Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: aSLYKgEgeWUo8DeGPRZyNxPN+VSl15Wj3dl777R1x7A=
Subject key identifier: 74:60:FE:B1:E4:B3:F0:7D:65:9C:79:2F:1C:FB:4D:17:A8:89:92:2D
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 631BACEEE86910ECC113106977005C7D1E2D3D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 019D
Signing time: Sun 19 Oct 2025 05:44:47 +0000
Manifest this update: Sun 19 Oct 2025 05:39:47 +0000
Manifest next update: Mon 20 Oct 2025 19:24:47 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: XGGlvB8C970gUbRHoGCl+mQ5CgTHpABErJFsOA1o4qY=)
2: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1b:ac:ee:e8:69:10:ec:c1:13:10:69:77:00:5c:7d:1e:2d:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Oct 19 05:39:47 2025 GMT
Not After : Oct 20 19:24:47 2025 GMT
Subject: CN=7460FEB1E4B3F07D659C792F1CFB4D17A889922D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:b5:46:36:99:b2:f9:e5:62:79:c0:65:b5:
23:2e:ce:d9:9b:16:b9:47:39:22:52:ac:1a:f4:1e:
59:32:ae:ed:4b:3b:07:83:49:38:37:18:33:68:cf:
84:66:c8:88:3e:46:de:59:02:8f:c8:46:91:5a:2f:
34:31:0e:c7:c3:34:3a:21:bd:34:05:9a:d3:21:ae:
96:fe:cc:7d:ca:33:88:18:79:86:de:d4:5f:8b:68:
67:80:b6:fd:a4:95:b1:eb:a8:58:1f:80:5b:3d:f6:
e0:a8:4e:c0:6d:ff:78:d8:fd:b4:bf:27:4f:46:4f:
93:f4:9b:5c:2f:bf:50:c3:d7:36:f9:6d:48:58:1d:
ae:cc:83:f9:31:0c:66:32:36:42:75:f8:c6:db:9f:
9d:db:e7:57:6b:73:ad:bd:a2:c1:e5:4d:0b:a2:7c:
ae:1a:cc:b1:55:c6:5a:f1:4b:ae:23:50:8b:62:78:
2c:da:48:ed:56:2b:eb:c3:ce:c9:a3:66:93:a6:12:
9e:e8:c4:52:80:ef:c0:b1:4c:0f:56:01:86:30:dc:
df:c5:5b:67:37:aa:de:48:d2:cd:24:39:fd:dd:a8:
98:c7:42:8e:8d:77:7d:ce:36:76:49:5d:a7:3d:a3:
dd:61:77:50:87:b0:4d:2e:45:05:c2:74:85:36:7b:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:60:FE:B1:E4:B3:F0:7D:65:9C:79:2F:1C:FB:4D:17:A8:89:92:2D
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9e:11:e2:84:af:24:27:b2:bf:b4:9a:13:64:ae:13:60:ff:
98:6e:67:8f:09:e9:07:f6:e6:7b:b3:d1:5c:1f:94:f3:6e:aa:
55:ab:c8:15:a4:b2:65:5c:1f:2e:e0:4d:78:e4:4c:54:a8:c7:
56:8c:54:57:dc:e0:55:a3:44:a4:ab:c3:c4:76:28:b1:15:12:
cc:9e:79:ca:66:95:b9:46:73:f5:a6:2b:34:a2:59:a0:e3:c3:
0a:ce:02:51:bc:41:d4:c3:07:56:ca:6d:4e:1c:2c:d7:58:a4:
b3:9f:67:f5:be:f2:c0:2d:6d:6b:1f:9c:ec:c0:14:af:00:bf:
da:cf:e9:16:1e:b5:c9:9e:40:95:aa:07:06:6d:75:f7:95:68:
e7:05:84:f1:c7:8d:0a:07:18:67:e5:6f:14:0f:d6:a8:17:7b:
2d:68:0e:90:7f:2a:4e:f4:dc:b7:60:64:56:c3:37:e0:7c:df:
04:21:39:b4:51:68:48:a9:c5:8f:75:41:aa:f2:97:45:9a:f9:
d8:87:93:68:3a:1b:21:73:49:4e:0a:e6:a3:18:fe:80:9f:b1:
77:3e:0c:6d:9f:8c:6b:df:c2:46:ba:a3:2e:98:e9:af:33:b4:
e9:c4:4a:e1:36:08:9d:42:02:b4:2f:c0:b3:d2:f6:7d:7f:e2:
02:cc:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:31 2025 by rpki-client