Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json)
Hash identifier: rIoGD1phCCDQ8T+1IanF0jTpM2eT8KDkdXwHHqNIt6Q=
Subject key identifier: ED:3E:2A:42:A4:27:A3:9F:3B:69:25:7A:89:A1:D4:78:7E:9A:BE:D7
Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Certificate serial: 68B37FFFE5033AE9DCE06E6C3BC911148FC49EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
Manifest number: 019F
Signing time: Fri 22 Aug 2025 23:34:05 +0000
Manifest this update: Fri 22 Aug 2025 23:29:05 +0000
Manifest next update: Mon 25 Aug 2025 00:04:05 +0000
Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: EQQHLUiojgiKFPkzQl5KwpQZMXB4kDUUUGEbraghN20=)
2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b3:7f:ff:e5:03:3a:e9:dc:e0:6e:6c:3b:c9:11:14:8f:c4:9e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab
Validity
Not Before: Aug 22 23:29:05 2025 GMT
Not After : Aug 25 00:04:05 2025 GMT
Subject: CN=ED3E2A42A427A39F3B69257A89A1D4787E9ABED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:45:ce:36:53:23:23:d0:7d:a5:6e:0d:4a:
da:d2:48:94:b3:db:31:eb:b9:fa:83:00:99:bf:53:
22:39:d0:a0:b3:03:97:c5:53:e6:e5:dc:37:e7:f6:
a4:a3:0d:22:d5:fe:93:cd:90:61:32:24:d9:9b:45:
b1:76:ed:a1:0a:b6:80:e5:24:1a:88:7c:63:ab:c5:
8c:07:d7:9a:40:f5:35:b8:69:b6:57:84:b5:50:eb:
d3:39:0c:38:e7:f5:58:9c:f1:51:86:32:71:04:1e:
56:0e:f6:13:0d:a7:73:bc:02:35:00:cf:5f:bc:b6:
1c:cd:0a:56:73:1d:50:93:c4:ce:e5:f6:50:ec:6b:
41:1b:20:a4:d5:a4:36:b7:ae:c4:24:90:5e:c9:cc:
47:50:15:86:7a:a2:f0:b3:05:2f:82:c7:fc:1d:af:
d9:60:6a:37:ba:b2:06:0f:df:0e:0d:50:35:a6:de:
dd:f0:3f:e8:b0:8a:73:e3:5c:1c:f1:db:b0:b2:8f:
62:95:20:bd:57:e1:7f:91:3b:37:c9:84:29:79:20:
72:c2:3e:2e:35:e9:04:7c:3c:7b:1d:ac:ba:9b:c6:
6c:af:b0:95:07:30:da:70:51:53:5b:aa:1c:7e:00:
56:85:4d:8f:42:bf:b6:a8:90:d5:51:89:e1:45:02:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3E:2A:42:A4:27:A3:9F:3B:69:25:7A:89:A1:D4:78:7E:9A:BE:D7
X509v3 Authority Key Identifier:
keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5a:cc:e2:c7:c3:ef:b9:96:f3:33:9a:e3:f6:79:24:8a:15:
23:00:cb:16:4b:8f:6d:90:8e:6c:e3:78:32:9f:85:a5:13:15:
77:43:d5:61:42:46:fd:fe:6c:17:2f:2e:7d:1c:01:fc:7e:bc:
09:e7:1f:8d:69:42:21:63:a9:66:76:0d:83:0e:1f:4f:08:81:
d4:7a:8e:26:81:b1:f2:a6:87:ee:97:e8:ae:bb:b3:dd:92:bf:
7f:4a:5a:46:43:ab:81:ed:80:9f:37:49:88:6d:88:45:d2:b3:
04:3f:9b:36:95:5d:1a:d1:58:ff:11:4f:81:0c:c8:12:4e:73:
5d:de:78:fc:a8:72:da:46:fd:46:b0:55:c0:b2:47:88:6a:45:
62:81:1b:8f:8f:fc:4b:b7:c4:bf:d3:a0:6b:27:e7:3c:b1:59:
53:26:bb:6c:94:2a:d1:37:48:f2:50:40:35:7c:32:e0:c7:74:
50:45:38:3d:eb:eb:50:d8:e4:90:b7:22:50:3b:3f:74:22:dc:
6f:6a:46:af:39:68:66:7c:df:2e:1e:e8:12:08:0c:10:4d:ae:
dc:a6:af:c1:24:64:28:86:7c:b5:e6:0a:ef:64:a3:95:e3:1d:
18:23:5e:e8:76:ef:07:c5:6d:89:19:a1:8d:bf:49:53:a9:d7:
cf:f9:f0:0b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaLN//+UDOunc4G5sO8kRFI/EnrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWQ0OWJkMGIyODg0YzZkYzUwODVjMWE2OTRkZjdiOTcw
ZTA1ZGFhYjAeFw0yNTA4MjIyMzI5MDVaFw0yNTA4MjUwMDA0MDVaMDMxMTAvBgNV
BAMTKEVEM0UyQTQyQTQyN0EzOUYzQjY5MjU3QTg5QTFENDc4N0U5QUJFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWt0XONlMjI9B9pW4NStrSSJSz
2zHrufqDAJm/UyI50KCzA5fFU+bl3Dfn9qSjDSLV/pPNkGEyJNmbRbF27aEKtoDl
JBqIfGOrxYwH15pA9TW4abZXhLVQ69M5DDjn9Vic8VGGMnEEHlYO9hMNp3O8AjUA
z1+8thzNClZzHVCTxM7l9lDsa0EbIKTVpDa3rsQkkF7JzEdQFYZ6ovCzBS+Cx/wd
r9lgaje6sgYP3w4NUDWm3t3wP+iwinPjXBzx27Cyj2KVIL1X4X+ROzfJhCl5IHLC
Pi416QR8PHsdrLqbxmyvsJUHMNpwUVNbqhx+AFaFTY9Cv7aokNVRieFFAmpXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU7T4qQqQno587aSV6iaHUeH6avtcwHwYDVR0j
BBgwFoAUnUm9CyiExtxQhcGmlN97lw4F2qswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzQvOUQ0OUJEMEIyODg0QzZEQzUwODVDMUE2OTRERjdCOTcwRTA1REFBQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25VbTlDeWlFeHR4UWhjR21sTjk3bHc0
RjJxcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x
OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvNC85RDQ5QkQwQjI4ODRDNkRDNTA4
NUMxQTY5NERGN0I5NzBFMDVEQUFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1rM4sfD77mW8zOa4/Z5
JIoVIwDLFkuPbZCObON4Mp+FpRMVd0PVYUJG/f5sFy8ufRwB/H68CecfjWlCIWOp
ZnYNgw4fTwiB1HqOJoGx8qaH7pforruz3ZK/f0paRkOrge2AnzdJiG2IRdKzBD+b
NpVdGtFY/xFPgQzIEk5zXd54/Khy2kb9RrBVwLJHiGpFYoEbj4/8S7fEv9Ogayfn
PLFZUya7bJQq0TdI8lBANXwy4Md0UEU4PevrUNjkkLciUDs/dCLcb2pGrzloZnzf
Lh7oEggMEE2u3KavwSRkKIZ8teYK72SjleMdGCNe6HbvB8VtiRmhjb9JU6nXz/nw
Cw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:55:46 2025 by rpki-client