Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: yk29oj5fWyyIAFJ+f98jWIz2CWTn4U7Ndx6VUzxIIO4=
Subject key identifier: 5C:B7:30:16:7E:B3:C1:E6:78:0F:75:C9:1F:F2:CA:D8:DD:C2:92:E1
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 0197790AD4381BC2250B5F46F30F4ECCB806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 09A3
Signing time: Mon 16 Jun 2025 14:00:42 +0000
Manifest this update: Mon 16 Jun 2025 14:00:42 +0000
Manifest next update: Tue 17 Jun 2025 14:00:42 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: bUBePTiOL6AI4W7I1yXwe2LZ4OtfM2RXtMu4XedEY5Y=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:d4:38:1b:c2:25:0b:5f:46:f3:0f:4e:cc:b8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Jun 16 14:00:42 2025 GMT
Not After : Jun 17 14:00:42 2025 GMT
Subject: CN=5cb730167eb3c1e6780f75c91ff2cad8ddc292e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:f4:fd:57:16:f6:cc:01:ad:0e:30:95:0b:
83:c0:f5:b3:5b:1c:6a:39:9a:dc:50:d6:b2:d6:62:
1b:80:91:39:d2:50:56:d4:56:b6:f7:07:bb:11:35:
0b:b5:ea:5d:3b:80:1d:f6:38:d3:6b:a7:3e:c6:90:
6c:8e:e6:08:6e:7d:a0:1d:fc:cc:2a:56:2e:28:34:
04:2a:e0:29:0f:9e:2e:e0:4b:7c:04:0f:a9:e0:db:
d8:0e:4a:38:7f:14:58:68:d0:07:1d:8a:78:51:bd:
fb:9e:20:04:d4:36:27:32:62:86:70:8d:e2:39:be:
9f:70:25:98:10:5a:c2:cf:77:a0:9c:5b:4a:ee:36:
ef:7c:0a:fb:c6:84:39:6a:70:e8:d4:80:07:bc:f9:
d9:19:fc:c4:1f:40:81:79:5c:6b:de:0b:2b:fb:99:
32:3e:51:c5:70:d0:26:78:c6:80:0a:2d:cc:f4:37:
6d:44:24:44:3a:ba:f8:4f:47:c6:ad:1e:e8:00:07:
9d:66:76:38:12:42:ef:b4:73:e6:ca:80:79:de:3b:
80:48:35:1a:2d:c2:90:13:ad:11:20:db:77:24:63:
22:07:ae:5e:8f:36:d6:40:f2:38:5b:10:fd:1a:48:
9d:bd:ce:53:2d:47:71:6f:05:c8:31:17:b5:1f:10:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B7:30:16:7E:B3:C1:E6:78:0F:75:C9:1F:F2:CA:D8:DD:C2:92:E1
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:c5:b6:ff:b3:ce:dc:19:a8:ac:24:49:08:d6:e8:fa:c2:
ec:0e:8b:87:20:63:42:60:94:76:ef:22:5e:1c:94:38:b5:77:
21:fe:72:34:2a:1d:9b:ac:72:d7:e5:19:2e:02:59:10:00:9b:
b0:14:1b:c5:09:45:e1:d8:98:e9:87:e6:e5:9e:a1:1f:dd:70:
2b:cf:d7:31:25:6f:c9:3a:5f:77:01:ef:6b:6d:9f:31:f5:7c:
ba:08:e7:7d:9f:79:79:6d:fb:b3:4f:11:c3:99:16:4c:0f:13:
8a:7f:b2:fa:76:ee:60:aa:48:fc:e0:7c:97:c3:05:e0:49:07:
ac:c9:c7:eb:f8:56:4a:d5:1b:42:7a:16:1f:2e:07:10:10:ee:
7a:d1:c6:09:d8:35:5f:e7:b5:33:3e:c8:2f:56:f7:ca:7a:e2:
4d:fc:57:85:be:8b:c2:3e:49:dc:5d:ee:38:ee:94:37:cb:d7:
64:c3:3c:28:64:9e:73:8a:4b:d7:a3:e6:44:c4:59:d2:1b:57:
47:82:8e:db:b6:d0:63:93:ff:79:d7:ee:3d:f9:62:0e:d0:97:
70:ae:f2:0b:5c:86:14:e6:1c:8f:8d:19:a9:d7:e3:d0:cf:20:
5a:6b:4a:2f:47:d8:82:f7:d8:a4:09:53:49:4f:df:e9:99:eb:
7c:6d:ba:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5CtQ4G8IlC19G8w9OzLgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx
NTRhMWEwHhcNMjUwNjE2MTQwMDQyWhcNMjUwNjE3MTQwMDQyWjAzMTEwLwYDVQQD
Eyg1Y2I3MzAxNjdlYjNjMWU2NzgwZjc1YzkxZmYyY2FkOGRkYzI5MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zT0/VcW9swBrQ4wlQuDwPWzWxxq
OZrcUNay1mIbgJE50lBW1Fa29we7ETULtepdO4Ad9jjTa6c+xpBsjuYIbn2gHfzM
KlYuKDQEKuApD54u4Et8BA+p4NvYDko4fxRYaNAHHYp4Ub37niAE1DYnMmKGcI3i
Ob6fcCWYEFrCz3egnFtK7jbvfAr7xoQ5anDo1IAHvPnZGfzEH0CBeVxr3gsr+5ky
PlHFcNAmeMaACi3M9DdtRCREOrr4T0fGrR7oAAedZnY4EkLvtHPmyoB53juASDUa
LcKQE60RINt3JGMiB65ejzbWQPI4WxD9Gkidvc5TLUdxbwXIMRe1HxBs0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy3MBZ+s8HmeA91yR/yytjdwpLhMB8GA1UdIwQY
MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt
ZjkzNWZjMGYyMGQ1LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1
LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQ3Ftv+z
ztwZqKwkSQjW6PrC7A6LhyBjQmCUdu8iXhyUOLV3If5yNCodm6xy1+UZLgJZEACb
sBQbxQlF4diY6Yfm5Z6hH91wK8/XMSVvyTpfdwHva22fMfV8ugjnfZ95eW37s08R
w5kWTA8Tin+y+nbuYKpI/OB8l8MF4EkHrMnH6/hWStUbQnoWHy4HEBDuetHGCdg1
X+e1Mz7IL1b3ynriTfxXhb6Lwj5J3F3uOO6UN8vXZMM8KGSec4pL16PmRMRZ0htX
R4KO27bQY5P/edfuPfliDtCXcK7yC1yGFOYcj40Zqdfj0M8gWmtKL0fYgvfYpAlT
SU/f6ZnrfG26lA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:21:45 2025 by rpki-client