Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: 3RZuKRGrjMGLV6kwccZsfMjeuRE0MBcqciNDvrFh4X0=
Subject key identifier: EF:06:6D:8F:B5:44:50:87:23:E0:A5:87:C6:B3:8D:04:76:04:44:9A
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 3CE5CD036FFFB7637B936A45685DA2841503D999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 024A
Signing time: Sun 02 Nov 2025 05:28:18 +0000
Manifest this update: Sun 02 Nov 2025 05:23:18 +0000
Manifest next update: Mon 03 Nov 2025 09:24:18 +0000
Files and hashes: 1: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: JBeSoXjfrxlZ6mAtqrAI1GqujpniNHsMmT4Yv9N6bGM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 09:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e5:cd:03:6f:ff:b7:63:7b:93:6a:45:68:5d:a2:84:15:03:d9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Nov 2 05:23:18 2025 GMT
Not After : Nov 3 09:24:18 2025 GMT
Subject: CN=EF066D8FB544508723E0A587C6B38D047604449A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:20:3b:5d:05:b4:e2:1c:5f:0e:5e:99:61:
ff:5c:7d:ea:cc:80:6d:d7:4e:09:4b:06:27:7b:bd:
2e:b4:a8:ec:58:30:9c:06:05:e8:d0:c8:b4:cb:bd:
d6:43:1a:da:23:5e:85:99:e1:11:b3:99:61:c0:1e:
ff:ca:63:57:e0:04:ac:25:46:be:ea:39:2f:a0:e3:
eb:38:15:27:64:0a:2a:11:64:41:6a:1b:db:26:cc:
4d:74:14:30:1a:2d:1e:cb:3b:dd:66:e0:97:0a:ee:
3b:e0:52:92:b7:89:41:de:44:ca:7c:7a:26:2a:06:
61:7f:f4:a0:e7:39:62:a6:60:e5:9a:e0:02:c1:66:
c1:8a:f9:55:e8:05:8c:32:e6:c0:72:b2:2e:05:0b:
0b:5d:e5:ab:0b:e0:30:1b:40:a4:5b:e4:72:7b:df:
01:ff:f8:74:92:40:43:cc:7f:d4:8c:bf:9e:14:1d:
de:7a:ee:21:84:81:fb:24:b7:9f:51:1c:03:89:4b:
e3:74:4f:a4:6e:ac:10:9f:52:22:3c:ae:bf:26:02:
35:a7:81:d1:d8:33:7a:b3:7d:c4:d3:f6:1f:b5:6e:
2e:ca:1e:c9:64:58:68:d8:4e:74:67:1e:0f:1b:e5:
11:cf:d1:f3:67:f2:04:0d:14:d9:03:f7:d2:c1:cc:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:06:6D:8F:B5:44:50:87:23:E0:A5:87:C6:B3:8D:04:76:04:44:9A
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ee:a9:45:9e:f8:d2:d8:3f:89:20:97:e9:2e:e9:d9:27:fd:
a2:40:2b:63:73:c5:f7:52:b2:57:8f:71:b5:54:93:f4:57:bd:
ec:8e:b6:82:4d:66:44:e1:a6:6d:44:f2:2e:35:a7:0f:ad:51:
79:df:50:37:74:4a:81:1a:29:f3:fe:85:cf:bd:08:ff:bb:73:
84:59:e2:26:47:dd:ed:27:33:4e:3c:50:cd:0e:36:3f:d4:14:
06:5f:a9:5d:c1:b1:3a:56:a7:3e:26:0c:75:cb:e0:ec:15:35:
2b:a2:87:42:f8:63:20:ca:a1:0b:23:f8:d3:48:71:85:a5:a8:
51:9c:1e:58:39:37:2b:74:b0:72:62:3b:a6:4f:d4:4f:c9:20:
49:55:fe:d5:07:40:f2:97:56:fc:66:76:66:22:c2:37:63:9f:
91:74:9c:4d:75:72:1b:35:db:9c:0c:d2:72:ac:db:2b:ff:92:
a2:31:67:ff:d0:b5:7f:ee:1b:f9:07:b2:67:a2:b0:8f:d7:bf:
c5:9e:31:64:02:0d:a4:8a:2a:6d:6b:e2:df:36:3a:f3:09:3b:
d0:db:00:cb:ee:cd:a4:29:dc:6c:c5:8b:51:c6:70:a6:1d:9d:
ba:87:9b:81:ad:7a:53:47:40:a7:31:3e:65:fe:3e:da:d3:8a:
c7:4f:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 18:02:10 2025 by rpki-client