Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: B5Kme7ZltkqpSbzTUuUP1YufGWMc8OhjInO98W3dtss=
Subject key identifier: 48:6B:8B:76:37:11:04:65:FD:BB:E0:09:21:EE:65:2B:A0:7D:E9:0F
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019A4EF57AF81620F13D3DD6DEC93720403F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: t9YPqB2jtiDxQcZ/3hmFrzVdzWighoFJTNHhRVTF+9U=)
2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7a:f8:16:20:f1:3d:3d:d6:de:c9:37:20:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=486b8b7637110465fdbbe00921ee652ba07de90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:8d:10:ff:cb:19:0b:a3:b8:60:0b:e6:5a:
98:a7:bd:af:25:b9:5b:be:8e:5f:ad:6d:5b:1f:bb:
66:e2:b3:2f:fb:f4:c1:dc:95:db:d8:5e:c0:36:e4:
6c:5f:66:97:90:80:d1:18:27:cc:f6:fd:4a:4f:79:
50:b7:b4:b9:cc:90:7e:d7:1d:f1:f5:3d:95:be:46:
27:ed:88:0e:59:02:3b:df:a6:76:49:46:96:62:ca:
6c:36:e5:34:f0:e5:14:60:43:83:55:d4:7a:d2:c0:
8b:e1:80:0b:15:2d:c0:ce:25:db:cf:16:42:8a:09:
0b:5f:71:1d:8c:5e:9a:b1:a6:60:7d:cd:84:3f:64:
7b:df:03:fc:87:f2:2d:a3:10:3f:92:7c:89:cb:79:
76:a1:a5:95:6b:11:a5:9a:84:da:9a:8b:09:15:8d:
af:81:ed:7b:ca:41:2b:6c:24:a2:60:28:ba:a3:bb:
5f:6c:38:0e:ff:be:c3:25:a5:b3:ed:21:ce:4b:c9:
09:c2:6b:66:7b:71:e3:a5:a0:b8:c5:4b:cb:54:f4:
16:e8:1d:fa:90:4b:46:c6:1a:92:44:68:5f:8f:6f:
64:74:c3:37:10:01:9d:03:3a:3e:ac:50:9a:9f:86:
bb:68:d3:6d:f1:8c:9f:16:5a:71:32:37:fb:f4:0b:
47:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6B:8B:76:37:11:04:65:FD:BB:E0:09:21:EE:65:2B:A0:7D:E9:0F
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:77:ba:95:b3:ef:48:0e:ef:1e:42:c8:10:ea:3b:75:a1:a1:
e9:27:4c:9f:de:02:8e:fc:f9:df:d5:2d:5d:24:9d:2f:a4:47:
2e:94:86:dd:c4:80:4e:36:fb:90:54:ce:a9:d0:06:90:1f:37:
cd:5e:ff:03:63:48:38:72:91:61:2a:fa:a4:a7:38:a5:e6:b6:
4a:29:32:ef:b9:7d:e5:4e:8f:a0:28:ce:bd:64:b9:d0:39:ed:
6d:86:0b:96:90:5d:ab:08:43:76:f9:6e:ce:ce:59:4b:51:fb:
32:55:02:c6:60:f3:32:bf:9f:66:97:16:02:35:50:ee:48:dc:
b3:70:70:5f:a2:8e:b5:1a:65:76:56:be:9d:ce:bb:ca:d3:bd:
03:04:61:f7:d0:14:73:ce:6f:be:d4:79:08:aa:e7:3e:ce:fe:
55:8a:0e:8b:eb:56:85:56:ab:1b:b9:52:27:80:98:d9:b8:dc:
33:26:54:7b:9a:72:54:6a:ed:b3:30:00:51:13:f4:3d:1c:0e:
4f:70:13:d1:98:f9:de:2b:bc:db:07:81:90:9f:c9:1a:84:b3:
1c:15:9e:a2:c9:37:df:16:fc:90:21:74:ce:f0:a4:81:b5:5b:
18:cc:37:3b:c2:de:da:8c:a7:d7:d3:20:cf:66:54:21:77:62:
bd:8a:b0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:36 2025 by rpki-client