Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: m09duHZRZOr4nNaqgKJRUXga+YbH6et3LBZPslZDpE4=
Subject key identifier: AD:04:A4:74:85:A9:BF:EC:02:6B:B0:08:7E:05:6F:40:2F:B5:EE:79
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 232BBEA8EF410ACA61D5BBE619DC0A6A0172C57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 01CD
Signing time: Mon 04 Aug 2025 07:58:39 +0000
Manifest this update: Mon 04 Aug 2025 07:53:39 +0000
Manifest next update: Tue 05 Aug 2025 10:32:39 +0000
Files and hashes: 1: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: adPdPiTPFdJRMBYJNW4szfJmtjANASffAkH11vSHTHE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2b:be:a8:ef:41:0a:ca:61:d5:bb:e6:19:dc:0a:6a:01:72:c5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Aug 4 07:53:39 2025 GMT
Not After : Aug 5 10:32:39 2025 GMT
Subject: CN=AD04A47485A9BFEC026BB0087E056F402FB5EE79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:4a:64:ce:97:5c:01:9f:33:ab:0b:92:a5:
82:96:13:06:a2:b4:4e:96:ff:59:20:01:a3:aa:0d:
46:95:15:72:dc:9b:9a:9a:2f:2b:ef:d5:76:60:80:
85:e8:5b:ca:b1:2c:6c:45:b3:0c:38:bb:3d:60:65:
50:eb:2b:36:2b:7e:a1:50:f8:c3:ce:36:8b:27:29:
b9:4d:cc:35:e0:af:cc:79:f0:e6:b5:a8:37:0f:fe:
2d:cf:7e:58:70:22:11:f7:34:f2:34:3f:35:44:c8:
9e:01:02:0a:4f:39:d4:e1:68:8b:cf:09:71:49:ad:
21:05:6c:4d:06:2e:f3:68:13:0f:68:39:6b:1b:2b:
ba:97:bb:6b:6d:73:3d:b7:6d:2b:d2:a4:a9:ea:d4:
90:db:ca:51:a0:b8:00:96:2f:8d:9d:0f:77:8b:81:
9c:3c:59:92:54:6d:70:f8:a1:93:9e:0b:a4:bd:9a:
2e:5c:cd:b1:3e:9d:2b:2f:02:b1:2d:86:83:7d:af:
1b:a3:b5:b0:ae:6c:7f:82:de:ab:ab:7d:fa:0c:3a:
13:81:78:da:f7:57:18:9e:72:7c:d2:0c:10:ce:d1:
14:e9:4a:a2:4d:4c:ae:ea:70:16:dc:96:3c:8d:50:
52:71:cf:ab:fe:55:45:8f:9a:4b:c4:53:6d:b1:87:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:04:A4:74:85:A9:BF:EC:02:6B:B0:08:7E:05:6F:40:2F:B5:EE:79
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:39:0a:97:f5:83:40:02:56:5e:ce:7c:30:da:b7:22:fa:0f:
33:f3:f7:67:7f:f6:d6:be:ce:15:3a:32:29:c5:3b:1f:fb:cd:
43:04:a6:30:bb:4e:5e:49:19:22:f4:30:2e:4d:90:7d:1b:07:
07:49:f5:93:90:fe:ce:ce:12:b3:11:a5:20:29:25:5d:e2:a3:
eb:d1:eb:17:39:d8:02:98:a1:90:b6:0a:14:4a:e6:fa:aa:64:
b5:a6:ce:dc:0c:7f:9a:21:9e:33:16:12:2e:31:2e:71:6c:f8:
14:83:86:a1:2e:41:7c:f0:51:12:1c:ba:15:4a:be:0e:3a:ba:
b7:3f:0c:86:eb:c8:db:1c:9a:4f:2d:89:1d:5f:ef:45:56:99:
cd:e5:c9:05:09:4b:68:15:ca:5a:e2:6d:5a:06:52:16:85:d5:
8d:6f:5c:cb:e9:6b:0a:bd:57:67:48:9d:27:f4:15:69:0a:22:
54:a8:e7:6f:2b:85:34:c7:3f:a9:46:76:73:0b:7e:d0:b5:9b:
78:ed:f7:b5:ae:15:4b:97:84:b7:80:99:86:11:01:01:2c:62:
e6:32:36:30:18:4d:b3:41:5a:ae:e0:0b:1b:39:87:16:76:69:
de:a4:25:de:e8:63:32:60:68:b8:11:8b:d6:70:47:ef:4a:8b:
4f:86:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:02 2025 by rpki-client