Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: VicHPpqIMn6xHn/HIlH+qafyE1MXoWgAWYN5BnCyuRc=
Subject key identifier: CB:F9:E8:D8:49:B3:EE:3F:B9:A8:7C:A9:BB:C4:19:9E:B7:0C:20:95
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 019A522C4B214DDD8960B0F4DC604A949EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0AA1
Signing time: Wed 05 Nov 2025 04:00:25 +0000
Manifest this update: Wed 05 Nov 2025 04:00:25 +0000
Manifest next update: Thu 06 Nov 2025 04:00:25 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: YWqgMD67ZIZTXFyLKfKr4nlMcgb+yD9L/o0rgbeGLcs=)
2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:4b:21:4d:dd:89:60:b0:f4:dc:60:4a:94:9e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Nov 5 04:00:25 2025 GMT
Not After : Nov 6 04:00:25 2025 GMT
Subject: CN=cbf9e8d849b3ee3fb9a87ca9bbc4199eb70c2095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:61:12:a9:6c:4c:e5:5b:52:50:e6:7a:c2:
4c:af:1a:47:21:aa:5a:81:63:b4:d8:fb:be:1f:26:
f7:c0:27:e7:91:ab:1b:b8:95:fa:db:2c:b1:90:c4:
f1:91:10:cc:ba:15:86:bf:65:18:d8:d9:39:46:12:
eb:b1:13:a8:2e:fe:c5:0b:90:2e:2e:35:d6:ae:2a:
f8:55:7f:6c:4b:11:ff:22:2b:7b:ed:8e:90:fd:95:
e4:4f:6a:cb:0a:c9:11:3f:98:0d:31:b4:95:a7:b0:
13:f5:66:92:b1:a1:61:50:21:3e:bc:fb:0d:36:4a:
d3:85:c5:3b:33:e6:3f:c5:7b:43:5f:cf:00:a9:b7:
c0:27:9f:c9:8a:82:65:53:29:3f:9b:57:a0:ac:31:
28:5a:3e:e0:d1:cc:64:fc:f7:d6:94:c0:34:58:61:
b6:eb:85:d5:9c:22:c9:9d:58:8e:19:95:ad:cd:60:
a8:ac:e2:61:58:c4:04:76:39:dc:1f:bc:48:1a:8d:
23:99:c5:90:fb:27:9a:98:19:a8:ae:d4:b4:da:36:
b3:4e:b6:24:ab:e2:c9:0a:a2:30:6a:43:1a:fe:ef:
d9:0f:11:f4:7b:56:28:f8:54:19:ef:f2:84:49:73:
6c:77:66:7e:bd:07:76:f3:70:09:08:b9:39:2f:92:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F9:E8:D8:49:B3:EE:3F:B9:A8:7C:A9:BB:C4:19:9E:B7:0C:20:95
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0f:0c:2e:be:14:4b:88:c9:44:28:5b:bc:19:4b:cb:5b:59:
47:42:f3:44:81:af:40:2b:01:41:1e:13:1a:90:bd:68:a0:61:
13:f2:bc:37:9a:94:e1:be:d2:ff:3d:e1:5a:e5:c7:53:0e:3c:
1a:33:48:52:17:80:81:ed:bd:0c:64:3e:b1:36:b7:d2:fa:3e:
15:4a:af:6b:ba:66:52:2b:34:d5:93:ee:ae:b8:c2:ab:d9:92:
1a:56:d4:ac:6a:57:e8:54:40:23:c8:bf:2b:76:9e:fa:d0:75:
30:e7:ec:3b:63:70:a0:eb:5f:62:b9:a1:5f:da:16:2d:0a:2d:
a7:9d:f4:9d:14:c5:30:c2:27:57:fa:30:1a:b5:52:fd:dd:b0:
7b:86:62:97:40:fc:ad:38:b7:0d:a3:8a:71:ac:7b:20:1e:92:
58:2b:8b:7f:8d:85:a9:01:cc:bf:28:9a:43:a8:19:39:14:7b:
cf:ce:08:3e:f7:51:fe:cf:ca:5a:00:30:64:19:93:93:d7:21:
49:4d:3f:fd:a5:06:dc:28:30:ac:6f:c2:92:eb:e1:24:ed:1f:
e0:ad:5b:2b:ee:92:75:f3:7b:27:bc:11:8a:c8:c4:db:a8:3a:
77:7d:87:c6:9f:74:29:cc:26:b5:99:63:76:b9:04:67:75:a9:
37:3e:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:46 2025 by rpki-client