Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: WrEZvGYmcF9k8AsG0fIvf9VAVOrQ3KyOUSWcCdMoSHE=
Subject key identifier: 11:DE:B5:C4:51:9B:83:EE:33:5C:14:20:DB:AE:78:D0:F0:BB:63:D4
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 01988B0F56EA7E1ABF00F345771D3F13DCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 19:01:34 +0000
Manifest this update: Fri 08 Aug 2025 19:01:34 +0000
Manifest next update: Sat 09 Aug 2025 19:01:34 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: S5e//oYCWltC5cDwxv6vFUeAbodhHGan3F4wwRZo2ao=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:56:ea:7e:1a:bf:00:f3:45:77:1d:3f:13:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Aug 8 19:01:34 2025 GMT
Not After : Aug 9 19:01:34 2025 GMT
Subject: CN=11deb5c4519b83ee335c1420dbae78d0f0bb63d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cb:93:7c:88:e4:54:99:43:b3:b1:95:c3:5d:
b4:11:41:c2:23:4e:68:6d:75:39:7a:7a:38:00:4d:
3f:9e:ed:8f:66:cf:c1:f2:0c:c2:86:5a:2f:b4:76:
b5:fd:44:d1:90:21:ed:d7:72:86:41:3b:4e:55:09:
ce:ea:b5:06:4c:16:b6:f6:07:61:75:71:89:ee:e3:
f3:7c:0f:68:37:80:90:f2:c4:7d:9b:7e:e1:90:19:
9b:fd:00:7e:1e:09:46:54:86:1d:40:82:b4:ba:50:
95:9f:1d:93:d8:87:53:d1:cd:8d:fd:88:89:fa:09:
11:3c:38:2f:e3:90:d4:42:3e:ab:7f:40:00:0f:1f:
c2:4b:6f:ad:6e:0e:07:b2:db:3d:39:46:f9:7c:d5:
95:d6:16:9f:bd:2f:ca:3c:27:e6:bf:ab:2a:1c:a2:
7d:04:eb:64:46:6f:7a:eb:23:4b:8a:d7:27:7e:f1:
6f:7a:32:cb:1b:23:21:95:70:0f:bf:d2:38:87:54:
9b:25:b0:21:91:35:b9:dc:89:53:2b:ee:06:71:c9:
ff:46:e3:3a:18:13:77:03:6d:bf:12:f7:2e:cb:7e:
ce:2f:65:10:45:f2:32:29:4b:94:48:f8:62:91:e7:
75:90:ab:72:05:f5:82:da:64:e1:9f:ec:9d:1d:28:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:B5:C4:51:9B:83:EE:33:5C:14:20:DB:AE:78:D0:F0:BB:63:D4
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:08:cb:5b:e4:7a:8c:fe:2d:c6:9f:eb:b3:15:e4:aa:41:08:
98:6b:c9:a2:be:f8:e8:d1:76:16:c9:f4:6c:56:ff:00:56:59:
52:ab:1e:03:6c:c6:55:74:05:59:c7:12:95:8e:b8:4b:62:7b:
10:b7:9a:87:78:95:80:01:7b:88:7e:82:fe:d4:77:f9:72:82:
f2:f6:44:75:5b:c8:44:f1:ce:77:fe:6a:f2:de:c9:b3:c6:46:
01:c3:9f:47:10:27:fe:63:c6:c3:da:2b:83:7d:bd:68:89:cb:
1a:70:48:48:58:04:96:cd:34:02:2c:1f:0c:58:8f:3d:4a:3f:
01:6d:28:ec:7d:c4:c4:04:de:c7:1f:98:21:da:5b:b0:08:49:
dd:96:bf:e4:bd:63:0d:77:3e:9f:28:95:fb:24:13:9f:52:73:
62:b2:b1:49:c8:20:31:30:87:ba:fb:ad:03:a8:88:18:f3:d7:
6b:16:fa:6e:d4:15:67:4f:11:c8:46:60:19:2c:2b:0f:53:b4:
5b:93:99:56:c9:b1:b7:2b:c9:88:e7:4d:ea:37:42:09:04:5a:
c8:f2:e7:c0:fb:47:53:9d:39:11:2c:12:ed:6c:ce:f5:7a:c7:
f2:73:81:51:bc:7d:aa:18:f2:c5:eb:17:a8:8a:67:14:60:bb:
0e:75:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:19 2025 by rpki-client