0000
Manifest this update: Thu 03 Jul 2025 02:15:21 +0000
Manifest next update: Sat 05 Jul 2025 04:42:21 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: s5BiqterxYn8ik+DD3T7Gzx0NL/M0kpo8BDqIhRONm8=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f7:d1:46:cc:25:d3:01:7e:95:d9:c7:98:53:7f:d1:da:77:d9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Jul 3 02:15:21 2025 GMT
Not After : Jul 5 04:42:21 2025 GMT
Subject: CN=F12768E58D6B2BFC10E673A9BA31E8EA9F72B51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:36:d7:ee:48:4a:7a:61:4e:28:68:e1:80:
11:a9:48:f6:ff:1c:f0:80:99:27:3a:ef:82:cb:8f:
e0:b2:1b:48:f5:f6:c0:68:b3:0b:43:29:e8:f9:8a:
59:67:c0:c0:58:1b:d0:18:7f:91:91:62:7a:82:8c:
b9:0c:09:33:fa:28:5c:79:3f:bd:e5:14:ca:c4:33:
4f:74:00:82:79:5e:4a:20:42:2e:aa:d9:7e:01:ae:
75:50:05:6f:50:93:dc:58:65:48:25:9f:14:b4:b9:
b3:c0:28:e3:a4:c1:e4:bc:c9:be:72:10:0a:c1:df:
ef:bd:b7:5f:0b:15:e9:31:3f:0b:ba:15:72:e8:9b:
3d:ab:2d:6e:de:8e:77:ca:3d:96:eb:54:dd:a2:36:
22:37:88:c6:43:de:73:a8:c2:d2:9f:0f:bd:62:02:
74:1e:c6:37:60:c0:e2:48:70:5e:8a:60:47:f4:1d:
11:32:f6:3f:87:93:91:cb:5b:90:8f:72:c3:2c:17:
b7:9e:43:08:b4:d7:b6:47:9c:d0:cb:af:c7:28:ae:
36:69:f6:07:4e:8a:ed:e1:f7:95:c3:93:5d:6f:37:
56:51:2d:d5:9c:56:ac:7e:39:7b:2f:3b:f9:f8:36:
32:e4:08:f6:87:f0:b1:af:d4:67:e7:ea:cc:d7:20:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:68:E5:8D:6B:2B:FC:10:E6:73:A9:BA:31:E8:EA:9F:72:B5:1E
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:62:da:80:39:bb:ec:a2:cd:b0:d3:e7:ff:96:ae:29:99:9f:
ac:a7:c2:04:a7:5f:38:64:11:a6:68:b1:ce:49:33:a4:5f:4c:
5b:0f:81:5a:31:51:e8:8e:dd:d7:be:d0:8e:95:7c:3b:9c:0b:
f8:78:b2:20:83:05:62:24:16:ae:27:a7:24:59:08:58:73:80:
3b:fc:e5:bf:98:2d:ed:06:0e:97:00:34:61:c5:04:c4:70:ae:
d4:43:b5:3d:5f:c1:69:62:e5:b9:7d:40:fc:7a:97:d9:4d:88:
5f:e2:26:c6:0b:ae:a1:33:99:9c:ed:56:ec:cc:a3:d6:19:fd:
bb:a7:f3:1a:4d:5b:12:2b:c5:29:0a:59:90:f0:34:bb:ea:fe:
27:b8:90:c3:7b:88:d1:41:53:e4:40:85:40:d6:84:cf:6c:4f:
cf:d1:62:0c:6d:8c:77:5e:0e:c0:87:de:1a:df:1c:be:a3:b7:
11:82:04:e4:fd:53:dd:1f:3d:b2:91:b8:fb:7d:b9:1c:f7:07:
01:97:de:65:26:94:8b:44:55:71:43:3a:57:b7:61:57:1f:7c:
5e:25:d9:f2:cf:9f:c5:f7:bb:4f:fc:26:1c:f1:01:62:6c:4e:
de:94:23:25:fd:cc:85:32:39:9e:50:68:8c:ee:dd:a4:6d:49:
fc:60:e0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:03:44 2025 by rpki-client