Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: OhV8QrXvHaKJ38RSS6hpLQRYsgGnP2zsG6BEF79SGJw=
Subject key identifier: 43:C2:EE:5B:6D:83:CF:A2:2A:35:71:5A:06:75:AC:AA:45:0A:CA:A0
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 78C1E33A119F53DB9CB73E76CFE51D8DF7784C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 024D
Signing time: Tue 04 Nov 2025 14:29:28 +0000
Manifest this update: Tue 04 Nov 2025 14:24:28 +0000
Manifest next update: Wed 05 Nov 2025 17:42:28 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: 8BfeqUgaIsgaeUiKUqNkEnUaa6H3AtTIAXGwkUtVW2o=)
2: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c1:e3:3a:11:9f:53:db:9c:b7:3e:76:cf:e5:1d:8d:f7:78:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Nov 4 14:24:28 2025 GMT
Not After : Nov 5 17:42:28 2025 GMT
Subject: CN=43C2EE5B6D83CFA22A35715A0675ACAA450ACAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:27:ff:10:98:12:c3:48:f0:4a:0d:65:3b:
64:32:ee:2c:f4:83:de:a8:4c:2d:86:98:df:12:81:
a6:78:39:23:07:f1:9d:97:0f:9d:05:b8:fb:49:b3:
4d:9b:d5:49:17:73:c3:21:63:2d:7e:24:f5:3b:bc:
e0:e4:26:8a:2d:8a:d6:b7:e6:ca:1c:f0:b5:5a:b1:
f7:22:02:ea:66:81:97:3f:07:92:fc:91:af:a8:53:
37:ea:b1:35:6b:6e:83:b0:3d:b5:e1:4b:c9:58:0b:
d5:2c:6b:c5:d7:18:0d:52:d2:19:04:03:9c:fe:ce:
e3:fc:38:4e:88:ff:ba:54:a6:9d:ea:9a:50:80:b7:
4b:62:6d:c8:01:7f:74:51:3a:28:38:21:d2:29:bb:
df:5d:8e:7e:a9:a4:13:c5:55:b8:38:82:ba:e8:2c:
71:9f:7b:01:0c:13:f1:62:fc:1c:53:85:1b:a9:fa:
c9:d6:1c:25:ff:69:23:c7:45:ac:6e:84:46:13:ce:
73:cd:a1:e7:98:31:77:3b:4f:4b:d4:ab:82:bc:95:
8f:24:c7:3f:24:08:36:07:00:37:89:58:1f:3b:43:
c7:6a:62:ac:80:7b:e2:64:e3:f1:66:d9:38:b6:f0:
0a:f1:6c:27:5d:8f:a3:bf:bd:62:c1:4a:1a:0e:bd:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:EE:5B:6D:83:CF:A2:2A:35:71:5A:06:75:AC:AA:45:0A:CA:A0
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7e:65:c4:e4:82:96:1b:d6:77:e1:92:fb:91:73:b2:ec:20:
f5:af:07:1e:18:a1:1d:a2:90:54:b0:69:8d:0b:6d:ad:c9:81:
5c:09:62:5e:6f:26:13:61:c6:a2:92:a7:a0:5e:54:dd:1a:5e:
aa:d2:79:10:df:e3:20:1d:06:47:45:6c:a5:41:f7:6b:14:f1:
46:06:83:25:32:83:09:83:e2:4e:5d:2b:ad:5c:c8:ce:8d:00:
c1:9d:fe:9f:50:5a:1b:06:d7:ef:b5:d6:73:42:88:b0:78:12:
04:2e:7d:43:03:93:4f:d1:ac:5b:ea:fa:3c:3a:dd:02:6d:3b:
ab:b3:31:3c:d6:97:6e:90:32:76:dc:83:55:d2:dc:cf:59:f9:
e6:a1:05:ff:a4:d8:bc:6e:d1:25:0f:3a:d1:ad:73:d9:68:76:
1b:1f:c9:10:7d:40:d3:8d:32:42:25:84:a2:cf:62:64:9c:d6:
af:3b:bb:bc:27:05:28:fa:74:21:68:9a:5d:bf:6e:ef:5f:36:
d9:91:37:a6:02:3f:e3:58:80:3a:3d:99:4d:e1:b8:b4:c9:6d:
70:85:ee:6e:83:20:65:56:a2:fd:ef:0c:43:27:19:57:1b:3a:
a2:db:41:5d:b4:c9:c2:d3:bf:b2:ce:1b:58:d0:75:b5:59:a6:
0e:74:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:03 2025 by rpki-client