Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
File: DBF2E4592337DE1FB3E3561363D60691673B5746.mft (raw, json)
Hash identifier: J0D+66x3y9sp8zrToNWrhPu+ZlKXVglJQB+xQFwd3l4=
Subject key identifier: 25:F9:3B:B7:E7:3C:45:0B:44:47:B2:0C:FC:C3:12:8A:35:11:4E:FC
Authority key identifier: DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
Certificate issuer: /CN=dbf2e4592337de1fb3e3561363d60691673b5746
Certificate serial: 763A9625D0C649F3E423461CE9D74F918E58CDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
Manifest number: 18
Signing time: Thu 04 Sep 2025 11:19:15 +0000
Manifest this update: Thu 04 Sep 2025 11:14:15 +0000
Manifest next update: Fri 05 Sep 2025 13:05:15 +0000
Files and hashes: 1: AS51087.asa (hash: l7LNnmz1QckR3La+b387Ld8acyUBXDTuETQJO3EOmXg=)
2: DBF2E4592337DE1FB3E3561363D60691673B5746.crl (hash: gd5qyPn0LI2JyAi3Rn8/GDioB9gBMLYehwd9vgaiI1k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 13:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3a:96:25:d0:c6:49:f3:e4:23:46:1c:e9:d7:4f:91:8e:58:cd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf2e4592337de1fb3e3561363d60691673b5746
Validity
Not Before: Sep 4 11:14:15 2025 GMT
Not After : Sep 5 13:05:15 2025 GMT
Subject: CN=25F93BB7E73C450B4447B20CFCC3128A35114EFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:40:8c:dc:3c:b4:cb:5f:fa:8c:5e:1d:ef:
72:8d:bf:a9:05:ca:9a:2d:8f:32:d6:68:5c:ff:7c:
d8:dc:76:e9:5b:d5:fd:14:8e:03:ca:54:57:c0:f8:
eb:3a:2b:71:a4:92:78:36:23:7b:cb:e6:02:b8:2b:
3b:bb:2d:ef:6f:00:aa:19:69:8c:b7:35:45:87:9e:
bd:65:71:66:b1:67:aa:c0:49:07:34:5f:e2:6c:46:
c8:27:b6:e9:9a:66:30:fd:bf:70:da:75:24:46:b4:
40:d1:b2:e0:89:64:d0:74:d3:9c:09:e2:30:d2:48:
21:98:c8:7e:12:f2:66:0c:3c:cd:09:c1:05:f9:67:
a3:28:36:4c:5a:2b:5c:a8:d4:bb:02:d1:f8:2c:85:
c4:73:2a:68:d9:9d:1f:1e:7e:17:d0:16:d9:47:37:
e5:83:05:27:3d:86:22:4c:d6:53:50:b7:81:c2:90:
a0:b9:70:88:41:c4:c3:93:96:f2:42:3b:2c:d6:8e:
01:c7:48:02:97:ec:64:f7:9a:1e:e7:8d:10:7a:13:
70:db:12:57:bc:e2:6c:0c:b6:7f:16:b5:11:f1:8c:
b4:ee:77:19:a8:00:20:6e:f6:6e:19:c1:56:ed:b7:
79:bc:9b:44:03:b5:08:6e:0d:65:d9:45:9c:b6:71:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:3B:B7:E7:3C:45:0B:44:47:B2:0C:FC:C3:12:8A:35:11:4E:FC
X509v3 Authority Key Identifier:
keyid:DB:F2:E4:59:23:37:DE:1F:B3:E3:56:13:63:D6:06:91:67:3B:57:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_LkWSM33h-z41YTY9YGkWc7V0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8a2c7187-ed71-4c79-a167-0c12450d2b3c/0/DBF2E4592337DE1FB3E3561363D60691673B5746.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:78:4d:95:e8:7d:71:5e:a1:2e:3c:fe:63:d7:e9:22:c6:35:
c2:a3:90:13:de:bb:59:1c:3f:39:29:87:90:5b:38:e4:70:7d:
d9:5f:cf:29:cd:94:c1:d4:cd:d9:62:c1:ed:8e:52:e6:a8:e1:
0b:06:80:f7:5d:43:a2:8c:29:5b:4e:76:32:40:cc:a2:72:30:
02:e6:cc:45:95:11:9e:2f:0f:06:eb:0c:92:73:dd:c3:53:8a:
8a:f6:97:96:ae:0a:b2:e9:85:99:91:b0:66:32:bd:8e:7a:fa:
59:75:c0:5b:3d:a8:6a:ea:8e:97:19:2c:f6:ba:2d:40:38:43:
11:b1:74:b0:20:85:c3:c4:7b:7b:83:4d:3f:50:1e:9e:ad:98:
5f:41:96:69:9e:ad:ff:22:37:16:d7:c8:23:aa:22:21:92:b1:
3f:96:c2:4a:e6:ae:21:ae:85:71:61:57:a8:4e:46:17:26:87:
d1:3f:64:c1:eb:38:d3:a2:82:e2:2d:8d:27:e6:2d:42:ec:56:
b9:37:0d:0f:ff:19:ac:c9:9c:77:6a:87:59:6f:36:47:a8:c7:
0c:5d:69:fd:e5:c4:23:31:a5:90:23:a5:14:c9:6f:db:a7:4e:
16:76:2a:23:df:d8:7d:53:85:1c:12:d0:d9:63:fa:8e:74:59:
55:76:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:43:12 2025 by rpki-client