Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: mVoFlltp/KkHHUtXTuz+cfmj6bA2o+LlLuXQ0RhSFac=
Subject key identifier: EE:85:DB:D8:AB:47:C5:05:0B:67:55:33:F9:8E:8B:30:33:38:72:AA
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 01989712A99B6398417D0B7397A18D0D366A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 02AD
Signing time: Mon 11 Aug 2025 03:00:39 +0000
Manifest this update: Mon 11 Aug 2025 03:00:39 +0000
Manifest next update: Tue 12 Aug 2025 03:00:39 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: UN65Kl5zEjp1szoc+OC1sldTT/3fCi52DAw5KekgkWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:a9:9b:63:98:41:7d:0b:73:97:a1:8d:0d:36:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Aug 11 03:00:39 2025 GMT
Not After : Aug 12 03:00:39 2025 GMT
Subject: CN=ee85dbd8ab47c5050b675533f98e8b30333872aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:86:5a:09:6a:4e:0a:e5:5f:96:fe:4c:4d:
2b:9f:15:54:c4:25:48:c7:b6:2f:d4:92:85:57:97:
2a:e4:e7:42:85:c0:14:26:6e:cf:75:7d:b6:2e:4c:
9c:08:dc:99:30:64:79:f7:12:dc:ed:1a:26:95:73:
1f:3c:11:92:e6:02:f7:f8:36:cc:b4:11:15:f8:31:
a0:0e:ea:b0:13:c3:7e:5a:7b:45:a2:35:4c:b9:60:
88:50:73:fa:78:dc:d1:d9:3c:c2:32:a2:c2:5e:e2:
c7:cd:56:f5:63:60:5b:98:2f:ed:62:55:7c:db:ac:
5b:6b:f0:16:1c:3a:4b:39:99:b2:25:48:19:df:be:
53:59:4b:6b:c5:69:47:80:71:0d:dc:1b:90:79:97:
a3:49:38:28:b9:72:fd:e2:15:ab:2a:3f:c4:bc:24:
f0:4d:c5:09:be:05:22:fe:41:c2:72:3d:0a:b7:16:
bc:02:b8:d4:54:31:b8:b5:c8:c4:c9:84:35:9b:1d:
f7:60:38:21:a6:c8:28:08:39:52:c0:58:d7:8b:69:
1a:23:93:0e:7b:fa:73:13:7e:e5:ce:0d:70:ac:51:
05:bc:10:48:8c:ef:e3:28:47:68:b9:bf:5a:85:f9:
01:cc:f9:b9:eb:0b:d8:c4:01:dc:e3:21:3a:80:07:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:DB:D8:AB:47:C5:05:0B:67:55:33:F9:8E:8B:30:33:38:72:AA
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5c:2c:e6:f6:13:f9:9d:f0:c3:c5:e5:28:a3:d4:ff:62:6b:
b1:6d:8e:db:20:ff:4b:c3:3c:ba:28:36:af:02:53:37:d3:59:
ad:32:37:28:a0:c3:5b:54:f8:71:27:bd:f7:aa:52:78:b3:7e:
f3:95:b5:7b:ca:4c:67:6a:92:c6:e9:ae:a3:46:5f:a4:78:e9:
a9:f3:cc:d4:b6:42:2f:c8:15:7c:ee:d3:e2:ba:a5:a9:47:45:
13:31:00:12:ad:9a:31:e2:ee:a9:1b:6a:bc:6a:e8:3f:61:9d:
13:0c:92:01:45:4d:c5:93:6c:32:ed:b4:18:ec:f1:b0:ff:5e:
f2:0a:dd:eb:04:93:a1:cb:fd:4d:92:c1:3b:45:22:02:3d:29:
da:ea:2d:29:c3:04:33:0c:f8:1c:a2:56:ad:2f:b8:74:64:48:
86:0c:d3:f7:91:79:fd:9b:07:5a:7b:4e:eb:2c:16:87:eb:15:
3e:f8:9c:ca:6b:d1:05:ac:f1:3a:60:2e:d4:34:97:b3:a7:df:
e7:f8:7c:00:c2:53:66:29:85:57:da:ca:2c:1c:13:f0:fb:5e:
6a:7a:63:39:4c:7a:c0:ae:d8:ec:b9:14:2d:4b:3f:cd:e4:2d:
b6:ec:e6:89:02:96:b6:63:13:e4:cb:77:f4:89:65:da:3f:f4:
2e:56:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:09 2025 by rpki-client