Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
File: DBF2E4592337DE1FB3E3561363D60691673B5746.mft (raw, json)
Hash identifier: W0guCgW6crl71SEhF+s/n9vkqZgha+LtfWv0rjkQ5sA=
Subject key identifier: 3E:D7:4E:74:26:E1:FF:23:03:0C:61:94:AA:02:0D:47:58:09:03:95
Authority key identifier: DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
Certificate issuer: /CN=dbf2e4592337de1fb3e3561363d60691673b5746
Certificate serial: 7AC3595D078271D89DABE4356E9DC1F0DE2E0A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
Manifest number: 69
Signing time: Tue 04 Nov 2025 13:04:30 +0000
Manifest this update: Tue 04 Nov 2025 12:59:30 +0000
Manifest next update: Wed 05 Nov 2025 13:17:30 +0000
Files and hashes: 1: AS51087.asa (hash: l7LNnmz1QckR3La+b387Ld8acyUBXDTuETQJO3EOmXg=)
2: DBF2E4592337DE1FB3E3561363D60691673B5746.crl (hash: EJAMk+Ucql2e7OVUnwo7gJHrEb9EDQO+kIhiCrB3xPc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c3:59:5d:07:82:71:d8:9d:ab:e4:35:6e:9d:c1:f0:de:2e:0a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf2e4592337de1fb3e3561363d60691673b5746
Validity
Not Before: Nov 4 12:59:30 2025 GMT
Not After : Nov 5 13:17:30 2025 GMT
Subject: CN=3ED74E7426E1FF23030C6194AA020D4758090395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:6f:76:c4:af:ab:be:c2:29:cd:85:a9:16:
e4:a1:96:31:29:26:8a:af:1a:29:4e:b9:5c:0c:97:
f3:56:dc:54:55:d2:51:f4:41:b6:eb:0e:cf:f6:f2:
f3:0d:ad:39:35:39:cc:38:d3:2d:92:ea:57:94:5a:
92:7d:91:8d:19:32:82:c7:9b:f2:2a:3b:cc:e4:3e:
a3:da:0f:fc:12:ba:67:5b:f9:9b:fb:88:2a:73:a7:
65:75:30:15:3b:df:14:75:16:e7:52:b3:36:61:41:
ef:79:b4:69:dd:d3:a9:6e:72:3d:92:7e:89:be:dc:
a2:2d:e9:7d:e2:3c:a6:3c:7c:6d:e7:b1:82:68:0b:
33:5d:f0:2d:fa:ae:f4:c3:8c:ca:2e:ac:9d:fd:e4:
80:4c:66:75:90:58:e5:a4:5d:b7:21:cb:10:86:76:
87:47:60:28:80:af:05:2e:2c:a3:7c:d9:af:e3:aa:
17:95:f2:29:d8:9d:ac:d0:4d:ff:bf:11:ea:e7:03:
4a:c8:1e:ab:ea:ff:a7:ab:88:c1:8a:f5:23:71:7e:
00:d4:e3:9a:23:60:4b:33:31:e1:72:6d:34:48:4b:
42:68:49:16:90:75:4a:a9:20:f6:bf:0f:b9:02:8e:
5d:e7:29:51:d1:54:7c:75:23:77:35:bf:d8:c9:50:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:4E:74:26:E1:FF:23:03:0C:61:94:AA:02:0D:47:58:09:03:95
X509v3 Authority Key Identifier:
keyid:DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:42:dd:0c:aa:59:c6:3e:b1:9b:01:b8:c2:d6:3b:5d:ce:e0:
7a:21:53:ba:ed:d7:92:a6:b1:77:ea:60:95:1e:15:02:13:fb:
93:01:12:70:df:4e:3b:27:6c:63:96:ac:34:0b:16:56:6c:5e:
e9:ed:7c:96:ee:2f:02:d3:a9:3d:67:3b:b5:74:66:ac:d2:04:
1b:3c:d3:63:fe:7b:66:b9:1e:61:6e:03:9c:b8:94:79:5a:2e:
15:24:15:15:fe:3e:f7:c7:5c:e2:88:80:68:6a:e9:b6:4c:8c:
ae:fe:17:78:21:2c:93:ba:bd:9c:6a:c8:ef:65:fd:1f:b3:06:
7d:da:d0:42:7a:a1:58:9e:30:90:6d:0d:aa:52:1d:6b:de:24:
f4:80:8f:8c:4a:b1:8a:0f:45:02:40:df:1f:23:ca:a6:93:1a:
23:e3:45:93:22:0f:ae:ce:d6:1d:a1:7f:ec:6e:77:09:07:0a:
d3:78:73:5d:b8:a5:50:d5:1e:d3:a2:23:3a:a8:ba:bb:95:fa:
12:ab:e9:88:1c:86:92:1b:fa:b6:75:0a:a9:70:78:a1:e8:15:
e1:81:9f:57:9b:97:4b:86:0d:aa:c6:e2:21:79:8f:a9:c3:ff:
a6:ff:78:36:cc:8e:f0:8b:69:fa:aa:7f:49:b6:59:a6:6c:d6:
36:c3:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:13:51 2025 by rpki-client