Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: XA/1noQDmtuKc+sNUORh6qZJfLfqYKoJsmK/szFuTDk=
Subject key identifier: DC:6E:7E:68:9B:0A:0D:F7:4D:0D:29:82:88:FC:A0:42:23:09:B7:35
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 63595C4C0DACBCF7D6329F1B159433A937B933CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 0210
Signing time: Sun 19 Oct 2025 02:00:47 +0000
Manifest this update: Sun 19 Oct 2025 01:55:47 +0000
Manifest next update: Tue 21 Oct 2025 03:31:47 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: 9pZp4rGvKK44LdihHbjqRn8U38FRkt9lxgaD6s40fZA=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:59:5c:4c:0d:ac:bc:f7:d6:32:9f:1b:15:94:33:a9:37:b9:33:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Oct 19 01:55:47 2025 GMT
Not After : Oct 21 03:31:47 2025 GMT
Subject: CN=DC6E7E689B0A0DF74D0D298288FCA0422309B735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:9e:78:06:82:e3:37:37:b7:68:4c:57:67:
b8:5a:63:d3:63:b8:dc:22:6f:5c:b9:1c:98:94:77:
6b:cd:7b:b3:61:66:2a:85:53:62:ac:13:49:9a:df:
c8:1a:92:ce:ef:70:ff:6e:b8:3a:08:43:14:5c:44:
4a:f6:38:e7:5c:d7:87:32:6a:be:0a:61:03:bf:04:
e3:82:6b:47:bc:54:7b:88:00:db:c3:c4:38:d5:d0:
92:a4:18:7b:96:d1:67:54:9f:81:8d:7c:47:34:2e:
a4:88:fe:eb:ef:63:cc:4b:e1:88:02:28:76:12:cf:
e7:18:fa:3a:50:df:8d:ab:8a:99:69:d5:9a:1b:6c:
d9:d0:a0:33:df:fb:28:20:7d:8c:ec:8c:53:a9:c7:
67:ee:04:29:58:93:38:4b:e9:ff:42:bb:51:a9:05:
62:03:6e:33:57:a5:b8:5e:32:f8:61:54:77:bc:d9:
81:ab:4a:cd:59:f9:21:a9:b7:ef:bc:5f:f3:e3:fa:
41:22:8d:1f:41:89:06:d2:a7:48:2a:67:0e:5e:56:
0c:98:c1:d6:a2:d1:16:60:82:f5:2f:fa:c0:81:fa:
67:75:00:6e:a2:c5:d7:7c:85:d6:fe:7b:06:ac:ae:
4e:bb:da:dd:67:ac:c3:5f:37:ce:44:21:00:fe:f8:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:7E:68:9B:0A:0D:F7:4D:0D:29:82:88:FC:A0:42:23:09:B7:35
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:61:ae:bc:cd:71:27:97:5e:68:36:f6:8d:c8:02:41:3e:41:
91:be:a3:02:9e:a1:2f:70:1f:31:5c:5d:a0:9a:b8:70:9a:b1:
ea:3e:90:eb:7e:63:26:fc:27:51:80:7e:63:7c:23:fd:3e:76:
4f:38:07:a4:20:0f:eb:41:db:2b:e4:17:89:4e:a8:3a:1a:20:
dd:f4:f9:08:2e:e9:3f:0e:5c:8f:bf:08:7f:8e:2c:3b:1a:6b:
fc:51:f2:78:47:f9:e2:41:0f:d5:8a:2c:2e:f5:83:e4:c3:2f:
12:e6:49:d5:4f:52:4b:82:34:25:64:9f:28:02:2f:34:c7:88:
14:de:5c:1b:ab:bb:9b:9e:dd:bd:60:f0:9e:ee:c5:fc:29:6b:
65:98:5b:4d:4d:be:19:2f:43:92:e5:2c:21:dc:27:71:ee:55:
cd:6b:67:c7:1f:cc:40:4f:dc:e8:a7:d9:58:fa:9a:5d:8b:d5:
0c:4e:1b:0a:88:5c:9a:67:be:33:7c:6e:1e:a5:4e:c8:8d:60:
2a:b7:7c:77:63:95:18:58:18:4c:1a:6b:cd:84:ba:18:0f:f2:
df:06:f1:7f:dd:bb:d1:3c:51:6a:0a:8c:d6:f8:3a:c8:3b:9d:
7b:ac:10:b6:4a:60:23:ab:a1:91:e3:87:76:22:0d:53:f1:2d:
de:d9:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:54 2025 by rpki-client