Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: 0pAxe2wnjEwYqdKGqWUEzUw7U+t3mWd8BR4FgVfMGFA=
Subject key identifier: E3:EB:B5:A1:16:4B:BC:08:C3:50:64:C6:36:F7:2A:61:89:57:CC:15
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019A5D8C2B2CD624B8C3399CED0A2461B0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 023A
Signing time: Fri 07 Nov 2025 09:00:58 +0000
Manifest this update: Fri 07 Nov 2025 09:00:58 +0000
Manifest next update: Sat 08 Nov 2025 09:00:58 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: QDpCaSVC5qrwSA/Cm1Aq3U0zaPuPVUSLKe/23ir89S8=)
2: 8ls1IYf4jQgBfxPe5pEbNm_NZ0o.roa (hash: rz6mEuTJKM68i99abhpJpeLaSY9D73ABA1sM9jV+L58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:8c:2b:2c:d6:24:b8:c3:39:9c:ed:0a:24:61:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Nov 7 09:00:58 2025 GMT
Not After : Nov 8 09:00:58 2025 GMT
Subject: CN=e3ebb5a1164bbc08c35064c636f72a618957cc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:bf:14:18:8f:0e:5e:e1:0a:17:93:b4:d8:
1e:83:5b:f0:a0:88:d3:75:23:b5:45:b2:ad:03:8f:
89:84:73:09:42:18:45:86:3b:8d:86:20:2e:b7:f5:
70:45:78:8c:9e:24:41:14:05:72:3a:c0:41:c4:b7:
fa:ea:c0:91:9d:d5:9e:92:c2:3e:69:b3:92:12:44:
7d:d4:24:c3:bf:2b:e8:44:91:e2:88:de:2c:db:74:
6c:e3:61:30:96:31:45:c7:eb:d2:22:b8:2e:30:5c:
b8:0a:77:d6:5e:69:c2:12:35:ae:01:48:85:d8:ff:
29:02:ae:4c:2e:12:c6:60:ad:cf:1a:3f:b6:59:73:
7e:4b:08:b0:63:62:66:3d:fe:e9:d3:5f:03:67:77:
1d:40:95:cd:f1:78:3b:86:58:4d:d6:7e:60:8b:93:
13:8b:57:31:40:46:0f:be:1a:9f:73:6f:23:b2:3d:
e0:fa:87:82:10:8e:ce:0d:ff:f5:04:4f:df:8e:be:
98:f2:c5:05:84:a4:24:0c:b1:dc:da:af:21:ff:e8:
06:60:d3:e2:ff:3a:3c:0b:9c:e4:a1:7d:c3:c8:f5:
9e:09:b9:fc:bb:5d:df:9c:34:e0:f5:75:3d:13:4c:
e8:35:1c:bf:a5:9d:02:ac:86:a5:81:4c:b9:4a:d5:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EB:B5:A1:16:4B:BC:08:C3:50:64:C6:36:F7:2A:61:89:57:CC:15
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:6c:64:d8:0a:6d:60:f3:a9:0d:c2:c5:92:df:3c:a9:c1:
e2:1a:a3:24:b3:26:f0:e7:be:2b:bb:cd:f0:af:6f:e5:7c:de:
e0:3d:9f:b9:35:29:3d:19:52:97:29:a1:ab:64:60:3d:f1:b8:
5d:5e:22:81:5f:85:e4:b8:c9:e7:bd:17:04:a2:b9:b3:10:f1:
58:92:30:70:b2:d2:7b:5c:f3:d3:68:da:71:88:8b:93:d9:8a:
9b:fe:53:e1:df:95:30:53:80:f6:3e:92:cb:00:3f:0f:e9:df:
8d:00:36:a7:16:4d:b9:1a:17:5f:0b:c0:c2:66:28:a0:e3:46:
47:f3:41:89:78:c8:fc:ba:f3:d4:5c:35:e1:f9:8a:8d:cd:00:
e0:89:4b:ec:ad:14:ac:01:1e:77:c9:52:db:a0:2b:74:6b:bb:
92:35:83:99:76:46:68:1c:25:a8:48:95:64:35:1c:ee:b9:04:
19:e3:8d:3c:f5:00:58:85:57:58:ab:ff:23:69:2a:e6:9a:ef:
bf:89:1f:63:7d:07:82:cf:92:e7:10:83:e9:30:49:6b:86:cd:
c3:a2:90:77:bd:6e:ac:cb:ae:a2:f3:3b:26:96:77:a2:46:18:
d8:df:01:bb:cd:12:e0:81:dc:c7:8b:a7:ca:75:9e:b4:ba:dc:
82:c5:0c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpdjCss1iS4wzmc7QokYbDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0
NTExMDMwHhcNMjUxMTA3MDkwMDU4WhcNMjUxMTA4MDkwMDU4WjAzMTEwLwYDVQQD
EyhlM2ViYjVhMTE2NGJiYzA4YzM1MDY0YzYzNmY3MmE2MTg5NTdjYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/K/FBiPDl7hCheTtNgeg1vwoIjT
dSO1RbKtA4+JhHMJQhhFhjuNhiAut/VwRXiMniRBFAVyOsBBxLf66sCRndWeksI+
abOSEkR91CTDvyvoRJHiiN4s23Rs42EwljFFx+vSIrguMFy4CnfWXmnCEjWuAUiF
2P8pAq5MLhLGYK3PGj+2WXN+SwiwY2JmPf7p018DZ3cdQJXN8Xg7hlhN1n5gi5MT
i1cxQEYPvhqfc28jsj3g+oeCEI7ODf/1BE/fjr6Y8sUFhKQkDLHc2q8h/+gGYNPi
/zo8C5zkoX3DyPWeCbn8u13fnDTg9XU9E0zoNRy/pZ0CrIalgUy5StV6gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPrtaEWS7wIw1Bkxjb3KmGJV8wVMB8GA1UdIwQY
MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt
ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3
LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHH5sZNgK
bWDzqQ3CxZLfPKnB4hqjJLMm8Oe+K7vN8K9v5Xze4D2fuTUpPRlSlymhq2RgPfG4
XV4igV+F5LjJ570XBKK5sxDxWJIwcLLSe1zz02jacYiLk9mKm/5T4d+VMFOA9j6S
ywA/D+nfjQA2pxZNuRoXXwvAwmYooONGR/NBiXjI/Lrz1Fw14fmKjc0A4IlL7K0U
rAEed8lS26ArdGu7kjWDmXZGaBwlqEiVZDUc7rkEGeONPPUAWIVXWKv/I2kq5prv
v4kfY30Hgs+S5xCD6TBJa4bNw6KQd71urMuuovM7JpZ3okYY2N8Bu80S4IHcx4un
ynWetLrcgsUMXg==
-----END CERTIFICATE-----
Generated at Fri Nov 7 12:03:15 2025 by rpki-client