Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: RkpMz+01gCtYdLAAHWQeZfCj9BayqXNm4M6IfOK4LkA=
Subject key identifier: CB:32:1B:C1:98:A9:4B:35:DB:DD:08:A9:6F:EE:83:36:40:18:14:98
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 0198838C566A04771C845A2899D15794BDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0A2D
Signing time: Thu 07 Aug 2025 08:01:09 +0000
Manifest this update: Thu 07 Aug 2025 08:01:09 +0000
Manifest next update: Fri 08 Aug 2025 08:01:09 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: nFIZOvVA8+cL8tI/ME8fsMgmixijGGv7BDU5/dGFtds=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:56:6a:04:77:1c:84:5a:28:99:d1:57:94:bd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Aug 7 08:01:09 2025 GMT
Not After : Aug 8 08:01:09 2025 GMT
Subject: CN=cb321bc198a94b35dbdd08a96fee833640181498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:a8:9c:00:c8:d6:20:f7:c8:93:6c:fd:e8:
b3:d3:5b:3e:7b:00:41:07:6a:68:41:2b:14:e6:07:
15:c5:cb:7d:c9:e6:02:69:c9:38:b0:4f:e3:ca:9f:
10:b1:42:21:9b:b0:5f:45:c7:ef:e1:22:1a:47:b1:
1d:ee:85:a7:a8:41:7b:51:e4:6b:42:a9:60:f9:df:
00:6d:02:f1:ba:e4:84:c2:41:ed:a8:a4:7f:9d:ab:
3f:db:bc:dd:13:20:8e:e9:1f:24:99:2d:8d:16:cb:
e5:de:03:b2:81:aa:57:63:eb:64:4d:b8:58:aa:78:
38:8b:ea:91:24:68:0d:65:39:18:34:77:5a:fe:e9:
e4:e5:35:90:2a:11:42:57:35:ec:68:9d:24:1c:3c:
6b:e8:c2:e2:e2:9a:3e:5c:0e:1c:7b:4a:a0:4e:10:
da:7f:21:f1:44:63:9c:9d:f7:d1:9c:41:95:3e:b1:
ef:cc:cc:d1:44:f2:43:45:ae:73:85:02:ec:c9:6d:
57:fe:b9:0e:19:26:5c:12:54:81:a0:77:7f:02:39:
9b:b9:04:b7:eb:09:ad:0a:71:55:e4:24:97:8f:3e:
77:0f:e4:e7:fa:3c:ad:10:25:b5:9a:4a:0b:17:b8:
bb:ee:8c:d7:bc:f6:f2:87:22:fe:50:8b:dd:20:66:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:1B:C1:98:A9:4B:35:DB:DD:08:A9:6F:EE:83:36:40:18:14:98
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ef:93:e4:08:8f:5c:d2:91:e6:e2:3f:e2:51:04:77:26:36:
d2:32:b0:cc:f5:e7:82:eb:30:3a:27:2a:43:91:6d:06:63:e9:
13:a0:fe:fe:60:2f:7f:2f:e9:14:a4:d3:88:70:db:00:e1:20:
a6:00:5c:c5:18:b8:2b:01:19:8a:07:a1:bb:fd:66:bf:4f:0a:
b9:c1:2b:7b:6b:21:ca:4f:02:f4:d8:cc:f4:03:d5:fd:28:40:
9d:5e:c6:5f:f6:80:45:88:71:cb:94:91:3d:0e:64:2f:69:26:
55:a7:03:ab:b2:8a:b3:ea:78:c7:b3:97:ce:75:e1:fd:41:4a:
86:7a:7c:92:8b:cc:d9:03:93:f9:74:ce:41:cc:ef:6c:eb:77:
d9:ce:e9:40:ea:9c:99:44:37:74:d2:94:a1:82:49:66:55:fe:
3b:2f:4a:b3:1b:94:04:ca:a5:d4:88:99:9b:a2:1e:63:a8:d6:
b8:ce:13:0f:21:4a:01:37:03:86:9d:8d:58:65:4b:47:51:28:
2b:7b:e2:a5:32:c5:24:99:bb:99:e7:03:c0:d9:ea:0a:07:92:
3b:54:97:df:33:60:4a:1f:d0:95:2c:c0:06:60:62:1b:2b:de:
b5:c0:97:0d:71:6b:ef:cc:6c:50:ed:04:f3:b2:a9:e9:4a:e6:
9d:a6:7d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDjFZqBHcchFoomdFXlL3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx
NTRhMWEwHhcNMjUwODA3MDgwMTA5WhcNMjUwODA4MDgwMTA5WjAzMTEwLwYDVQQD
EyhjYjMyMWJjMTk4YTk0YjM1ZGJkZDA4YTk2ZmVlODMzNjQwMTgxNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqyonADI1iD3yJNs/eiz01s+ewBB
B2poQSsU5gcVxct9yeYCack4sE/jyp8QsUIhm7BfRcfv4SIaR7Ed7oWnqEF7UeRr
Qqlg+d8AbQLxuuSEwkHtqKR/nas/27zdEyCO6R8kmS2NFsvl3gOygapXY+tkTbhY
qng4i+qRJGgNZTkYNHda/unk5TWQKhFCVzXsaJ0kHDxr6MLi4po+XA4ce0qgThDa
fyHxRGOcnffRnEGVPrHvzMzRRPJDRa5zhQLsyW1X/rkOGSZcElSBoHd/AjmbuQS3
6wmtCnFV5CSXjz53D+Tn+jytECW1mkoLF7i77ozXvPbyhyL+UIvdIGYRSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsyG8GYqUs1290IqW/ugzZAGBSYMB8GA1UdIwQY
MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt
ZjkzNWZjMGYyMGQ1LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1
LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAle+T5AiP
XNKR5uI/4lEEdyY20jKwzPXnguswOicqQ5FtBmPpE6D+/mAvfy/pFKTTiHDbAOEg
pgBcxRi4KwEZigehu/1mv08KucEre2shyk8C9NjM9APV/ShAnV7GX/aARYhxy5SR
PQ5kL2kmVacDq7KKs+p4x7OXznXh/UFKhnp8kovM2QOT+XTOQczvbOt32c7pQOqc
mUQ3dNKUoYJJZlX+Oy9KsxuUBMql1IiZm6IeY6jWuM4TDyFKATcDhp2NWGVLR1Eo
K3vipTLFJJm7mecDwNnqCgeSO1SX3zNgSh/QlSzABmBiGyvetcCXDXFr78xsUO0E
87Kp6UrmnaZ9QQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:15:18 2025 by rpki-client