Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
File: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft (raw, json)
Hash identifier: qLDtBDhHxNV4gq6fb2R+U6/OJcrjuSBd/C+D4XO3EuQ=
Subject key identifier: 60:7F:DE:6A:1B:28:A5:2A:6D:72:71:1D:24:7B:89:C0:4B:B6:81:12
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Certificate issuer: /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial: 52B14D4AE9EBB8AE8685B5A82D100384C5DAD884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
Manifest number: 8E
Signing time: Sat 28 Jun 2025 21:22:32 +0000
Manifest this update: Sat 28 Jun 2025 21:17:32 +0000
Manifest next update: Sun 29 Jun 2025 21:55:32 +0000
Files and hashes: 1: 4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl (hash: bYUQQNAJ5rgijHnqsYGqsHxXSMOx3+7r/tpOQ1TIcOg=)
2: AS215277.asa (hash: /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 21:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b1:4d:4a:e9:eb:b8:ae:86:85:b5:a8:2d:10:03:84:c5:da:d8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Validity
Not Before: Jun 28 21:17:32 2025 GMT
Not After : Jun 29 21:55:32 2025 GMT
Subject: CN=607FDE6A1B28A52A6D72711D247B89C04BB68112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:93:0c:4a:cd:39:59:f4:68:4c:2d:94:0a:
14:bb:c8:a5:4e:ae:10:b3:18:18:35:55:ad:87:2d:
92:d4:b0:13:63:ae:62:24:5d:32:a1:a2:1f:d9:5c:
89:34:da:17:4a:04:fe:1e:4b:81:67:17:c9:2c:20:
52:51:c6:1c:2b:6c:34:3c:7c:37:1f:4d:fd:7e:5e:
21:e2:b2:d5:f9:74:e5:ab:88:77:86:95:27:68:59:
97:6c:7a:a5:c4:3b:f1:58:57:cf:58:60:08:55:54:
2d:a0:61:52:d6:88:f9:d8:a4:a3:50:80:8f:2c:ff:
19:84:d0:36:bc:33:5b:79:13:3d:a6:78:ba:f5:39:
4e:cc:74:d5:41:be:b3:6f:d6:9b:e2:61:89:7f:28:
43:a2:8a:8c:a6:81:68:fc:6d:2a:d2:11:ab:02:f8:
d1:ea:3a:81:19:cf:a1:57:a4:65:55:d5:4a:0a:76:
05:f7:e9:05:00:a5:8f:47:3e:df:f6:4a:14:06:19:
aa:ab:1c:6e:57:6a:3d:25:fc:b3:f7:6b:19:72:83:
31:e6:c8:d2:d9:6a:4a:cc:32:74:16:f6:7e:7e:67:
91:80:4a:50:f2:04:d1:e6:c0:27:b2:3c:06:b4:42:
81:10:ba:0a:47:f1:0c:00:16:ab:45:c6:7d:60:e7:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:DE:6A:1B:28:A5:2A:6D:72:71:1D:24:7B:89:C0:4B:B6:81:12
X509v3 Authority Key Identifier:
keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b4:af:fb:db:50:8e:3b:b0:0d:93:0e:ed:0a:67:77:45:5d:
bf:fb:b8:41:d8:bf:86:93:19:b5:0f:33:fb:e2:b0:02:d7:3d:
c0:83:53:41:78:2c:c8:12:86:c1:dd:18:0d:0e:09:84:d4:62:
ec:42:45:5a:42:f1:08:06:a0:76:60:43:31:c7:2c:35:fd:0d:
68:8c:07:9f:33:dc:77:0b:6f:d5:90:78:c4:31:78:66:a8:27:
a2:a1:10:e1:21:f2:23:e9:c3:55:72:01:14:1c:78:9a:82:70:
5b:92:16:5a:2b:99:78:49:8b:53:fb:16:87:2b:53:e1:bf:86:
01:b7:0b:d0:6f:ec:85:d3:f9:30:0e:04:d8:35:9b:54:e8:f2:
7e:b5:54:95:83:a5:7a:3a:d3:79:79:e1:a8:dd:be:28:49:21:
db:e0:41:41:78:88:0b:99:ec:ca:97:31:55:a0:32:6f:8b:ff:
29:f6:45:e4:50:9c:51:2c:1d:24:d4:85:d7:4e:e9:b3:95:12:
5b:f3:63:cd:08:26:da:aa:3d:23:c6:71:9c:30:f8:97:8d:fe:
33:c1:df:4e:da:18:9f:a5:2a:c8:c7:b8:c3:31:76:0a:65:54:
43:42:55:f9:c2:d1:0b:55:ed:b5:ad:0a:18:f9:13:a3:4d:16:
0f:3a:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:57:39 2025 by rpki-client