
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: pdavrHW8mrTUt44HGkivs93x4uk5Ywxr3mu5XWjnS14=
Subject key identifier: 28:7F:92:F3:73:7E:B1:FC:41:AA:53:01:1E:B1:EE:4F:19:3E:78:14
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 4AE34EF495A9445441BDC7CD4DB4E733F120097F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: FE
Signing time: Wed 14 May 2025 12:12:07 +0000
Manifest this update: Wed 14 May 2025 12:07:07 +0000
Manifest next update: Fri 16 May 2025 14:24:07 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: hr/W4Tk2IGt+waM3ZS0dc0oMixNyDX0Noru59LNu0d4=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e3:4e:f4:95:a9:44:54:41:bd:c7:cd:4d:b4:e7:33:f1:20:09:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: May 14 12:07:07 2025 GMT
Not After : May 16 14:24:07 2025 GMT
Subject: CN=287F92F3737EB1FC41AA53011EB1EE4F193E7814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:4a:3c:46:8f:32:86:d4:f7:32:c2:54:76:
0e:c4:78:85:76:10:8c:b9:e0:08:01:7d:f6:ed:93:
0b:66:43:05:82:4b:e3:1f:b4:e8:20:fb:1b:ab:02:
d4:95:ce:72:91:ed:4c:03:f9:67:84:5d:6e:b7:58:
3d:ec:f6:62:66:2d:6d:47:60:76:aa:c8:8e:a2:9f:
69:ab:79:98:07:a7:50:de:90:75:ae:1f:02:ce:fa:
a6:68:48:fd:b4:ad:ed:4c:e4:d2:35:9a:81:a4:dd:
40:25:21:9c:45:52:8e:38:68:d6:a3:bc:08:25:6d:
dc:72:88:ca:10:f7:a6:84:ca:30:df:50:02:9b:62:
b4:cb:7b:de:0c:f6:dd:bd:bb:3b:a2:4f:f8:0a:7e:
ec:d5:58:24:21:9c:8c:84:91:a2:ad:e3:29:d2:c8:
e1:34:41:48:fd:a2:92:e4:3b:62:07:c1:a9:aa:42:
c0:05:a5:69:b7:82:17:e0:c3:66:57:de:7f:c6:1c:
1c:ea:e7:36:c7:08:2d:eb:79:78:37:25:78:ed:cd:
c8:f0:99:f7:5a:56:99:52:b1:d3:40:d9:3b:1f:56:
74:b7:61:6b:15:69:4b:9f:3c:92:90:18:b5:20:04:
c8:01:0e:2e:da:59:6c:90:91:c0:da:1f:e1:f6:ff:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:92:F3:73:7E:B1:FC:41:AA:53:01:1E:B1:EE:4F:19:3E:78:14
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8b:9a:16:57:21:35:5b:8d:e6:18:06:33:cb:9d:f8:ce:f0:
98:e3:9f:de:a8:9c:b2:f6:2c:5d:c8:45:a7:63:9e:56:9b:69:
95:95:33:20:17:a9:d3:76:16:e2:21:ad:a8:3e:66:aa:59:7d:
e3:84:36:0b:b6:18:da:38:ca:5c:b6:16:02:02:d1:18:18:a0:
e9:29:3f:d9:a5:1a:50:d6:ee:4f:88:ee:d1:d7:61:26:1d:31:
2b:c2:56:75:d8:fa:9d:66:4d:ce:f9:5f:6d:e4:23:56:e1:0d:
7c:84:52:a1:48:6a:26:e6:2a:a2:b6:e7:66:ef:5b:00:44:d6:
df:fe:12:d7:28:d1:70:30:03:a3:94:25:fd:bf:eb:5d:26:2e:
ed:41:e7:98:35:46:ce:b7:e4:8e:04:be:bf:22:6d:de:08:f2:
cf:3a:a6:be:74:77:41:e5:2d:1d:d2:31:09:82:fa:4a:69:cd:
de:1c:45:c0:a9:87:53:90:c8:63:05:32:ad:00:ef:7c:61:62:
f4:dc:fe:59:56:b9:ed:a8:c3:eb:58:a7:ec:bf:05:10:18:c3:
d6:d8:a7:94:e3:68:a7:b5:c1:f1:93:93:40:97:83:b8:31:bd:
13:80:47:3d:d3:53:de:ec:db:c2:28:67:c6:b0:2f:f3:24:44:
05:27:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:18:09 2025 by rpki-client