Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: 6ceK1MjzzYPCzC6bQL40cSGZF9J/0ohl4oozsLMkofo=
Subject key identifier: 9A:B3:1F:AA:DF:48:AF:B4:FF:2C:DC:55:69:E8:A7:8E:0D:09:96:EE
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 3D3918D54BD37248314AA6303C748725938A9517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 01E9
Signing time: Sat 23 Aug 2025 11:31:57 +0000
Manifest this update: Sat 23 Aug 2025 11:26:57 +0000
Manifest next update: Sun 24 Aug 2025 12:18:57 +0000
Files and hashes: 1: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: +PqHbCqPuW/iVMrRPM9CawOhhujUgh0ReCKQgmluI0U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:39:18:d5:4b:d3:72:48:31:4a:a6:30:3c:74:87:25:93:8a:95:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Aug 23 11:26:57 2025 GMT
Not After : Aug 24 12:18:57 2025 GMT
Subject: CN=9AB31FAADF48AFB4FF2CDC5569E8A78E0D0996EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:9d:1f:8c:8b:05:33:0c:70:9b:c6:d0:0b:
98:eb:9f:51:9c:8c:6a:97:d6:38:cf:81:62:26:35:
98:1f:63:e3:21:46:69:c6:6b:39:40:5b:2b:d9:b3:
7b:ea:46:12:33:55:88:ed:3b:df:c8:52:60:3d:eb:
8a:45:be:10:c1:5a:e4:c8:68:51:4a:75:45:1b:65:
19:25:39:f6:05:66:1f:40:d7:2e:ef:97:af:12:fa:
fd:d5:a5:b6:2b:f1:a6:89:ee:09:bd:86:97:49:e1:
d4:70:14:f5:56:4d:1b:5f:c1:7d:db:96:68:9b:ba:
d9:a8:a6:4d:c3:eb:86:41:f7:ef:fe:87:53:f4:d6:
f8:bd:90:cb:42:23:5a:7a:ef:3a:5e:b6:15:15:97:
bb:3c:4d:12:dd:d8:77:f3:fe:f7:32:53:fc:36:c3:
85:4e:e6:a1:c7:ce:7a:71:18:9d:fe:f8:48:f9:7d:
f3:d6:93:f0:b0:4c:a7:f3:e9:07:ae:0e:49:2c:05:
d9:4d:e6:fd:ff:c8:3c:ea:4c:14:2e:1e:15:84:d8:
93:d1:7e:05:a9:05:a0:64:4e:7b:ab:5e:11:f1:c5:
ee:19:80:94:50:ff:e7:2d:b6:a7:46:ac:71:1f:1e:
88:ba:2d:0e:57:d7:36:f2:19:bd:55:c1:55:44:8e:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:1F:AA:DF:48:AF:B4:FF:2C:DC:55:69:E8:A7:8E:0D:09:96:EE
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:37:b2:a0:41:2d:c4:49:87:bd:4b:49:62:cd:bb:13:30:
6e:5d:35:58:cc:00:ba:67:91:5d:40:63:02:7e:4d:a7:ef:ca:
b1:62:1a:6d:6f:ee:0d:31:04:31:e5:a7:65:49:43:2a:71:48:
5a:37:d7:0e:32:05:35:c0:8e:08:a2:8d:24:9e:81:93:84:72:
83:1d:64:36:d3:3c:de:a8:2e:4a:1e:bf:a3:0f:69:f3:0e:f1:
87:9e:dd:32:68:21:2f:ce:28:dd:ac:d8:b9:ba:46:0f:ee:fc:
76:4c:20:74:6e:89:17:8b:14:10:14:1d:96:2b:90:ff:44:ca:
63:2a:76:f3:1f:e9:9c:45:02:c3:a0:08:f8:a7:e3:1f:87:97:
21:21:ff:05:a7:d2:e0:ae:97:3d:89:69:df:0d:b7:5a:9d:fd:
83:dc:c7:31:86:2f:ef:94:a0:b0:da:d8:4a:05:b0:74:9d:83:
a0:1e:31:ee:ec:d8:ee:19:3c:8c:7d:85:e4:a8:af:c9:40:f3:
4f:55:20:41:f7:f3:58:e7:8a:10:c7:a0:66:e6:0a:4b:db:2c:
0b:4f:4d:38:cb:ca:18:a0:8f:14:50:52:a7:f1:15:98:ea:d3:
37:39:24:09:5d:df:3c:67:e4:67:35:8e:a4:bc:c1:81:d3:91:
6f:52:94:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:26 2025 by rpki-client