Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
File: B1138D02124FB2326CF3FB351AD3251A63BEC739.mft (raw, json)
Hash identifier: LjpC7/ST4A/EuxlXYidHjM4WGUN0qEPSa6HnqHoOZPs=
Subject key identifier: 4C:43:4D:7A:DF:7B:8A:FA:A8:A5:EE:88:06:36:2D:A3:14:63:2F:CB
Authority key identifier: B1:13:8D:02:12:4F:B2:32:6C:F3:FB:35:1A:D3:25:1A:63:BE:C7:39
Certificate issuer: /CN=b1138d02124fb2326cf3fb351ad3251a63bec739
Certificate serial: 4B3B6423B0F4F0A3DB04B4F62867FA2827EAE2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
Manifest number: 9D
Signing time: Fri 22 Aug 2025 18:36:56 +0000
Manifest this update: Fri 22 Aug 2025 18:31:56 +0000
Manifest next update: Sat 23 Aug 2025 20:07:56 +0000
Files and hashes: 1: AS198025.asa (hash: aKxAPg9z8/66IDJcaRXGNVFBVnxhV2LzxwWWytRG+Qo=)
2: B1138D02124FB2326CF3FB351AD3251A63BEC739.crl (hash: KaMCT+sRkXD/jL3dgtwfI73j0yeflD6Pbfc4V7SkBik=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.crl
rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3b:64:23:b0:f4:f0:a3:db:04:b4:f6:28:67:fa:28:27:ea:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1138d02124fb2326cf3fb351ad3251a63bec739
Validity
Not Before: Aug 22 18:31:56 2025 GMT
Not After : Aug 23 20:07:56 2025 GMT
Subject: CN=4C434D7ADF7B8AFAA8A5EE8806362DA314632FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:5e:db:e1:d6:81:d3:3a:69:6c:9d:ec:d5:
f2:19:bc:0f:0f:d9:85:63:a7:8e:33:67:5e:fc:db:
4a:41:14:d9:e9:5b:08:e0:17:4c:3a:c7:e1:29:57:
c5:62:94:ac:ec:e3:84:e3:42:0a:03:d4:8d:c4:3b:
ce:a0:85:64:ee:b2:38:69:83:46:77:81:d7:ae:df:
3b:de:76:20:5a:68:14:f8:ed:0f:ec:b9:f6:04:ff:
2b:00:f6:f2:35:e6:13:1b:0e:62:61:cf:52:30:32:
ca:b9:20:f7:4f:53:fa:17:3f:22:2d:36:ed:d8:fe:
d2:69:d6:c1:d6:6f:56:b1:b9:74:e0:f1:00:13:13:
f8:9c:b1:5c:e0:55:8d:bf:2a:e2:54:9e:b3:18:f9:
0e:46:a3:01:2d:bf:21:07:cd:a5:a4:4b:a4:52:8b:
a4:69:a8:1b:de:95:24:89:6c:95:13:c3:68:b6:a8:
1c:af:00:a7:d1:a1:e5:37:f9:05:ff:d7:0e:50:09:
ef:1e:62:5c:54:a8:f5:d9:33:87:f0:66:76:ce:d2:
54:ab:02:f0:5c:2b:61:fd:bb:30:e9:5d:c0:6a:01:
4f:87:10:5b:2b:1c:46:88:f5:7e:8a:61:bf:fc:fa:
ee:31:bc:24:aa:29:f5:8b:2b:92:17:4a:ea:8c:17:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:43:4D:7A:DF:7B:8A:FA:A8:A5:EE:88:06:36:2D:A3:14:63:2F:CB
X509v3 Authority Key Identifier:
keyid:B1:13:8D:02:12:4F:B2:32:6C:F3:FB:35:1A:D3:25:1A:63:BE:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRONAhJPsjJs8_s1GtMlGmO-xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/0/B1138D02124FB2326CF3FB351AD3251A63BEC739.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:65:fe:dd:15:db:34:59:3a:e8:57:93:c1:7d:3b:f4:b9:
6c:fb:80:ad:1b:59:88:7e:db:b2:40:f6:78:63:f6:cd:f1:a0:
f9:73:90:2f:e7:9c:71:ea:84:54:c4:d7:b5:36:25:b3:13:38:
14:f1:61:54:6d:da:85:20:8c:93:9e:35:e2:75:02:16:66:d3:
3e:11:a5:13:dc:c1:6a:bb:94:63:e2:12:ec:4c:03:2c:71:ec:
95:00:be:78:fa:3f:df:e6:4a:cc:ce:77:8a:00:02:f0:51:50:
3b:fc:7b:48:f9:f9:8a:cf:cc:60:33:17:e3:53:3f:68:65:bd:
4e:b5:72:a8:20:25:6d:70:05:c9:94:81:c8:6d:9d:95:dd:6a:
64:17:b4:3c:c9:8f:0c:6b:01:72:38:ca:e8:ee:d6:d0:36:4f:
76:e6:ee:c5:ff:73:e6:64:76:ad:e4:ad:7a:60:e5:55:14:77:
d8:5a:01:79:4f:2c:4e:13:ce:33:3f:04:c1:5a:bb:8b:3d:4e:
89:2e:52:fe:27:cf:e6:c5:b6:0f:80:da:3f:4e:c5:47:ea:16:
e2:8b:11:a4:4a:ce:3b:20:10:87:cb:d0:a3:ce:f6:8e:58:b3:
49:86:04:1e:44:77:63:cc:93:3c:55:e0:be:5d:79:08:1b:02:
2a:84:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:50 2025 by rpki-client