Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: AXutWUzqpF9M0bHHfYv4V3jxZt9iX5GfbU/ovwI7jHc=
Subject key identifier: 1E:E1:CC:1D:42:B4:01:51:F5:C5:C2:6B:A9:B8:85:12:2B:1E:64:0E
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 01987373F7CCF1EB879AA3D7853330789383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 0138
Signing time: Mon 04 Aug 2025 05:00:36 +0000
Manifest this update: Mon 04 Aug 2025 05:00:36 +0000
Manifest next update: Tue 05 Aug 2025 05:00:36 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: z+bPkjKPTborLyolXwFeHZNwfEctdt7T5n6gRvWoTQ8=)
2: 7Pi7IgYh5vJV-DxhZs-iQBFdIZE.roa (hash: mMqEKg8gbbKcixQMFJ/ANrO4EPfcPD9yGb46gyRhR40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f7:cc:f1:eb:87:9a:a3:d7:85:33:30:78:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Aug 4 05:00:36 2025 GMT
Not After : Aug 5 05:00:36 2025 GMT
Subject: CN=1ee1cc1d42b40151f5c5c26ba9b885122b1e640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:12:8b:00:26:dc:cf:41:78:cb:5f:26:b1:c6:
90:d1:fb:e6:55:e5:07:a1:96:ad:b9:3f:90:e4:1a:
6a:ac:46:a5:c6:34:b7:71:39:42:32:f6:47:82:0c:
32:96:c1:60:a1:b0:7a:41:1d:14:bb:2e:66:c3:96:
12:81:6a:f0:56:13:b5:55:26:3a:08:fc:33:d5:b4:
1a:d2:ab:32:e2:4d:87:b2:ed:ae:c0:2c:4e:6b:5f:
d9:54:18:0b:62:35:46:6a:99:b4:be:eb:5d:ed:e0:
85:93:aa:ba:f1:c8:21:b0:92:50:d3:3b:c6:69:ca:
5c:b0:ab:2c:5e:57:d7:8b:77:fb:56:a2:fd:da:c4:
78:ef:b3:2b:21:25:49:77:6a:0e:15:9c:34:b6:5c:
5f:0c:05:bc:3d:89:28:d2:ad:00:ec:82:2d:d1:c5:
63:a0:39:50:92:41:b7:64:68:6f:53:b1:a1:84:c0:
08:20:7b:81:3f:d0:cf:31:0c:a5:9d:d5:10:2a:c5:
a4:f0:33:5d:cd:cf:59:fc:9c:0a:3f:ac:a6:5a:90:
54:fd:98:82:7f:3c:79:ff:b4:63:7e:34:d2:5e:39:
d0:db:9b:7c:4a:61:ea:46:08:bd:84:4f:63:4f:9f:
d2:b9:2a:93:a4:b1:96:56:1a:0c:4f:d7:ac:fc:12:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E1:CC:1D:42:B4:01:51:F5:C5:C2:6B:A9:B8:85:12:2B:1E:64:0E
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7c:fa:1b:74:2b:ec:50:e8:b4:b0:b6:cd:c9:01:e9:ea:85:
d1:f4:ee:f9:1b:98:12:fa:ea:b6:ef:d7:3f:fd:d4:25:de:f9:
6a:18:03:52:37:9b:77:27:6d:ba:56:ee:58:5f:1c:01:52:42:
3f:8e:5a:12:47:87:89:b0:bd:8a:b0:9c:40:a1:c6:d5:05:60:
77:5d:81:74:f2:c0:b8:e1:26:4b:26:c5:ce:b4:3a:d2:a6:76:
e8:28:8e:a2:31:53:71:60:59:78:dd:27:5b:e4:7c:0c:48:bd:
ed:c0:9a:18:b2:6c:3e:3b:99:4c:28:a5:b0:a5:ac:b0:32:5a:
60:bf:15:ed:35:8f:03:d6:83:45:d7:45:9e:6c:24:e6:4f:92:
c8:18:29:41:88:fd:ee:8e:5b:48:a5:90:29:7f:5c:cb:2f:91:
70:eb:eb:51:2b:0d:de:b7:64:91:90:ca:1f:40:9b:a3:7a:aa:
ef:d2:9b:73:14:0c:e4:98:68:bf:2a:e8:34:24:7d:e3:d2:dc:
b9:f0:1a:99:dd:0f:6b:18:30:2a:ec:f2:f0:d1:76:f2:6c:01:
29:8c:7f:71:74:97:6f:88:c1:e4:76:23:b3:97:e3:0a:2f:3f:
ba:f9:49:e6:61:04:a0:18:c2:c9:1f:5b:89:ef:5b:43:1b:a7:
fc:58:03:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzc/fM8euHmqPXhTMweJODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0
NTExMDMwHhcNMjUwODA0MDUwMDM2WhcNMjUwODA1MDUwMDM2WjAzMTEwLwYDVQQD
EygxZWUxY2MxZDQyYjQwMTUxZjVjNWMyNmJhOWI4ODUxMjJiMWU2NDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hKLACbcz0F4y18mscaQ0fvmVeUH
oZatuT+Q5BpqrEalxjS3cTlCMvZHggwylsFgobB6QR0Uuy5mw5YSgWrwVhO1VSY6
CPwz1bQa0qsy4k2Hsu2uwCxOa1/ZVBgLYjVGapm0vutd7eCFk6q68cghsJJQ0zvG
acpcsKssXlfXi3f7VqL92sR477MrISVJd2oOFZw0tlxfDAW8PYko0q0A7IIt0cVj
oDlQkkG3ZGhvU7GhhMAIIHuBP9DPMQylndUQKsWk8DNdzc9Z/JwKP6ymWpBU/ZiC
fzx5/7RjfjTSXjnQ25t8SmHqRgi9hE9jT5/SuSqTpLGWVhoMT9es/BIosQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7hzB1CtAFR9cXCa6m4hRIrHmQOMB8GA1UdIwQY
MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt
ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3
LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXz6G3Qr
7FDotLC2zckB6eqF0fTu+RuYEvrqtu/XP/3UJd75ahgDUjebdydtulbuWF8cAVJC
P45aEkeHibC9irCcQKHG1QVgd12BdPLAuOEmSybFzrQ60qZ26CiOojFTcWBZeN0n
W+R8DEi97cCaGLJsPjuZTCilsKWssDJaYL8V7TWPA9aDRddFnmwk5k+SyBgpQYj9
7o5bSKWQKX9cyy+RcOvrUSsN3rdkkZDKH0Cbo3qq79KbcxQM5JhovyroNCR949Lc
ufAamd0PaxgwKuzy8NF28mwBKYx/cXSXb4jB5HYjs5fjCi8/uvlJ5mEEoBjCyR9b
ie9bQxun/FgDRw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:34 2025 by rpki-client