Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: pM40OatCm7FGD+dFQ7Q4lVJJFZD82xjZI35y/VGzCsY=
Subject key identifier: AC:88:71:C5:93:8F:A9:7F:5E:F2:A0:15:B5:A3:F8:2F:A9:4E:E8:AA
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019A4F2B92BBEF9D172C3B61F7615B926E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0391
Signing time: Tue 04 Nov 2025 14:00:46 +0000
Manifest this update: Tue 04 Nov 2025 14:00:46 +0000
Manifest next update: Wed 05 Nov 2025 14:00:46 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: umMt+VJ0emOPvc4X8mtN+eHl/xx4k5X3RnjKPMPNdV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:92:bb:ef:9d:17:2c:3b:61:f7:61:5b:92:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Nov 4 14:00:46 2025 GMT
Not After : Nov 5 14:00:46 2025 GMT
Subject: CN=ac8871c5938fa97f5ef2a015b5a3f82fa94ee8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:13:c9:c4:c6:32:24:36:c6:c7:94:59:df:
10:e6:86:6f:25:f6:60:5d:35:4c:6e:61:de:e5:9c:
cf:5b:eb:c3:64:df:78:90:37:d6:5b:10:a6:76:09:
a6:14:dc:a5:c6:62:b4:59:82:20:df:9f:23:7e:65:
18:f0:05:a3:64:9b:5f:71:eb:1f:37:b2:47:ff:7a:
f9:6a:ed:16:f4:de:60:2b:77:06:b9:57:9a:b1:55:
7a:7c:09:ba:a6:97:be:f5:95:ef:9e:a3:e9:75:11:
41:3f:e9:3e:c1:47:ad:14:98:dd:28:8c:d7:8e:46:
ae:ac:a8:55:b3:9f:6b:e9:66:83:16:02:5f:47:11:
9e:e7:c4:3b:c4:40:75:68:b8:51:d8:64:13:d9:ac:
76:a4:65:61:ef:04:4f:71:9c:4e:15:57:bf:ee:79:
d1:b4:73:a8:a7:39:94:4e:6d:e6:0e:8b:9a:ca:b3:
11:29:85:6a:df:e0:be:a9:01:44:16:5f:24:f9:ed:
5e:0d:2f:64:5c:22:b8:35:57:17:8f:6b:ef:ff:42:
e2:9b:31:eb:8d:50:8c:4e:fb:fb:4b:27:2c:72:d0:
5f:2b:0d:bc:8b:4e:08:19:b8:b2:3a:41:49:a0:78:
bf:58:6f:77:db:9a:ae:68:6f:c5:27:cb:a9:70:3b:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:71:C5:93:8F:A9:7F:5E:F2:A0:15:B5:A3:F8:2F:A9:4E:E8:AA
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:86:e4:fd:da:be:c6:11:2f:f5:35:9e:bb:ba:ec:ef:f0:93:
dd:52:1c:f0:e6:84:e8:c8:27:dd:78:29:d9:32:35:ef:fc:11:
47:15:d7:4c:7f:0e:59:24:1c:75:12:73:a0:44:ae:73:05:fb:
f2:1f:f3:ae:54:44:6a:8d:08:9f:98:d7:d9:ba:24:03:93:68:
ac:71:ce:54:68:22:18:22:bc:24:8c:89:80:aa:48:51:fa:1f:
f9:7a:1c:b8:b9:27:02:e6:01:1d:eb:34:03:c6:96:8d:f9:4d:
9a:ef:31:d9:71:49:f1:a1:3c:3a:03:8b:b2:fb:84:48:2a:30:
d3:97:fa:37:ae:6a:44:f2:37:f5:7c:66:ea:b2:20:3d:43:5b:
c1:64:6a:98:1a:04:9f:98:59:a5:3a:eb:64:72:ce:ce:a8:fb:
c5:c0:c0:8d:47:f5:c6:aa:a2:ce:9d:42:20:44:92:5e:3f:eb:
56:b1:6f:a6:b0:0e:1b:c9:81:5e:4a:d5:a1:24:43:8f:ce:a5:
b6:0e:fa:b8:bd:e1:ba:5e:99:97:b6:81:ff:41:93:63:a4:1b:
1a:fa:03:3a:6b:8a:2b:0f:50:12:12:f6:89:31:97:ac:16:e3:
91:c3:ba:4c:ff:5d:50:d5:dc:c9:fe:5e:e9:b4:a5:16:ab:25:
4f:6d:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:36 2025 by rpki-client