Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
File: DBF2E4592337DE1FB3E3561363D60691673B5746.mft (raw, json)
Hash identifier: Z0qKvGDdwVg8YSyPN7wNh2O1zsFzf3FqYpmRrphE2pw=
Subject key identifier: C0:C9:FC:89:68:CF:F8:84:74:07:6E:2B:57:C7:08:84:F3:56:B8:6C
Authority key identifier: DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
Certificate issuer: /CN=dbf2e4592337de1fb3e3561363d60691673b5746
Certificate serial: 2B076CF19F0A0B61BAB1EF7AC8872D61D53B1DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
Manifest number: 5C
Signing time: Sat 25 Oct 2025 18:19:27 +0000
Manifest this update: Sat 25 Oct 2025 18:14:27 +0000
Manifest next update: Sun 26 Oct 2025 21:14:27 +0000
Files and hashes: 1: AS51087.asa (hash: l7LNnmz1QckR3La+b387Ld8acyUBXDTuETQJO3EOmXg=)
2: DBF2E4592337DE1FB3E3561363D60691673B5746.crl (hash: C+H11zpryCulxHCba7aJo+wl9I0Z3qPEW5X8EXcre3Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:07:6c:f1:9f:0a:0b:61:ba:b1:ef:7a:c8:87:2d:61:d5:3b:1d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf2e4592337de1fb3e3561363d60691673b5746
Validity
Not Before: Oct 25 18:14:27 2025 GMT
Not After : Oct 26 21:14:27 2025 GMT
Subject: CN=C0C9FC8968CFF88474076E2B57C70884F356B86C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:8e:70:c9:85:d7:d5:43:ec:8c:47:e4:ed:
c3:51:f5:c5:cb:01:c7:e0:cc:c5:ae:d7:e8:ed:57:
d5:4f:9e:b6:16:a8:76:46:aa:3f:e2:27:f9:e4:e9:
2f:2d:b6:71:6d:fd:1c:a5:1b:9a:76:ec:61:86:d0:
34:99:50:a8:82:6f:10:d8:cf:cd:06:55:37:bd:01:
35:41:dc:26:a3:44:c0:4b:67:71:25:56:8c:9d:93:
1e:69:49:ed:13:41:38:9a:61:af:00:c7:b5:42:44:
9e:ca:f1:50:15:aa:1c:d5:96:64:a5:22:3e:b4:18:
6a:45:5f:21:40:2b:b6:bf:de:55:16:7a:09:f0:51:
34:6d:ab:be:5b:47:8f:f2:5d:46:e0:a3:eb:5f:bd:
3e:62:58:c4:d5:d2:6f:e0:3d:cf:24:95:b8:96:dd:
17:2d:74:41:e3:b1:b5:0d:21:64:14:d8:e9:7f:e8:
04:9a:95:54:1c:df:63:70:95:af:de:63:4c:6d:e4:
0b:a9:73:9a:a2:af:1c:ba:d2:a3:64:16:6a:4d:69:
e9:5e:e6:54:dc:0c:bd:df:23:4f:15:ce:da:ec:f8:
60:f5:ef:19:16:f4:35:43:45:1a:65:a0:1a:6a:75:
ad:93:b0:87:66:c0:f5:b5:c5:8c:c4:db:c2:61:e7:
16:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:FC:89:68:CF:F8:84:74:07:6E:2B:57:C7:08:84:F3:56:B8:6C
X509v3 Authority Key Identifier:
keyid:DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:18:51:74:74:64:c8:9c:ac:83:97:24:01:22:d9:59:16:cb:
da:cf:4b:93:29:e8:5c:77:21:3d:6e:47:9f:ce:e9:c6:36:33:
