Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
File: DBF2E4592337DE1FB3E3561363D60691673B5746.mft (raw, json)
Hash identifier: KRoJa2kriyebV3pK6I/1gZYWSh60nBitN0MW0+JpeW0=
Subject key identifier: D9:65:D0:27:1C:17:BF:2E:D6:04:24:CB:7C:1E:A3:47:7F:AD:5C:2A
Authority key identifier: DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
Certificate issuer: /CN=dbf2e4592337de1fb3e3561363d60691673b5746
Certificate serial: 782DD6AAEA6E742CF44A73C72A531E8F00795017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
Manifest number: 54
Signing time: Sun 19 Oct 2025 15:19:26 +0000
Manifest this update: Sun 19 Oct 2025 15:14:26 +0000
Manifest next update: Mon 20 Oct 2025 18:33:26 +0000
Files and hashes: 1: DBF2E4592337DE1FB3E3561363D60691673B5746.crl (hash: Br3lORsMGlgnDF5VLGMnxvvOuHZzEm8Odd59Fw6NRdE=)
2: AS51087.asa (hash: l7LNnmz1QckR3La+b387Ld8acyUBXDTuETQJO3EOmXg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2d:d6:aa:ea:6e:74:2c:f4:4a:73:c7:2a:53:1e:8f:00:79:50:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf2e4592337de1fb3e3561363d60691673b5746
Validity
Not Before: Oct 19 15:14:26 2025 GMT
Not After : Oct 20 18:33:26 2025 GMT
Subject: CN=D965D0271C17BF2ED60424CB7C1EA3477FAD5C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:da:37:26:fc:ed:a0:bd:d4:e7:ca:cc:0c:
d7:8d:bf:95:76:78:2b:d3:5f:ed:a5:19:9a:78:8a:
ff:e3:51:7b:9a:c1:9a:7d:3c:13:bf:0f:15:f3:37:
4d:a3:2e:a8:56:f2:b0:a9:2e:c7:da:2d:b6:3f:bb:
34:d7:4f:66:5c:35:68:bb:b1:bd:0f:91:a8:ff:03:
a2:35:fd:7d:1e:6e:0e:f8:43:b2:7c:5a:7b:af:56:
c9:9b:99:a4:a8:00:a7:5c:ac:6d:c2:09:68:1c:6f:
53:14:01:f4:0b:c9:1d:2d:da:41:07:52:65:09:d2:
4a:a9:f0:91:b1:01:83:64:6b:20:33:6c:61:7f:8b:
98:60:00:1a:e4:c7:97:35:be:58:32:2c:21:eb:77:
df:0a:90:d7:64:52:06:c5:b8:f5:c5:17:41:56:56:
d7:5f:1a:ca:15:0c:ef:b7:b9:7a:38:4f:94:6d:45:
2a:9b:30:6b:e6:25:c4:a3:8a:80:34:11:42:50:65:
e6:43:ac:b2:cf:d7:fb:5b:21:50:53:ca:22:70:87:
60:3e:5e:b8:ff:ac:43:0d:00:55:39:25:7c:8c:2c:
00:61:06:a6:7b:f3:ba:60:b0:79:63:c7:9d:52:49:
b1:a4:52:de:e3:0a:58:17:ce:ab:ba:f0:c5:6b:a2:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:65:D0:27:1C:17:BF:2E:D6:04:24:CB:7C:1E:A3:47:7F:AD:5C:2A
X509v3 Authority Key Identifier:
keyid:DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5c:28:6a:0c:8e:cb:e0:dd:1d:76:27:bb:0f:86:6f:65:f3:
71:9f:b8:42:a6:01:37:f2:e9:e1:c8:46:53:1b:9c:be:47:2c:
30:79:36:49:4e:80:00:8f:35:2b:dc:ac:f4:53:87:6b:e2:23:
53:34:dd:40:40:fe:93:76:16:d1:26:63:38:b3:f0:00:e6:53:
3c:5e:94:3b:25:09:0e:ae:e5:06:7c:ef:ee:d2:72:30:1c:f5:
ee:4a:7d:23:9d:17:5f:6c:47:a6:d3:51:44:8d:dd:26:72:ea:
6e:12:5b:42:f3:0e:91:ca:c0:79:97:33:fa:93:07:5e:31:ba:
c4:6d:7c:fe:9c:f1:0e:c5:3f:9d:b2:9c:36:76:88:11:79:8a:
a0:6c:93:d3:7b:fc:26:a9:69:62:3e:4d:58:0d:e2:93:8b:42:
42:5f:5e:91:39:64:55:f1:44:35:81:59:5f:9c:19:25:a9:41:
f3:81:9a:c8:9f:d7:a8:06:c3:60:21:58:de:c9:d8:5a:2d:22:
b5:b2:60:44:97:41:c2:0e:ae:2c:6a:43:10:ad:ee:20:dc:17:
46:13:ec:34:85:05:7a:0f:e2:93:0f:a6:71:c3:36:7e:43:58:
c4:13:a5:bb:9e:8d:f2:31:dd:12:1c:bd:32:60:86:09:20:56:
f1:4c:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:34 2025 by rpki-client