Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: U37sm4nNuMlSmIwmgz/s3YIKiGpl5D8lDGRgDk+kV+I=
Subject key identifier: 35:D7:7C:5B:88:99:F8:76:64:9B:88:FB:28:36:44:AE:AD:92:04:E3
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 43C858F42B1BBD22E87208919A7A386ECA706452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 019A
Signing time: Sat 28 Jun 2025 19:40:49 +0000
Manifest this update: Sat 28 Jun 2025 19:35:49 +0000
Manifest next update: Sun 29 Jun 2025 22:12:49 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: LnkJswJQP8bjay1PKlY1d7uGXz3CSQPcNNVywpKvxQs=)
2: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c8:58:f4:2b:1b:bd:22:e8:72:08:91:9a:7a:38:6e:ca:70:64:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Jun 28 19:35:49 2025 GMT
Not After : Jun 29 22:12:49 2025 GMT
Subject: CN=35D77C5B8899F876649B88FB283644AEAD9204E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:33:35:56:9b:09:9e:04:3a:76:52:c8:46:
85:5b:e1:ba:69:6e:10:8e:6d:56:ec:65:33:a8:0d:
ce:9f:a6:f5:d7:b9:63:f8:9d:02:b8:11:67:5e:d9:
c2:25:54:fa:e4:34:31:59:10:73:60:9c:95:61:8f:
cf:d1:5b:2c:ae:b5:61:28:6a:51:2f:16:c8:a0:f2:
26:ff:13:5c:4e:41:bc:0e:a8:45:20:8d:3e:8f:b0:
3f:b2:bd:c7:68:e9:d4:45:64:d6:a4:d4:2c:86:cd:
b4:dc:58:ef:fe:25:73:6a:b3:3e:b8:db:92:7b:b9:
24:41:49:c3:a7:4c:4d:34:68:3b:0d:95:f8:7e:09:
8a:8b:1f:4f:73:5d:80:63:d0:9d:f7:19:d5:4d:d0:
a4:2c:de:da:75:32:bf:fd:2c:6b:6a:70:1c:15:5e:
68:8f:c3:36:f0:24:f2:20:db:f8:69:c0:d3:ec:f1:
95:be:81:dc:dd:ef:b1:62:92:d1:dc:01:89:d9:22:
61:92:37:4f:b4:5b:88:40:9b:56:f7:6f:21:ec:1c:
3e:41:21:a4:fa:ed:94:e9:17:4f:15:54:ad:50:fd:
90:11:33:3e:2a:01:b4:f1:78:eb:51:6c:b5:0e:60:
89:3c:22:50:5a:5c:0a:42:0e:62:65:0d:2a:3a:4f:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D7:7C:5B:88:99:F8:76:64:9B:88:FB:28:36:44:AE:AD:92:04:E3
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:be:c8:7f:b6:f7:26:82:a4:8f:99:f3:b0:98:68:09:47:09:
fd:6e:f8:d1:e1:28:69:ae:7c:b1:eb:ab:db:fd:72:7c:51:fa:
88:2e:d6:15:03:d8:fa:9d:a4:5a:57:dc:d8:af:1e:f4:29:43:
6b:5f:e1:61:ad:29:23:84:bf:af:c7:60:83:c3:65:8d:16:df:
8b:02:e5:d0:d0:c7:d8:ee:8d:93:4a:13:27:4f:86:21:1d:b6:
4e:3f:15:6d:ec:4c:81:f7:0d:66:60:ae:fb:b2:e9:86:f9:d7:
29:61:28:64:65:0e:98:ee:b4:82:60:5e:89:7b:98:e7:ff:5e:
eb:76:31:5a:ce:c2:f2:3c:ce:bb:a5:b4:d7:df:15:72:3d:d3:
54:71:7a:e6:94:e0:7d:79:a1:c8:d6:c3:60:6b:8f:5d:18:59:
f6:c2:2d:cb:a9:0a:2b:f1:0d:84:20:a0:eb:27:b9:d9:70:a4:
ec:77:d5:18:71:1e:0b:1a:0b:e9:16:a2:05:7f:0d:75:38:67:
54:68:74:3c:ed:6a:7e:2e:df:17:79:40:c0:38:1d:a0:65:12:
da:81:56:76:8c:9c:fb:4c:13:c6:14:2e:b9:eb:66:f8:fa:83:
78:42:f2:be:f1:c1:16:0a:f7:55:ec:5d:c6:71:79:c4:34:c1:
9c:14:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:20:28 2025 by rpki-client