Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: y4w+x46boowODNgxmIPO6eJu2lZSP2ULnIxq5/XAOA0=
Subject key identifier: FB:BE:28:FC:2E:64:92:70:9B:F6:5D:BD:D6:06:76:E1:FE:F9:B9:29
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 0197711B57C348B54B4255390D8B1645F2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 01:01:46 +0000
Manifest this update: Sun 15 Jun 2025 01:01:46 +0000
Manifest next update: Mon 16 Jun 2025 01:01:46 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: Vl7n2aYOB5IH5ktT4vC6adPy7jBx7xT/wU8N3UbdwWo=)
2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:57:c3:48:b5:4b:42:55:39:0d:8b:16:45:f2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Jun 15 01:01:46 2025 GMT
Not After : Jun 16 01:01:46 2025 GMT
Subject: CN=fbbe28fc2e6492709bf65dbdd60676e1fef9b929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:09:61:1f:47:6a:e4:02:f5:e2:43:60:a8:
51:07:72:78:76:b3:4b:cd:47:5b:65:48:66:7f:d5:
0c:dd:3c:7d:98:42:e2:dd:c1:30:0c:a9:40:0b:34:
a9:95:ae:64:14:8f:da:10:c3:68:7d:a1:0e:50:82:
63:cc:7f:e6:df:7d:04:8b:0e:89:d3:8c:40:c0:07:
f9:ac:91:59:51:f9:bf:12:68:ff:de:c4:6f:45:f1:
e4:bb:3d:f1:6e:c8:5b:61:7f:23:4c:02:88:b0:82:
d3:60:0a:f7:61:cd:52:c7:8b:40:26:a2:4f:16:7b:
4b:b8:ea:61:4c:fe:4a:57:db:0a:6d:e9:97:2d:0a:
23:98:8e:74:71:c1:d0:8a:4f:46:d4:73:39:61:c8:
95:9a:ef:b8:f8:26:1b:26:14:a1:46:96:a0:aa:13:
93:fc:86:b0:a0:63:ce:68:cc:9d:f6:f2:b5:09:12:
b7:a9:77:37:af:f9:b0:cd:64:00:ca:de:90:62:41:
c2:9f:bd:21:e9:47:8d:19:9e:15:1b:14:31:9a:b7:
d5:83:90:8e:cc:17:32:2f:11:ce:4d:b9:45:2f:32:
19:55:21:75:8f:5e:0c:20:e9:18:6f:49:63:ad:6a:
29:d5:cb:32:98:c6:96:b9:3a:e2:92:23:65:ff:02:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:28:FC:2E:64:92:70:9B:F6:5D:BD:D6:06:76:E1:FE:F9:B9:29
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:63:e6:60:84:36:75:bf:06:16:53:8d:0e:5f:43:02:1b:46:
1d:37:cd:a5:f0:df:b9:76:89:d0:8b:86:70:cc:81:0d:3a:80:
5c:0a:80:56:ca:2a:32:e0:70:49:01:48:f2:da:fc:c6:37:56:
77:62:09:87:e3:a0:39:ac:38:b6:74:bb:d7:57:a8:ac:d5:2d:
c0:2f:2b:8c:ce:6e:6f:d0:ec:63:c1:ca:34:0c:18:72:56:1c:
44:b4:64:b5:bc:a3:25:90:bd:5f:d3:ed:f0:24:97:e5:6f:86:
38:f8:91:9d:62:94:8b:39:a6:79:65:0f:8d:ac:17:fd:b2:f4:
b1:77:7c:e5:5e:7e:54:d3:9b:55:c5:90:e7:17:5b:ee:ff:00:
a5:b6:ea:53:65:d5:77:ae:72:49:06:3e:d2:e6:45:ea:48:14:
3e:b6:ed:22:53:cc:38:f9:4e:c3:3d:9a:50:45:4e:76:de:5b:
e0:b1:cb:62:4a:96:e9:d7:d9:d8:0c:a9:bd:a3:52:2e:eb:9f:
95:25:9f:87:cc:39:ed:26:84:3f:27:87:8b:1e:f8:5d:e0:a5:
6a:75:12:29:64:ca:6c:f3:84:e2:a5:aa:1c:7c:8d:1a:68:0d:
b4:82:05:8b:9f:08:1c:60:95:6e:d8:5b:92:a2:86:5a:7e:e6:
8b:ad:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:34 2025 by rpki-client