Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
File: DBF2E4592337DE1FB3E3561363D60691673B5746.mft (raw, json)
Hash identifier: dRiHGB2jr6zzfJdEiINkjUcVf1IbQTiUsO96zsh7//0=
Subject key identifier: 1F:44:38:BE:3C:C5:D5:2B:92:5A:89:A0:17:02:0B:B8:25:0F:B2:38
Authority key identifier: DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
Certificate issuer: /CN=dbf2e4592337de1fb3e3561363d60691673b5746
Certificate serial: 153626D257DCE8A569EB7AD2E0139EFB66A0C875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
Manifest number: 08
Signing time: Sat 23 Aug 2025 04:54:12 +0000
Manifest this update: Sat 23 Aug 2025 04:49:12 +0000
Manifest next update: Sun 24 Aug 2025 06:20:12 +0000
Files and hashes: 1: DBF2E4592337DE1FB3E3561363D60691673B5746.crl (hash: bT03uCFatdjl4o/UL3Bl9cO9RYTqCXdoPXwSP9Hw2nM=)
2: AS51087.asa (hash: l7LNnmz1QckR3La+b387Ld8acyUBXDTuETQJO3EOmXg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:36:26:d2:57:dc:e8:a5:69:eb:7a:d2:e0:13:9e:fb:66:a0:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf2e4592337de1fb3e3561363d60691673b5746
Validity
Not Before: Aug 23 04:49:12 2025 GMT
Not After : Aug 24 06:20:12 2025 GMT
Subject: CN=1F4438BE3CC5D52B925A89A017020BB8250FB238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:5e:e2:90:0b:e4:ac:06:9e:ab:3b:42:82:
62:83:38:14:1f:f8:55:bc:b6:90:71:7c:6a:0a:98:
98:db:74:8d:01:af:88:b3:6b:45:12:bd:9c:5b:4d:
e6:b3:4f:e4:bf:95:6f:15:23:43:73:0d:15:b4:1d:
27:cf:71:96:fd:09:5a:78:df:00:04:60:90:a5:3c:
14:52:63:78:d1:0f:aa:c5:ab:73:db:10:66:b7:a9:
f7:ff:d3:f4:2b:f2:3c:fc:14:13:ff:96:78:70:4a:
10:2b:f8:a1:95:34:36:e4:49:be:26:88:ca:df:29:
cf:69:18:6d:37:c2:36:a3:a1:3c:97:83:4c:5b:98:
c9:5e:6d:95:e4:b6:23:45:dd:16:06:41:bd:3b:03:
f8:d2:1f:7d:f3:2a:42:8d:9d:5f:43:7f:61:8c:05:
86:24:9c:92:6a:82:2c:b3:4f:65:e9:f0:93:b0:c9:
8f:66:93:16:75:01:c2:f6:af:2f:31:dc:93:1e:af:
e1:6b:49:36:45:df:8c:34:0e:42:c4:05:1c:5d:2a:
a7:d3:71:72:71:7f:55:a9:83:96:66:e1:64:5d:23:
04:85:25:01:31:c2:09:8a:3d:4e:e7:bc:48:85:b6:
cc:7e:09:40:c6:02:5c:ab:36:e2:1a:05:ac:27:0f:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:38:BE:3C:C5:D5:2B:92:5A:89:A0:17:02:0B:B8:25:0F:B2:38
X509v3 Authority Key Identifier:
keyid:DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b3:02:d9:0b:97:63:f2:db:13:b0:65:a8:64:a5:08:9b:bf:
7f:bc:e5:dc:97:46:fe:41:98:6d:cd:f1:e6:7d:88:64:91:21:
f2:81:56:2d:4d:35:d3:7b:1e:3f:5b:b2:80:70:6e:74:eb:f8:
65:f8:a4:3f:e7:3f:df:bf:c7:d9:04:ee:f9:5a:f2:2d:c2:12:
c1:ff:95:ee:9b:74:ca:3b:84:c6:bb:9a:1b:e6:71:17:14:23:
fa:bf:3f:50:21:02:3e:c2:37:c7:d9:8d:d8:b4:90:c8:40:5c:
7b:3b:43:ee:29:c1:39:44:6a:a9:c0:2d:b3:f7:f4:f6:64:2a:
57:cf:6e:2d:e8:c3:c3:e0:c6:dd:33:40:d1:aa:d5:c7:94:e7:
46:26:b4:19:41:59:21:4c:5d:06:82:39:8c:36:ac:5c:4e:84:
44:16:ac:da:b0:4f:e5:19:c3:0f:cb:ef:ab:cc:12:f8:af:89:
c0:40:2f:d8:ac:c4:bf:92:f9:79:3d:9b:a7:ca:d3:7d:42:52:
e8:60:54:91:a7:98:f1:d8:77:16:f1:cb:6c:8e:f9:87:74:38:
d3:4b:09:83:75:c3:69:fe:74:26:e1:36:ec:39:61:b5:09:cb:
0c:fe:e2:18:ee:0b:8b:92:2a:fd:3d:96:3a:04:ac:9b:b9:c5:
dd:e5:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:47 2025 by rpki-client