Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: Fk8fx2QYe6WWG0rq9M4dwVnYOYl4sviEJQYkX2qhBSo=
Subject key identifier: E4:77:88:F8:63:44:6B:81:E7:21:6A:8C:06:23:4C:77:BD:8B:B9:39
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 2E8F91344DAAF7F5689CB658A8531946BE880EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 020F
Signing time: Wed 07 May 2025 04:32:51 +0000
Manifest this update: Wed 07 May 2025 04:27:51 +0000
Manifest next update: Thu 08 May 2025 08:23:51 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 06ZUKfeI0aztqfFi+sg/jkd6odd02gpDzwyx3bP7Jb0=)
2: AS215828.asa (hash: pljuqamxoFyrKyOB146Yq2hAbS4GhBcCYl/vXn6L4AI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8f:91:34:4d:aa:f7:f5:68:9c:b6:58:a8:53:19:46:be:88:0e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: May 7 04:27:51 2025 GMT
Not After : May 8 08:23:51 2025 GMT
Subject: CN=E47788F863446B81E7216A8C06234C77BD8BB939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:6c:d9:0e:8c:53:e7:4c:41:93:0f:4e:c7:
37:b1:c4:7c:e6:69:b0:33:4b:92:1e:73:c8:99:c8:
5e:c9:47:d9:6c:2e:92:6c:82:d9:87:6f:ce:57:4a:
0e:42:48:fc:ed:82:2e:6d:fd:d2:17:1f:93:55:07:
f9:f7:5e:8c:1e:d3:e4:b5:dd:82:a0:15:8e:c9:0d:
94:68:a1:27:d1:57:8c:ce:68:7e:ec:e8:7e:41:c0:
36:bd:28:a9:28:9e:5f:57:c3:52:13:db:52:39:29:
50:45:63:94:02:16:8f:bb:bb:34:22:6a:83:64:13:
19:cd:37:85:66:47:e3:96:f3:f4:e2:b8:f7:29:bb:
2a:4b:e0:54:a4:24:16:42:20:6d:7a:49:a2:a4:2e:
fa:7e:3b:a9:74:5b:c4:3b:60:87:af:d1:5e:9a:de:
19:db:ec:49:e0:54:7c:68:e4:60:f7:fd:ae:8d:24:
95:8f:d3:03:b1:7d:bd:dc:c4:02:35:78:a7:c9:50:
63:e8:b3:39:a4:58:e3:ee:31:07:a1:b5:ae:cc:8b:
7f:e7:8f:2e:31:52:43:c8:84:82:54:42:f0:38:72:
2d:3b:8a:be:02:55:2e:c6:91:7b:39:30:51:56:dd:
f1:81:11:00:4d:9a:d2:ea:b4:df:d3:7a:2a:a8:14:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:77:88:F8:63:44:6B:81:E7:21:6A:8C:06:23:4C:77:BD:8B:B9:39
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:01:6b:c1:1d:ae:78:05:ae:dc:68:68:f9:dc:3e:d7:33:9d:
15:e0:6b:89:93:0b:df:ea:bc:94:69:b8:bc:fa:cf:92:d6:ec:
46:53:d9:b8:90:b8:92:b0:ed:81:17:31:f6:28:65:a4:7c:6a:
1f:9a:83:53:cf:2f:eb:6e:55:19:a3:97:78:e0:19:02:bc:8f:
5a:7d:bc:b7:84:2b:2f:d8:39:50:05:30:28:29:60:c0:c2:f7:
42:db:96:8f:0b:0a:dc:4a:65:84:70:eb:8d:76:63:c6:bb:f1:
9e:6e:bd:b2:75:84:83:92:65:15:72:e7:38:fb:d9:f5:87:e4:
29:dc:47:b2:d2:48:36:5a:2f:6a:1c:09:8b:7d:28:05:eb:38:
6c:9b:8a:93:00:49:73:3f:b7:16:e7:c2:41:e2:0c:9f:58:86:
cc:62:d1:66:5c:4c:f7:98:d6:79:d7:fb:92:09:a7:46:04:f8:
7c:4f:44:c5:b7:2e:d2:6f:48:4c:68:ef:ff:9d:5b:35:9a:48:
d5:95:90:82:74:db:6e:42:9f:f8:aa:47:c0:56:7b:5d:59:af:
15:3a:0f:16:a7:f1:b3:f9:e9:f0:b4:aa:26:cd:9a:32:14:f8:
2f:2e:bb:9a:5b:de:2f:de:76:08:d0:42:e1:5e:07:9d:3d:46:
0c:de:53:3d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULo+RNE2q9/VonLZYqFMZRr6IDuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNTA1MDcwNDI3NTFaFw0yNTA1MDgwODIzNTFaMDMxMTAvBgNV
BAMTKEU0Nzc4OEY4NjM0NDZCODFFNzIxNkE4QzA2MjM0Qzc3QkQ4QkI5MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQy2zZDoxT50xBkw9OxzexxHzm
abAzS5Iec8iZyF7JR9lsLpJsgtmHb85XSg5CSPztgi5t/dIXH5NVB/n3Xowe0+S1
3YKgFY7JDZRooSfRV4zOaH7s6H5BwDa9KKkonl9Xw1IT21I5KVBFY5QCFo+7uzQi
aoNkExnNN4VmR+OW8/TiuPcpuypL4FSkJBZCIG16SaKkLvp+O6l0W8Q7YIev0V6a
3hnb7EngVHxo5GD3/a6NJJWP0wOxfb3cxAI1eKfJUGPoszmkWOPuMQehta7Mi3/n
jy4xUkPIhIJUQvA4ci07ir4CVS7GkXs5MFFW3fGBEQBNmtLqtN/TeiqoFPxVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU5HeI+GNEa4HnIWqMBiNMd72LuTkwHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE
M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgFrwR2ueAWu3Gho+dw+
1zOdFeBriZML3+q8lGm4vPrPktbsRlPZuJC4krDtgRcx9ihlpHxqH5qDU88v625V
GaOXeOAZAryPWn28t4QrL9g5UAUwKClgwML3QtuWjwsK3EplhHDrjXZjxrvxnm69
snWEg5JlFXLnOPvZ9YfkKdxHstJINlovahwJi30oBes4bJuKkwBJcz+3FufCQeIM
n1iGzGLRZlxM95jWedf7kgmnRgT4fE9Exbcu0m9ITGjv/51bNZpI1ZWQgnTbbkKf
+KpHwFZ7XVmvFToPFqfxs/np8LSqJs2aMhT4Ly67mlveL952CNBC4V4HnT1GDN5T
PQ==
-----END CERTIFICATE-----
Generated at Wed May 7 06:24:09 2025 by rpki-client