Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier: wyO+UXKO4ipvDjb4/bGZdCQmZw2ub+YO3+MOM0NbbLc=
Subject key identifier: 69:A8:A5:32:00:01:BD:E8:70:A6:6E:47:B5:0A:47:CC:9F:F5:7E:CD
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial: 49CCC02FC3EAB8FF9A09759E5E13A3DE64BAB3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number: 01AA
Signing time: Sun 29 Jun 2025 02:37:23 +0000
Manifest this update: Sun 29 Jun 2025 02:32:23 +0000
Manifest next update: Mon 30 Jun 2025 02:55:23 +0000
Files and hashes: 1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: Ph/uDj2vF2bLEo8FCST/ifa8yf87mjrHbIv+qRPMmOY=)
2: AS215849.asa (hash: WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cc:c0:2f:c3:ea:b8:ff:9a:09:75:9e:5e:13:a3:de:64:ba:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
Validity
Not Before: Jun 29 02:32:23 2025 GMT
Not After : Jun 30 02:55:23 2025 GMT
Subject: CN=69A8A5320001BDE870A66E47B50A47CC9FF57ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:df:1c:5e:e1:ff:90:52:19:9a:60:56:a5:38:
68:6a:1d:df:98:8c:56:33:e8:f2:b9:be:b3:71:4e:
1d:49:6e:47:04:26:1c:8b:ca:1a:ea:b5:04:b7:af:
c8:12:77:94:18:0a:07:82:ab:87:10:9d:df:14:36:
09:5d:3f:48:4e:58:79:06:7a:bb:15:a5:79:df:c6:
9a:00:ea:06:9a:83:40:b8:83:c5:31:d0:bb:a5:4d:
98:67:d9:15:f8:8c:27:28:2b:62:35:db:7f:fe:47:
a3:a1:56:7c:97:cf:17:e1:55:4a:b9:d6:f1:73:bc:
57:21:ab:22:6c:7e:f2:6e:b4:66:d8:fa:8e:be:85:
a9:37:0c:c1:ec:22:61:28:94:d4:c2:7f:7d:02:2c:
26:e8:fb:6e:02:7a:df:cb:97:29:9c:03:60:19:8c:
e9:1b:27:db:db:0b:90:70:b4:4f:c7:26:2c:52:1f:
11:8d:df:56:29:20:93:1c:9f:32:a2:a7:61:a4:a4:
af:43:df:8c:ad:72:13:58:f8:8c:6b:c7:3b:0e:fc:
be:75:c0:6b:46:9f:a9:68:b5:3b:bd:6c:97:88:c3:
c6:71:56:a0:88:5e:53:12:b9:f1:03:dd:8c:2c:c2:
7f:ba:52:35:ad:cc:0b:91:d4:7f:50:4f:61:4e:39:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A8:A5:32:00:01:BD:E8:70:A6:6E:47:B5:0A:47:CC:9F:F5:7E:CD
X509v3 Authority Key Identifier:
keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:59:45:23:03:47:7c:5f:86:3e:7b:ae:07:33:b0:24:b2:ff:
38:a4:9a:0a:89:74:f1:f4:9b:16:04:98:7a:01:22:52:41:a9:
c2:c9:ce:5d:0e:a7:91:73:87:fc:28:ea:9a:8d:43:3d:ff:16:
7f:66:72:2a:21:7f:1d:d5:a1:aa:89:04:6b:7b:f0:6f:d3:27:
e7:6d:2a:08:b7:5a:7d:ea:db:b9:ca:63:27:1c:5a:f4:c5:27:
9a:55:d2:c7:bc:0c:1d:94:17:d4:eb:37:60:ef:09:ed:10:85:
ed:54:67:5a:1d:0d:ec:6e:5a:9d:ee:f7:6a:b4:2d:90:e3:83:
d9:b2:ef:bc:e9:c1:5d:55:03:11:ff:c4:91:42:db:4a:0b:b6:
eb:24:fb:8a:67:c7:29:06:18:63:5b:c1:c2:5e:df:88:a9:8d:
45:58:a0:73:71:d8:ab:1f:54:7b:6f:08:a0:d5:2c:a6:80:e8:
47:22:47:82:8f:a1:76:ea:bf:ab:35:c3:3c:d9:db:4a:1d:6f:
e3:41:28:c4:47:3a:aa:24:cb:23:15:e2:95:5f:73:a5:bf:20:
8e:7a:98:02:20:8b:51:26:ad:69:c3:e5:27:9a:83:e3:14:dc:
e4:54:ed:6e:e7:e4:e5:f3:e5:fa:8d:e0:56:d0:8d:e4:f8:42:
92:38:99:62
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSczAL8PquP+aCXWeXhOj3mS6s/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2Q3MDU5NjM4NDExZTMyMzFlNzU5ZTc0YTgxM2JmOTM3
NjIwOWU3NzAeFw0yNTA2MjkwMjMyMjNaFw0yNTA2MzAwMjU1MjNaMDMxMTAvBgNV
BAMTKDY5QThBNTMyMDAwMUJERTg3MEE2NkU0N0I1MEE0N0NDOUZGNTdFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD63xxe4f+QUhmaYFalOGhqHd+Y
jFYz6PK5vrNxTh1JbkcEJhyLyhrqtQS3r8gSd5QYCgeCq4cQnd8UNgldP0hOWHkG
ersVpXnfxpoA6gaag0C4g8Ux0LulTZhn2RX4jCcoK2I123/+R6OhVnyXzxfhVUq5
1vFzvFchqyJsfvJutGbY+o6+hak3DMHsImEolNTCf30CLCbo+24Cet/LlymcA2AZ
jOkbJ9vbC5BwtE/HJixSHxGN31YpIJMcnzKip2GkpK9D34ytchNY+IxrxzsO/L51
wGtGn6lotTu9bJeIw8ZxVqCIXlMSufED3Ywswn+6UjWtzAuR1H9QT2FOOZHDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUaailMgABvehwpm5HtQpHzJ/1fs0wHwYDVR0j
BBgwFoAUfXBZY4QR4yMedZ50qBO/k3YgnncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzYvN0Q3MDU5NjM4NDExRTMyMzFFNzU5RTc0QTgxM0JGOTM3NjIwOUU3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZYQlpZNFFSNHlNZWRaNTBxQk9fazNZ
Z25uYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvNi83RDcwNTk2Mzg0MTFFMzIzMUU3
NTlFNzRBODEzQkY5Mzc2MjA5RTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1lFIwNHfF+GPnuuBzOw
JLL/OKSaCol08fSbFgSYegEiUkGpwsnOXQ6nkXOH/Cjqmo1DPf8Wf2ZyKiF/HdWh
qokEa3vwb9Mn520qCLdaferbucpjJxxa9MUnmlXSx7wMHZQX1Os3YO8J7RCF7VRn
Wh0N7G5ane73arQtkOOD2bLvvOnBXVUDEf/EkULbSgu26yT7imfHKQYYY1vBwl7f
iKmNRVigc3HYqx9Ue28IoNUspoDoRyJHgo+hduq/qzXDPNnbSh1v40EoxEc6qiTL
IxXilV9zpb8gjnqYAiCLUSatacPlJ5qD4xTc5FTtbufk5fPl+o3gVtCN5PhCkjiZ
Yg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:56:24 2025 by rpki-client