Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: rlFAIZaCsNtwEQo5WVn2ao81MFAXOMR8X9620hShBqs=
Subject key identifier: 1A:74:81:74:58:04:37:DF:3A:3A:B9:D3:0D:CA:8B:AD:D1:63:F9:1C
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 2FDB7768E6BED8039C7E6CDB3E8C07E3243577D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: D7
Signing time: Sat 28 Jun 2025 16:19:51 +0000
Manifest this update: Sat 28 Jun 2025 16:14:51 +0000
Manifest next update: Mon 30 Jun 2025 07:47:51 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 9ebzG1ftD+MRShfe+d5zcXdq/6StKYPJhL58OIDKge8=)
2: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:db:77:68:e6:be:d8:03:9c:7e:6c:db:3e:8c:07:e3:24:35:77:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Jun 28 16:14:51 2025 GMT
Not After : Jun 30 07:47:51 2025 GMT
Subject: CN=1A748174580437DF3A3AB9D30DCA8BADD163F91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:57:3a:09:f9:85:a2:12:d8:f4:97:52:b9:
08:b5:48:be:57:bf:17:e7:e6:70:12:f6:a0:ac:60:
28:9f:6b:eb:37:0a:85:1a:dc:82:45:6e:e9:56:27:
c8:23:a4:44:6f:af:c0:a4:84:de:e0:4b:11:f1:64:
19:40:4f:a1:b4:8d:6a:5e:b1:89:27:0d:d8:fc:51:
54:c5:fa:e0:4e:49:51:b1:e6:ec:17:48:ba:f4:e2:
a4:a3:98:a3:28:4b:33:c6:97:4a:d1:66:8c:dd:d1:
fd:8e:c5:38:b5:c8:1f:aa:80:bf:99:89:08:ea:c5:
94:b3:76:b1:5d:33:66:4e:83:5e:30:91:b3:d0:0c:
82:98:af:12:3a:8c:d6:44:75:cc:91:4c:47:d9:ad:
2b:e1:73:86:d4:17:54:3d:63:a7:67:25:ff:93:6f:
e0:80:18:46:cd:90:fa:c3:65:79:4f:ee:a4:f8:8e:
55:be:19:6d:c5:46:3f:8e:ce:a8:33:ed:4d:d0:28:
a7:91:a6:56:f5:9b:0c:cb:e5:68:b3:9d:c2:69:29:
96:10:fd:39:90:b8:68:2b:63:c2:19:3e:58:bf:d9:
53:d5:e7:18:1e:fe:4c:ab:b3:d9:0d:98:57:a5:ff:
c5:ac:af:d2:a6:e9:5f:6d:bf:52:f6:c9:55:fe:97:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:81:74:58:04:37:DF:3A:3A:B9:D3:0D:CA:8B:AD:D1:63:F9:1C
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:42:27:51:f5:91:90:6f:c0:e7:b8:ee:84:4b:57:78:ec:d7:
5f:08:6a:e2:19:36:3d:0e:a5:3b:85:c6:06:5d:a8:f6:56:fd:
54:dd:17:19:e5:07:1d:6a:2a:c5:62:2e:f9:7b:9e:e9:72:ec:
96:ee:01:3a:23:53:95:d1:06:9c:32:14:77:a2:3b:d2:13:1b:
9b:f1:e7:e9:0d:13:7f:7f:f6:81:0c:76:77:82:02:3e:2e:98:
ee:dd:44:d2:10:c9:72:07:fb:d7:c6:91:1f:c4:dd:d4:8d:2a:
e1:6f:cc:38:bc:4e:1b:4f:1c:df:80:3b:d0:a1:30:08:21:e7:
9e:c6:b6:74:b6:72:d8:20:1d:23:80:2e:e4:e7:ee:67:e6:72:
c3:38:1e:d6:33:e3:92:1c:41:c1:47:2b:da:6b:7e:11:aa:33:
d5:2a:a3:08:32:11:9b:39:be:be:82:9c:10:fd:a2:97:d2:10:
ae:7d:95:8a:85:dd:8b:53:ac:f4:11:9d:b1:59:f5:83:0e:18:
70:3d:e4:33:01:83:33:0b:df:da:2a:ad:9a:7d:ec:4f:40:62:
f7:3e:69:c6:93:b6:32:c0:dc:48:3a:9e:e5:78:a2:59:2c:0e:
33:21:6e:ba:f3:c2:a7:e5:4c:73:a1:11:b5:fd:83:4a:3f:40:
6b:c3:cd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:59:46 2025 by rpki-client