8e:ad:60:e6:c2:30:01:81:f7:68:a2:ea:79:79:7a:8b:33:41:
b8:aa:25:58:92:a8:65:9b:d4:2c:3c:0f:54:17:ed:ed:e6:fd:
09:a8:a6:e2:c6:7b:5c:0d:de:7c:0d:ac:f2:9d:26:e8:66:2b:
1b:23:1c:f3:4f:6f:b5:2c:c8:72:f6:f8:9d:e5:e3:d0:8e:25:
36:ba:5f:38:38:d8:6c:c1:2f:d1:06:f4:c4:21:1a:62:b0:1d:
7b:a1:da:52:f0:a2:d0:cd:70:91:5d:ce:57:85:c7:16:3f:5c:
f3:a8:af:d4:32:f9:5e:57:e6:89:f7:f5:8b:5e:b5:98:a6:a0:
8e:5b:f3:3b:bd:87:1e:57:24:8b:65:a3:39:d3:d4:22:13:b1:
08:91:1b:35:11:84:ce:4c:f3:8c:40:54:6a:ed:7d:8c:51:a5:
29:00:8e:2a:d5:4d:28:67:d7:be:ae:e6:f3:fc:43:b1:22:5b:
44:ab:39:54:52:66:e3:aa:15:dd:01:81:69:e7:ef:d6:b2:75:
7e:0c:25:69:d4:40:a2:03:0e:65:c8:12:4e:1d:ef:1d:47:9b:
0c:08:99:2a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKwds8Z8KC2G6se96yIctYdU7HdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGJmMmU0NTkyMzM3ZGUxZmIzZTM1NjEzNjNkNjA2OTE2
NzNiNTc0NjAeFw0yNTEwMjUxODE0MjdaFw0yNTEwMjYyMTE0MjdaMDMxMTAvBgNV
BAMTKEMwQzlGQzg5NjhDRkY4ODQ3NDA3NkUyQjU3QzcwODg0RjM1NkI4NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhdY5wyYXX1UPsjEfk7cNR9cXL
AcfgzMWu1+jtV9VPnrYWqHZGqj/iJ/nk6S8ttnFt/RylG5p27GGG0DSZUKiCbxDY
z80GVTe9ATVB3CajRMBLZ3ElVoydkx5pSe0TQTiaYa8Ax7VCRJ7K8VAVqhzVlmSl
Ij60GGpFXyFAK7a/3lUWegnwUTRtq75bR4/yXUbgo+tfvT5iWMTV0m/gPc8klbiW
3RctdEHjsbUNIWQU2Ol/6ASalVQc32Nwla/eY0xt5Aupc5qirxy60qNkFmpNaele
5lTcDL3fI08Vztrs+GD17xkW9DVDRRploBpqda2TsIdmwPW1xYzE28Jh5xZzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUwMn8iWjP+IR0B24rV8cIhPNWuGwwHwYDVR0j
BBgwFoAU2/LkWSM33h+z41YTY9YGkWc7V0YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGEyYzcxODctZWQ3MS00Yzc5LWExNjctMGMxMjQ1MGQy
YjNjLzAvREJGMkU0NTkyMzM3REUxRkIzRTM1NjEzNjNENjA2OTE2NzNCNTc0Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJfTGtXU00zM2gtejQxWVRZOVlHa1dj
N1YwWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YTJjNzE4Ny1l
ZDcxLTRjNzktYTE2Ny0wYzEyNDUwZDJiM2MvMC9EQkYyRTQ1OTIzMzdERTFGQjNF
MzU2MTM2M0Q2MDY5MTY3M0I1NzQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBhRdHRkyJysg5ckASLZ
WRbL2s9LkynoXHchPW5Hn87pxjYzjq1g5sIwAYH3aKLqeXl6izNBuKolWJKoZZvU
LDwPVBft7eb9Caim4sZ7XA3efA2s8p0m6GYrGyMc809vtSzIcvb4neXj0I4lNrpf
ODjYbMEv0Qb0xCEaYrAde6HaUvCi0M1wkV3OV4XHFj9c86iv1DL5Xlfmiff1i161
mKagjlvzO72HHlcki2WjOdPUIhOxCJEbNRGEzkzzjEBUau19jFGlKQCOKtVNKGfX
vq7m8/xDsSJbRKs5VFJm46oV3QGBaefv1rJ1fgwladRAogMOZcgSTh3vHUebDAiZ
Kg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:11:14 2025 by rpki-client