Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: zBWdPVSFigocDIgK0jZ25vwow4b/ee/PSVuYs+st85A=
Subject key identifier: 9F:C3:60:62:BD:16:1B:28:51:8F:DC:1D:00:80:FC:DA:4B:7C:9C:87
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 3A8CA0AB939C904B5D1B3E2508B47D699F9D3E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 0237
Signing time: Sun 19 Oct 2025 00:33:15 +0000
Manifest this update: Sun 19 Oct 2025 00:28:15 +0000
Manifest next update: Mon 20 Oct 2025 03:21:15 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: MLtuRFntd8WtfvGm81cIiFxGpmTZq3tZsODr9I6fJXM=)
2: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:8c:a0:ab:93:9c:90:4b:5d:1b:3e:25:08:b4:7d:69:9f:9d:3e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Oct 19 00:28:15 2025 GMT
Not After : Oct 20 03:21:15 2025 GMT
Subject: CN=9FC36062BD161B28518FDC1D0080FCDA4B7C9C87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:71:fe:fe:52:c4:7d:2f:f3:2c:26:7f:3e:
19:1c:a9:9f:d1:c5:10:3d:84:4d:fe:b8:f0:d6:ce:
23:99:66:7a:ce:68:5e:99:84:4b:01:64:d3:7f:17:
ee:b9:14:37:11:9d:32:5b:d8:9f:5f:8d:c8:04:51:
05:a7:11:94:09:e1:7b:44:c2:ae:5e:e2:13:ea:e6:
c4:94:e4:6b:90:b0:ad:b2:fe:76:2d:c8:52:e2:af:
0b:5c:b4:02:f1:43:e5:58:30:8d:35:d8:87:e1:ae:
2a:a4:c6:c8:b8:57:57:06:e9:02:57:b2:a0:5e:14:
dd:00:2a:6d:46:55:8f:5d:69:fc:45:88:d6:cc:09:
a8:db:32:e4:ba:8a:2e:43:66:e6:80:4a:5f:3a:ea:
87:7f:c4:58:d4:cf:88:f9:ed:34:9e:ae:dc:8a:48:
55:83:86:94:f9:ed:7a:53:c2:63:bd:62:87:5a:2d:
73:fe:bb:7e:4a:ed:90:13:e5:74:ef:bb:34:ed:25:
93:f0:2d:86:dc:5f:a8:33:b4:1c:28:0c:a1:5b:ca:
25:88:f3:c3:f1:a0:b1:8f:3e:d0:01:fd:4f:8b:88:
f7:85:28:f8:10:22:2f:ee:0d:3d:7d:fd:f0:8c:be:
24:6c:68:37:59:72:f0:67:ab:f7:17:ee:08:ae:d8:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C3:60:62:BD:16:1B:28:51:8F:DC:1D:00:80:FC:DA:4B:7C:9C:87
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e6:30:6b:0a:76:f6:a1:cf:18:51:d5:12:1d:6a:bd:13:37:
c8:14:6e:15:d9:02:e8:f8:68:1d:9e:7b:78:2e:d3:bd:d9:c9:
2f:3c:8a:4c:6b:b3:ae:76:b1:83:e9:35:e0:c0:bf:9a:93:04:
59:5f:79:9e:b9:77:fb:4c:42:fe:cf:bc:71:b2:6b:38:75:6c:
98:3a:18:f6:af:61:33:20:64:f9:26:73:ec:c0:fa:a8:93:7a:
54:5c:55:68:08:eb:4d:04:33:23:1d:fd:5a:85:98:72:45:1a:
ff:80:7c:39:7b:34:d2:11:d1:5e:38:59:00:c3:43:74:ec:87:
ac:69:0e:91:78:4e:ae:6e:9f:55:3a:a8:b5:3c:d1:5c:d9:b0:
b8:52:eb:0a:c5:7d:eb:95:36:be:b8:57:eb:c9:81:96:80:77:
85:2a:4f:03:c0:0e:10:4b:c4:90:b9:fc:6d:8e:26:b5:b3:f6:
29:79:98:e4:72:6c:61:f8:11:79:3d:bb:c0:c1:3a:5f:ec:9a:
01:40:1d:b5:64:e0:3c:61:12:b6:b2:20:37:c3:b8:ca:cd:d3:
b0:2d:67:63:84:8c:8a:79:3a:dd:bf:4e:01:ad:ca:23:be:ca:
5f:f0:e9:be:90:ae:ec:0c:bc:89:98:e9:bd:bc:98:a4:70:1e:
a1:53:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:01 2025 by rpki-client