Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: GDXbJZI1yHAk7yFz2f5w7bJxqHZ5gguj0ocuPesmgbs=
Subject key identifier: 35:5F:A9:07:F7:BE:FF:C7:60:97:6A:6F:0B:DA:64:0F:A3:A7:44:72
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019873E2A5DB4626F5E4110D6128121AB877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 07:01:30 +0000
Manifest this update: Mon 04 Aug 2025 07:01:30 +0000
Manifest next update: Tue 05 Aug 2025 07:01:30 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: R7d4XUgGJ+pfSO2F4owCaA2KDaxaYyFi1YTM8Up2ALQ=)
2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a5:db:46:26:f5:e4:11:0d:61:28:12:1a:b8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Aug 4 07:01:30 2025 GMT
Not After : Aug 5 07:01:30 2025 GMT
Subject: CN=355fa907f7beffc760976a6f0bda640fa3a74472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:f8:af:ed:90:6c:6e:2e:b6:17:3c:8e:1d:
f2:c0:2e:ea:f4:f5:86:2d:a3:08:24:b4:af:2d:28:
25:37:82:d0:1b:31:00:f4:67:c9:b6:60:e7:50:df:
09:bc:e0:6f:7f:22:d2:df:84:b4:c8:5f:ec:b4:de:
98:1c:61:26:b2:f5:a2:a5:ec:d1:74:92:97:d1:a5:
87:44:2a:f7:d6:a2:59:e5:0d:ba:c3:d9:bf:64:c9:
b7:b2:3a:9f:1f:4b:a3:7b:18:48:a2:9b:60:fb:c8:
26:3e:f2:31:84:e9:c2:aa:2a:a1:03:8a:64:6d:72:
18:bd:bf:66:ba:4a:1d:18:e1:33:71:79:9a:69:12:
f2:b6:0e:fd:88:f3:ee:4c:3b:f3:c5:69:6f:a9:96:
77:cc:28:56:36:97:41:28:22:44:de:a5:89:36:d0:
5b:3f:38:92:96:5e:f2:03:c0:9e:26:7c:00:ea:48:
69:cc:0f:2f:1e:cf:fb:6d:87:a7:20:35:4f:26:b8:
87:dd:ca:69:be:7b:9d:3f:40:5a:8f:d9:bf:9e:c2:
4d:a5:5a:06:b5:68:54:c9:98:c8:26:a4:a8:91:9c:
b7:c6:78:3a:75:c7:1a:88:25:e3:e2:a1:80:76:ee:
48:35:a2:64:85:6c:76:03:5e:b3:06:30:15:49:2d:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:A9:07:F7:BE:FF:C7:60:97:6A:6F:0B:DA:64:0F:A3:A7:44:72
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0e:ac:1c:7a:83:c0:69:2d:61:81:e3:2b:b7:c4:8a:16:fe:
0a:c7:db:4b:c9:30:48:dc:52:3e:d0:74:9d:c8:ec:ec:69:10:
1b:4b:d0:67:f4:98:6f:d4:fa:4b:2b:21:28:90:22:e8:8d:68:
c0:38:8a:08:86:00:fe:a4:42:16:49:65:bd:89:78:4b:d4:a7:
1e:ac:33:f7:04:e6:1c:05:72:8b:fb:4b:36:59:ac:b2:40:36:
3e:8f:96:dd:0d:c1:08:3e:20:3f:f1:b7:30:0f:be:04:5f:50:
09:3a:fb:63:fd:77:85:6a:e7:27:f9:ff:ac:cb:ee:ec:b9:f2:
2f:72:37:bc:ff:45:5b:53:33:77:91:ba:d4:74:e0:ca:7e:5e:
9f:37:19:6b:29:aa:3f:22:57:f7:13:ba:b5:5b:b7:26:2c:3d:
e4:60:06:30:e0:70:0d:5c:32:a9:c1:57:1c:51:d4:dd:08:0a:
0f:2e:33:ad:39:2b:7b:02:87:b3:8b:c9:85:40:47:c5:5e:72:
9d:31:8a:c3:b5:bb:d5:cb:14:4a:33:b2:ec:bf:e5:db:b6:e8:
55:f5:c0:6c:6d:d2:a5:d6:28:7b:ec:0d:0a:c5:ae:66:cf:60:
e5:5d:ac:ef:a2:f5:5e:3d:58:48:06:7c:de:d6:08:a6:f2:66:
55:12:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:24 2025 by rpki-client