Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: +ufIQJz41OVHI93ubcM22WAl3/JDAz32H+0KXH9l/qs=
Subject key identifier: FA:83:A5:88:10:D2:A2:1C:82:C5:D2:0D:D8:25:65:68:77:1F:D9:64
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 5F184C5316B5E31A260E19FD7E02BA635CF641FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0136
Signing time: Sat 23 Aug 2025 10:51:48 +0000
Manifest this update: Sat 23 Aug 2025 10:46:48 +0000
Manifest next update: Mon 25 Aug 2025 00:56:48 +0000
Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 51p3S1pxDY4t2+mL/X67Ml6A0T6GsbFrO6cQuYv/roo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:18:4c:53:16:b5:e3:1a:26:0e:19:fd:7e:02:ba:63:5c:f6:41:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Aug 23 10:46:48 2025 GMT
Not After : Aug 25 00:56:48 2025 GMT
Subject: CN=FA83A58810D2A21C82C5D20DD8256568771FD964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:23:78:f3:7c:ae:40:50:7c:37:0a:89:1e:
cb:a1:33:fd:8e:82:19:dd:cc:11:bb:a4:d1:3f:61:
fa:4a:d8:1b:98:ed:5e:db:81:5a:79:4f:ee:87:b5:
e5:45:01:8c:05:a7:f9:16:d9:8a:e0:ee:d2:c1:e8:
90:50:37:dc:8d:09:3f:9e:0f:87:8b:a8:28:d2:3b:
eb:78:76:9e:1f:a2:8b:bd:cd:c1:c9:be:f2:94:c5:
3f:d0:57:6b:0f:54:22:f9:23:c1:6b:af:ac:f5:1f:
22:3d:e3:99:8d:b1:12:0a:e5:53:c4:6e:bd:f6:1c:
4c:52:45:f4:9e:66:8c:dd:37:a9:8a:ec:b5:bf:04:
99:40:00:13:41:10:53:ae:34:af:15:eb:a3:cd:6b:
69:8d:b6:4b:f5:5a:a1:54:42:33:43:65:12:d2:a7:
61:0f:79:8e:80:77:99:c9:82:4c:42:38:7f:70:81:
7a:25:15:08:21:99:32:1c:4c:56:ff:61:e3:f4:b2:
56:e3:cd:ad:13:1b:44:a3:d5:e2:dc:11:e5:9b:6f:
26:79:26:63:56:6c:9d:6a:30:87:08:60:22:62:22:
56:2d:7d:84:81:af:fb:1e:22:0d:e5:ad:f0:f3:83:
52:d2:07:cc:86:8d:da:93:0e:d1:45:98:6c:95:55:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:83:A5:88:10:D2:A2:1C:82:C5:D2:0D:D8:25:65:68:77:1F:D9:64
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d2:99:33:36:c8:d3:84:a4:95:14:35:bc:08:c0:8c:74:71:
0a:bb:b4:7c:6f:36:23:af:51:42:f1:b4:3c:4f:93:b0:be:08:
7e:23:3c:19:2c:70:4c:95:f0:96:b3:9d:ce:1b:50:b9:ac:73:
58:bd:b1:d6:ab:7e:0c:69:49:34:8a:23:f9:40:94:78:43:52:
ba:40:ee:0a:15:72:f1:14:8c:a4:31:20:04:95:4c:68:87:4f:
ef:22:95:fc:e3:cd:97:25:ce:14:1c:5f:8c:a0:01:06:40:c6:
e0:c0:05:6a:62:16:d7:34:a0:2a:23:a8:47:0e:d6:b4:17:9e:
7b:5d:19:3e:ca:6d:46:de:af:c3:01:f6:2b:33:de:0c:8c:4f:
ff:e0:47:e8:ce:9a:a3:01:18:bb:47:a3:2e:13:c1:d6:23:b0:
f6:0b:e1:f5:c7:7f:36:a9:e9:f2:9c:ab:85:1e:3a:8f:9e:d5:
ee:e3:46:20:21:dd:89:3f:4d:2e:61:fc:0f:43:2e:73:0c:d0:
c3:16:5e:7a:90:7c:cb:4b:9e:55:6d:fd:bb:3c:14:a8:d6:e0:
aa:ee:7b:94:79:d6:74:e0:3c:b8:a1:a3:e4:96:6a:52:99:bc:
da:d7:e4:1d:3c:f6:10:80:42:7a:cd:b3:01:ca:87:f0:84:0f:
79:38:66:e8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXxhMUxa14xomDhn9fgK6Y1z2QfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz
NDcwNTRmZDAeFw0yNTA4MjMxMDQ2NDhaFw0yNTA4MjUwMDU2NDhaMDMxMTAvBgNV
BAMTKEZBODNBNTg4MTBEMkEyMUM4MkM1RDIwREQ4MjU2NTY4NzcxRkQ5NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2SN483yuQFB8NwqJHsuhM/2O
ghndzBG7pNE/YfpK2BuY7V7bgVp5T+6HteVFAYwFp/kW2Yrg7tLB6JBQN9yNCT+e
D4eLqCjSO+t4dp4foou9zcHJvvKUxT/QV2sPVCL5I8Frr6z1HyI945mNsRIK5VPE
br32HExSRfSeZozdN6mK7LW/BJlAABNBEFOuNK8V66PNa2mNtkv1WqFUQjNDZRLS
p2EPeY6Ad5nJgkxCOH9wgXolFQghmTIcTFb/YeP0slbjza0TG0Sj1eLcEeWbbyZ5
JmNWbJ1qMIcIYCJiIlYtfYSBr/seIg3lrfDzg1LSB8yGjdqTDtFFmGyVVZdLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+oOliBDSohyCxdIN2CVlaHcf2WQwHwYDVR0j
BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5
YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS
d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l
YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG
NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9KZMzbI04SklRQ1vAjA
jHRxCru0fG82I69RQvG0PE+TsL4IfiM8GSxwTJXwlrOdzhtQuaxzWL2x1qt+DGlJ
NIoj+UCUeENSukDuChVy8RSMpDEgBJVMaIdP7yKV/OPNlyXOFBxfjKABBkDG4MAF
amIW1zSgKiOoRw7WtBeee10ZPsptRt6vwwH2KzPeDIxP/+BH6M6aowEYu0ejLhPB
1iOw9gvh9cd/Nqnp8pyrhR46j57V7uNGICHdiT9NLmH8D0MucwzQwxZeepB8y0ue
VW39uzwUqNbgqu57lHnWdOA8uKGj5JZqUpm82tfkHTz2EIBCes2zAcqH8IQPeThm
6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:14 2025 by rpki-client