Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: crZm9kIl0xoh/uC9EED3QNcjr1wbVTCahN2LY1shABI=
Subject key identifier: ED:03:88:77:B3:15:75:10:D7:80:CA:41:67:3C:A2:39:CE:23:A5:0C
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 295327DEC7EF4424FD572ED97A71B68966C6968E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 0127
Signing time: Fri 04 Apr 2025 19:04:37 +0000
Manifest this update: Fri 04 Apr 2025 18:59:37 +0000
Manifest next update: Sat 05 Apr 2025 20:43:37 +0000
Files and hashes: 1: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: sj+6eosbE+cjP0V5pJgUFK5nuSczd8wwcHExJlSd9M8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:53:27:de:c7:ef:44:24:fd:57:2e:d9:7a:71:b6:89:66:c6:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Apr 4 18:59:37 2025 GMT
Not After : Apr 5 20:43:37 2025 GMT
Subject: CN=ED038877B3157510D780CA41673CA239CE23A50C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:50:88:70:e0:52:39:30:e8:d4:d4:74:cf:
be:57:68:65:6d:01:95:53:bd:43:89:41:7f:49:f7:
6a:c2:04:e1:e4:c3:47:4b:01:db:81:c1:29:0e:e2:
bd:d2:4d:32:25:ce:e1:12:6f:ac:d5:12:b7:c3:c2:
06:f9:e4:3d:71:be:0a:b7:19:6c:e4:78:76:f0:0a:
19:08:47:62:4b:a7:75:fe:6f:8b:c7:a1:d7:47:ad:
9f:2b:b7:80:15:59:82:42:7b:27:97:e2:0d:b2:6a:
3d:56:69:ec:54:61:d1:e5:e2:d0:b2:a4:b2:62:92:
4c:fa:09:be:a8:c8:23:aa:ac:01:86:65:3c:8e:e9:
3f:40:2e:89:1c:84:e8:9d:b8:dc:75:07:50:6f:1f:
33:09:ec:42:21:25:56:1d:61:3c:40:46:7c:a5:e3:
06:63:63:2f:9e:d0:58:08:23:a5:65:3c:d7:94:22:
86:6b:8f:93:73:c9:02:25:30:e7:f8:b0:64:96:aa:
6b:2f:37:bf:48:52:c4:19:15:08:ab:87:f2:01:5a:
db:62:92:ec:2f:83:eb:1d:37:dd:87:c3:22:0d:40:
40:d6:24:a8:2b:24:d5:ee:64:7a:b3:ee:34:b8:96:
1b:e8:65:2c:80:5a:9d:95:74:4b:fb:38:c4:9b:5a:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:88:77:B3:15:75:10:D7:80:CA:41:67:3C:A2:39:CE:23:A5:0C
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1f:7a:08:a8:fb:81:d7:2d:eb:f7:c6:05:19:7a:c3:62:17:
30:25:ad:1a:58:a2:f1:67:45:8b:fa:b5:b7:c4:b1:c8:4a:5d:
1e:4f:a6:d8:4c:f5:91:73:65:62:93:b6:8e:3f:e4:18:f5:21:
9e:b1:f4:57:5d:45:09:3d:79:42:43:41:34:b6:eb:71:1f:b5:
e6:a4:9c:f9:e8:a3:29:22:a8:0d:9b:e7:cf:02:8f:4b:c9:5a:
5a:36:30:4a:c5:53:93:07:5a:e9:38:ed:6e:67:dd:79:ba:75:
48:f7:d8:cb:12:99:82:33:39:29:8f:ed:d9:4e:6c:c1:7a:e6:
33:e3:9a:2a:28:d7:b4:51:6a:c4:55:09:b9:18:75:24:cb:e5:
a1:e6:b6:b5:cd:bc:8b:37:50:f5:24:dc:e3:30:6a:8d:4a:ae:
d0:92:f6:06:ce:86:fd:34:98:97:ba:29:3f:dd:c9:a9:32:1e:
1b:b8:25:a3:68:b3:29:f3:c3:8a:0c:ae:0f:b9:93:97:e2:be:
44:8d:8b:bd:d5:1c:4e:de:10:80:d5:4a:b8:04:6c:ee:08:0f:
02:c2:67:16:c2:7c:82:6f:88:f6:d9:6a:c1:10:94:5e:b1:6c:
c0:d2:66:b0:ce:28:88:ab:a1:69:69:62:02:e1:fc:03:bb:03:
47:4e:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:55 2025 by rpki-client