Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: WApO0NE6lP6CBjUYQUZPe76o2f2jF3W6eiAaA7EjN6Q=
Subject key identifier: E1:D4:A1:56:61:B5:87:DC:7C:7D:9B:1A:8B:B0:2C:E1:4E:E0:D9:5C
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019A52D284F73482AAC02B92DB8624EFE44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:59 +0000
Manifest this update: Wed 05 Nov 2025 07:01:59 +0000
Manifest next update: Thu 06 Nov 2025 07:01:59 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: fsHzE/FLJzl/eR0ui3kTZ8JCH245M21+os7id4LjZwU=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:84:f7:34:82:aa:c0:2b:92:db:86:24:ef:e4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Nov 5 07:01:59 2025 GMT
Not After : Nov 6 07:01:59 2025 GMT
Subject: CN=e1d4a15661b587dc7c7d9b1a8bb02ce14ee0d95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:b3:d8:19:71:a1:c3:b8:92:32:6d:38:2b:
93:6d:62:f4:f9:8c:ed:5a:40:de:aa:da:93:d1:08:
00:f9:62:55:ae:dd:2f:5c:d5:2b:32:b3:2d:f1:2f:
78:d3:24:0d:7a:3c:7d:76:aa:4d:73:d4:df:da:da:
a1:46:ed:a5:69:e6:4e:75:7d:af:2b:0b:62:e0:af:
bc:4d:20:64:74:a5:88:c9:c4:d6:06:40:9b:e5:8e:
39:75:41:01:47:2d:be:84:b5:3f:b0:64:81:a0:23:
4a:11:08:e6:94:67:ba:fa:51:ee:8c:58:8e:e4:15:
54:50:99:b0:4b:5d:29:32:45:3a:52:29:f0:49:b8:
71:ec:50:2a:d1:71:27:fc:27:3f:1f:1b:6e:41:86:
95:77:47:96:df:0b:f0:a9:89:8c:0b:a9:11:02:31:
ea:30:33:57:61:e1:f5:57:b0:ff:51:c6:d4:31:c7:
55:8d:eb:17:ec:4c:35:ae:5b:2f:e8:25:16:58:1b:
95:2d:cd:8e:3c:99:9d:5e:79:d1:20:7b:dd:2b:1e:
5a:6e:7f:06:20:7e:7e:62:53:3b:e3:35:00:1c:13:
51:9c:15:f2:e2:05:24:cc:9e:7a:53:c2:30:b2:a6:
85:6e:2b:80:b8:01:e3:32:f7:74:da:08:68:05:20:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D4:A1:56:61:B5:87:DC:7C:7D:9B:1A:8B:B0:2C:E1:4E:E0:D9:5C
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:93:21:fc:c3:5a:ad:ce:65:8a:83:8b:d5:95:9c:4f:a6:5d:
26:f2:73:40:47:13:f3:ff:d4:46:91:9e:c1:2e:26:c5:00:3a:
56:bf:e8:0e:b1:70:29:82:af:fe:21:1a:83:ad:be:18:46:3b:
f6:6e:9e:ea:14:78:b7:a7:18:71:ee:30:b6:a0:9b:d5:12:6f:
37:86:b9:46:e0:4f:82:5d:b1:d3:08:c6:6d:05:a8:ac:c7:85:
dc:b3:19:54:25:89:74:5c:3a:11:92:db:7e:52:c3:5b:cb:f4:
21:ac:8c:9b:de:ab:78:64:40:4b:8e:ed:9d:21:71:16:0f:58:
c5:33:67:a6:65:3f:42:fd:b1:61:60:dd:86:b3:f7:aa:a8:0f:
2e:90:10:40:f9:d9:27:84:9a:6d:b3:3f:cc:aa:a3:1c:ac:53:
6b:91:27:b6:90:d5:b2:6c:3a:e4:9f:71:cc:58:27:9c:70:d7:
f4:57:5c:55:c3:37:cb:06:0f:aa:05:5c:9a:6d:81:96:8d:88:
46:02:a5:d4:0e:20:05:73:30:19:54:34:f1:4b:15:b6:65:16:
1d:75:84:f9:2e:ce:a3:9c:e6:eb:25:59:9d:94:b5:77:23:8d:
64:e1:85:24:5b:7d:7e:e7:13:65:c8:e8:c8:82:95:c3:43:f8:
29:84:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:15 2025 by rpki-client