Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: V1ed+EYaKkf876WLy9psyA6eNYx3eC+mo8rptmqxYEg=
Subject key identifier: F4:90:9C:86:1E:E4:A7:62:52:8E:18:73:44:E0:15:03:56:50:E1:8C
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019A4F2AFC7557AAFE88E25290B5AD38F357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0B1B
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: mHzY70sW2VHT0IHeMJ5+vmTNzDHfffevYeImCimVsEE=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fc:75:57:aa:fe:88:e2:52:90:b5:ad:38:f3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=f4909c861ee4a762528e187344e015035650e18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:d6:0b:82:2f:42:61:53:68:a6:8d:8e:4c:
9d:5c:b3:fc:2c:b1:bc:c5:84:39:e1:fa:a8:9a:b1:
b2:a5:38:74:5b:1a:34:65:17:bc:94:3a:e3:36:38:
6f:ba:44:6b:64:1e:d5:8c:52:ac:4a:dc:9c:68:f6:
9c:f5:2a:3d:b6:e0:b6:a0:fc:f0:db:31:71:18:f5:
f9:b8:56:ec:0f:77:15:64:24:dc:4e:86:fe:24:66:
75:f4:01:66:fa:2c:c2:c5:ef:a6:47:7a:31:0f:21:
d2:88:61:e6:17:36:44:f8:96:b3:41:45:25:9a:49:
08:7d:32:6f:97:39:da:0d:60:30:72:90:8a:62:a4:
4e:fa:71:ac:d8:35:4f:25:9c:ec:72:c9:b5:57:ef:
5b:09:a7:c5:dd:9a:3c:45:bb:d7:2a:64:b5:e2:d5:
94:9f:ce:ba:64:92:0f:8b:57:84:88:1d:35:20:4e:
69:17:19:29:7c:58:d1:cb:6c:ce:8e:c5:6e:b0:dd:
91:d2:29:f2:64:51:8d:6b:3b:96:dd:71:db:2a:17:
d8:6d:4b:e7:8d:9f:9b:d9:35:79:4c:d4:d8:28:06:
0e:c4:71:3d:b1:fc:90:bd:fa:64:b0:48:c8:b1:d4:
50:13:f2:4c:02:2c:83:fa:36:33:ce:01:1f:dc:b3:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:9C:86:1E:E4:A7:62:52:8E:18:73:44:E0:15:03:56:50:E1:8C
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:56:f3:c5:ff:a7:ed:0b:8e:99:af:ed:3b:01:b4:c3:ec:a2:
8d:7b:3b:da:7b:bf:f1:33:97:da:eb:14:a5:64:17:b9:78:32:
00:41:dd:c5:32:24:f0:91:65:db:50:38:13:f1:a6:8a:5e:98:
d8:87:45:78:a2:5e:c5:6b:5b:69:7b:23:39:a9:5a:9a:90:43:
c6:45:c9:f3:e5:2b:64:8b:00:2b:24:5d:73:0f:76:7d:12:d3:
f8:14:0b:2e:74:16:39:ef:5f:a9:cf:2f:12:13:7c:f0:fe:7f:
b9:d7:b0:a0:b6:b8:60:ce:b3:cb:14:4c:7a:08:7c:bb:4b:9f:
6c:fd:21:cb:ac:07:c3:73:b9:17:9d:70:c3:45:44:f8:32:fa:
46:d1:2c:7c:6d:c6:01:e1:1b:60:07:75:2f:a6:d8:3c:6b:58:
8b:4a:8e:f8:08:c6:11:60:21:ab:79:0e:c0:85:9e:d8:02:3b:
d0:07:43:f0:69:ef:c5:c1:94:50:71:4e:06:d1:80:a5:2f:57:
c9:95:bc:52:30:ae:88:6d:e0:a6:1b:3c:9a:08:29:8e:c5:5a:
7d:67:6a:2d:bb:94:2d:e9:87:d3:43:86:6f:bc:36:b8:03:6f:
fa:e9:cd:3e:97:b2:f7:5a:cd:dc:62:ed:1f:c5:23:ac:ef:ad:
10:c5:e4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:52 2025 by rpki-client