Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: Xld1fS/KegD1BZegxX87oMVpHo9RhkI88NRnGwDYvhg=
Subject key identifier: 34:AB:F0:DB:DD:9B:F0:49:13:91:B0:69:32:89:3B:2C:97:B3:9F:7D
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 0198868D38470EC89231EC71CB7E65F4B673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 09B3
Signing time: Thu 07 Aug 2025 22:00:58 +0000
Manifest this update: Thu 07 Aug 2025 22:00:58 +0000
Manifest next update: Fri 08 Aug 2025 22:00:58 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: w98nC/JciFfUi7DdSANIs4BJvzp0Ma+Khn1QaM8dzAA=)
2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:38:47:0e:c8:92:31:ec:71:cb:7e:65:f4:b6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Aug 7 22:00:58 2025 GMT
Not After : Aug 8 22:00:58 2025 GMT
Subject: CN=34abf0dbdd9bf0491391b06932893b2c97b39f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:4d:e2:25:ea:61:62:00:4d:16:73:36:49:
41:fd:05:9d:9d:09:b5:0f:80:30:10:0c:03:00:3e:
a2:72:48:86:83:9a:65:2f:62:cc:5a:d0:16:92:2b:
c2:ae:84:e8:b2:08:cd:21:3c:73:88:14:04:6d:d9:
66:e3:8d:6c:d3:83:79:0d:09:a5:ae:7a:b0:b9:63:
c8:5e:dc:b0:62:a0:fe:aa:eb:8c:21:a9:e1:ad:d4:
94:d6:f8:3b:bf:fe:8e:5f:1f:7b:3c:4d:77:27:e0:
8c:5a:9f:7e:33:01:22:6c:a5:3f:48:95:d5:9c:0a:
de:7a:2d:62:77:4d:c7:0e:ee:84:2f:a1:43:6b:ba:
4d:0c:94:71:53:4d:90:f1:a8:73:cb:8f:95:6a:63:
ad:7f:8e:52:76:c7:3a:9b:4a:11:aa:e8:59:ce:30:
97:b1:b6:8c:89:cf:dc:12:f6:12:08:98:24:7e:1d:
11:2b:83:d2:b5:ab:52:38:e8:f5:47:0a:c1:ee:f3:
e4:10:3f:2b:9e:c6:cd:c7:c5:35:17:7e:e3:90:0b:
14:0b:96:aa:58:0d:50:05:63:69:86:b3:15:fd:85:
e7:67:fe:2a:37:af:67:92:e5:b4:40:b7:8c:4e:97:
29:0e:9d:0b:61:f1:5f:ad:40:69:7d:6b:22:a2:02:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:F0:DB:DD:9B:F0:49:13:91:B0:69:32:89:3B:2C:97:B3:9F:7D
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4e:43:31:85:c4:e6:31:96:c3:7b:91:99:ba:4d:37:f4:18:
0a:3e:4b:83:c9:fc:83:4d:f2:93:b5:fa:8d:1f:16:2d:df:c7:
2f:2f:ce:cb:c9:1f:97:d1:81:f0:16:3d:b9:9a:cb:50:d1:2b:
9e:66:85:38:0d:58:97:4d:37:8e:4b:1e:d9:d0:5c:35:8f:62:
e1:25:62:cf:04:2e:1a:04:60:55:0b:75:86:b5:d6:78:d0:01:
27:04:ed:44:f3:ae:fe:e9:f1:bd:2d:74:a2:20:bd:34:7f:7b:
8b:cd:07:05:88:40:ee:5d:0f:18:ec:f3:b8:6b:4a:f6:78:fe:
0e:36:88:57:95:3f:77:a7:c4:4e:1e:02:81:41:7b:1c:5c:8b:
e1:f2:e0:10:41:0d:cb:f6:5f:c2:85:2a:19:26:b8:b6:a0:3a:
81:04:8f:0f:cf:ce:41:0b:ba:d6:58:f6:63:dc:c8:14:52:f7:
f8:46:e7:d5:93:3a:7f:9e:ff:b3:9a:2c:2e:4e:95:6a:10:70:
3c:e9:c8:eb:18:46:0a:d2:1f:ea:6b:81:84:66:e5:f1:c8:27:
30:89:d2:c4:22:ec:6b:41:54:28:c8:af:2d:73:42:fb:4a:c3:
a4:1f:fe:66:4a:b1:0f:3e:f1:a4:5f:a5:84:0a:cc:23:5c:ad:
f2:27:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:50:06 2025 by rpki-client