Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: qyra5KNrmp10FczfHMBG4Nvs0gJo76jwJAEvIwGa9dg=
Subject key identifier: 41:CD:62:29:AB:6F:79:4B:28:04:CF:F2:A7:4B:A9:7D:49:6F:1C:5C
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 6C4CA4A6ABC87F4579E8830E64631AAD0E798690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 01F3
Signing time: Sun 31 Aug 2025 03:47:36 +0000
Manifest this update: Sun 31 Aug 2025 03:42:36 +0000
Manifest next update: Mon 01 Sep 2025 04:47:36 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: gH3ju3eQCwARGk0TkNP072CMq0SaFIxb3MVncJgVWNk=)
2: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Sep 2025 04:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:4c:a4:a6:ab:c8:7f:45:79:e8:83:0e:64:63:1a:ad:0e:79:86:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Aug 31 03:42:36 2025 GMT
Not After : Sep 1 04:47:36 2025 GMT
Subject: CN=41CD6229AB6F794B2804CFF2A74BA97D496F1C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:a9:01:d0:b7:c3:c0:ee:e5:04:76:5c:63:
33:bb:c0:3b:0c:b6:ce:1b:c3:6f:a4:e3:c4:95:24:
49:ce:7b:4e:f3:39:a7:45:8f:c6:42:39:8f:29:ef:
91:2c:cb:3c:30:a1:c7:7e:a7:fa:29:bc:3d:67:73:
be:3a:9a:0f:35:91:a2:26:f8:13:35:0e:fa:83:99:
4a:60:fc:e1:f4:c5:c2:4f:1e:3e:36:dd:98:08:01:
9d:4d:16:5b:0e:97:96:67:1a:f5:df:78:0d:40:d4:
4c:af:89:e1:de:d4:73:7c:82:40:95:e2:65:06:e0:
57:b9:83:c4:62:54:03:6d:ab:c9:c2:a7:56:24:32:
1f:9b:27:a9:4f:4f:e8:76:5f:58:b4:67:88:35:2e:
28:5e:d9:a6:16:54:dd:9f:62:c2:d8:50:4b:9a:2d:
51:53:42:1b:84:28:d0:d6:13:2f:c8:37:c7:e5:e4:
6a:b4:03:76:98:37:c1:b3:02:dd:93:5b:e4:b9:e3:
f9:8d:fd:ac:72:65:dd:74:bd:a3:69:aa:e0:28:6b:
4e:93:36:d9:30:e7:75:ef:d7:ea:1f:07:f7:6c:33:
9c:03:f4:63:e8:30:91:73:ce:c0:bb:27:75:59:6d:
33:05:3d:cb:28:50:83:33:bc:ce:e3:66:7d:8f:09:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:62:29:AB:6F:79:4B:28:04:CF:F2:A7:4B:A9:7D:49:6F:1C:5C
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bc:53:92:44:e1:d2:48:d6:8f:9f:95:0a:5a:e4:57:52:ff:
49:c8:28:ed:e4:a3:b3:a9:a5:bf:aa:ae:6e:41:51:a4:af:f6:
0c:97:73:81:3e:46:b1:bc:6a:ee:a2:6a:d5:c9:55:b9:7d:54:
b5:08:4c:76:7e:fd:b9:85:4d:14:b4:25:3c:94:36:42:15:2a:
33:a8:e8:3a:92:04:40:33:fc:aa:cc:20:ec:7a:89:2a:51:68:
66:6c:33:a6:eb:73:02:12:e6:98:e4:e6:86:78:f2:ca:66:7e:
22:79:54:46:85:0d:1e:16:4c:39:94:42:bb:07:d2:d0:48:4d:
27:f6:e5:52:d1:c3:29:cb:35:c3:f7:f6:3e:5c:5b:4c:f5:0d:
f5:3d:0f:19:5e:9e:5e:95:bf:2d:7c:32:8f:d7:e9:93:47:45:
79:d8:2c:ed:a7:63:a4:0b:45:e8:5b:b7:a7:d9:07:c7:93:73:
b1:96:92:7c:45:35:c9:3a:83:48:21:4a:13:ca:e1:12:42:01:
5d:25:46:8a:3b:48:67:fa:75:0e:a0:7d:11:d7:ab:9b:15:ad:
50:3c:84:26:ed:48:8a:6a:a2:a6:24:08:cd:44:b5:36:cb:33:
03:73:99:96:0b:9f:62:5a:e2:88:8f:da:e3:8d:58:f3:a4:b7:
68:5c:89:6d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbEykpqvIf0V56IMOZGMarQ55hpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGFiN2UyMGJlYTVjY2I4NGY4MjZjNjRkYTE3NTdkMWRm
NWI2ZmY2MjAeFw0yNTA4MzEwMzQyMzZaFw0yNTA5MDEwNDQ3MzZaMDMxMTAvBgNV
BAMTKDQxQ0Q2MjI5QUI2Rjc5NEIyODA0Q0ZGMkE3NEJBOTdENDk2RjFDNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGakB0LfDwO7lBHZcYzO7wDsM
ts4bw2+k48SVJEnOe07zOadFj8ZCOY8p75Esyzwwocd+p/opvD1nc746mg81kaIm
+BM1DvqDmUpg/OH0xcJPHj423ZgIAZ1NFlsOl5ZnGvXfeA1A1EyvieHe1HN8gkCV
4mUG4Fe5g8RiVANtq8nCp1YkMh+bJ6lPT+h2X1i0Z4g1Lihe2aYWVN2fYsLYUEua
LVFTQhuEKNDWEy/IN8fl5Gq0A3aYN8GzAt2TW+S54/mN/axyZd10vaNpquAoa06T
Ntkw53Xv1+ofB/dsM5wD9GPoMJFzzsC7J3VZbTMFPcsoUIMzvM7jZn2PCZTDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUQc1iKatveUsoBM/yp0upfUlvHFwwHwYDVR0j
BBgwFoAU2rfiC+pcy4T4JsZNoXV9HfW2/2IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzAvREFCN0UyMEJFQTVDQ0I4NEY4MjZDNjREQTE3NTdEMURGNUI2RkY2Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJyZmlDLXBjeTRUNEpzWk5vWFY5SGZX
Ml8ySS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03
ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMC9EQUI3RTIwQkVBNUNDQjg0Rjgy
NkM2NERBMTc1N0QxREY1QjZGRjYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLxTkkTh0kjWj5+VClrk
V1L/Scgo7eSjs6mlv6qubkFRpK/2DJdzgT5Gsbxq7qJq1clVuX1UtQhMdn79uYVN
FLQlPJQ2QhUqM6joOpIEQDP8qswg7HqJKlFoZmwzputzAhLmmOTmhnjyymZ+InlU
RoUNHhZMOZRCuwfS0EhNJ/blUtHDKcs1w/f2PlxbTPUN9T0PGV6eXpW/LXwyj9fp
k0dFedgs7adjpAtF6Fu3p9kHx5NzsZaSfEU1yTqDSCFKE8rhEkIBXSVGijtIZ/p1
DqB9EdermxWtUDyEJu1IimqipiQIzUS1NsszA3OZlgufYlriiI/a441Y86S3aFyJ
bQ==
-----END CERTIFICATE-----
Generated at Sun Aug 31 06:46:56 2025 by rpki-client