
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: 0Y80vephw/2KxOinv1cpC4dRqXadQCI3avbV3MGnVZo=
Subject key identifier: FC:00:E2:4A:80:50:5A:58:04:AD:9E:6A:CC:94:8D:43:B9:26:E1:ED
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 7337F65705FBC717DEC1A6B2EFB60407FEB4EFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: 33
Signing time: Sun 27 Apr 2025 23:36:53 +0000
Manifest this update: Sun 27 Apr 2025 23:31:53 +0000
Manifest next update: Tue 29 Apr 2025 00:53:53 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: 0TPVl89X+ylkh8m7CAQ9sZlZ/+/Z4xdaORjPONM86Qw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 00:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:37:f6:57:05:fb:c7:17:de:c1:a6:b2:ef:b6:04:07:fe:b4:ef:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Apr 27 23:31:53 2025 GMT
Not After : Apr 29 00:53:53 2025 GMT
Subject: CN=FC00E24A80505A5804AD9E6ACC948D43B926E1ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:c0:77:04:30:eb:27:7d:3e:41:41:03:05:
61:1e:05:45:40:f1:7c:82:bd:c8:3e:93:12:52:3a:
73:9d:0f:e1:9b:61:55:f6:b3:65:3c:eb:4c:82:eb:
39:83:54:f3:ab:45:d8:23:5f:89:40:22:4f:d5:0c:
5b:c0:c0:5e:ae:e0:a1:2f:06:21:3f:35:ee:55:10:
30:55:7b:ce:c4:d4:ab:e7:15:71:60:96:b5:fc:4f:
a1:66:cd:6a:20:4f:d5:6b:2a:7d:76:6c:9c:7a:80:
d6:af:0d:dd:53:4d:f1:93:95:df:cc:88:7d:15:ca:
30:fe:1e:6b:39:fb:c1:8d:77:41:10:cc:5e:e0:b2:
99:aa:2c:37:64:2b:58:fa:cf:66:54:1a:d3:90:14:
9a:11:63:c9:5e:c1:5e:df:75:f8:15:06:95:7c:5f:
60:fe:6b:03:c7:c5:2b:19:c4:87:35:8e:4c:c1:1d:
f0:a9:30:9d:7c:8e:db:35:ae:39:d8:70:14:b9:7a:
04:a7:55:32:7d:48:1d:b8:d5:f9:01:2e:92:01:b6:
3c:16:34:39:75:a4:20:b1:0d:fc:21:14:0b:38:5d:
3f:2f:f7:01:b0:e6:f6:00:36:a4:d3:39:32:94:f4:
3a:4b:b6:0d:2c:16:d7:19:cd:64:4f:f6:f4:d6:56:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:E2:4A:80:50:5A:58:04:AD:9E:6A:CC:94:8D:43:B9:26:E1:ED
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:69:71:0f:75:12:af:10:3c:f3:cd:d3:e5:82:ae:20:a3:2f:
78:79:2d:5f:25:e9:0b:ec:53:9e:d3:5e:61:34:89:44:56:32:
cd:20:a1:20:04:67:ef:3c:a2:07:28:8c:18:0b:16:e7:60:cd:
fc:b9:88:14:fc:e0:56:01:a1:dc:3b:df:be:1a:dc:bd:11:20:
98:d5:30:4a:c2:a2:55:3c:08:ff:9f:f3:01:e9:e3:58:79:09:
47:a3:65:8f:59:df:c3:09:66:bd:c8:b5:de:6c:08:d0:32:b8:
75:e5:8a:59:96:79:62:ae:85:5e:ed:56:95:c3:dd:7e:79:4a:
8b:fe:ed:89:02:e1:9c:5a:e4:92:56:bf:91:0a:a7:6c:68:f1:
f3:b0:f9:64:76:2e:6f:31:9c:e0:2c:a2:89:04:59:50:4d:90:
d2:36:7b:2a:0f:38:ae:ad:a6:e4:0a:1d:0a:39:de:69:7c:ba:
43:60:35:42:74:35:3c:51:e2:6c:0e:a5:5a:e8:de:cd:74:9c:
45:39:19:92:af:32:b8:16:7b:a6:44:14:b0:db:0f:85:92:b5:
5a:7e:ac:9a:19:f0:17:38:80:f9:da:66:ab:ed:95:eb:b6:36:
82:96:e7:72:5b:05:00:89:7e:ea:ff:34:3c:3e:26:4e:46:11:
da:30:fb:5c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUczf2VwX7xxfewaay77YEB/6076MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjViYjU0MjA1NTM5OGNhYzIxZGIyNDA3ZmQ4ZTdkNzk1
YTEwZjVlZDAeFw0yNTA0MjcyMzMxNTNaFw0yNTA0MjkwMDUzNTNaMDMxMTAvBgNV
BAMTKEZDMDBFMjRBODA1MDVBNTgwNEFEOUU2QUNDOTQ4RDQzQjkyNkUxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKsB3BDDrJ30+QUEDBWEeBUVA
8XyCvcg+kxJSOnOdD+GbYVX2s2U860yC6zmDVPOrRdgjX4lAIk/VDFvAwF6u4KEv
BiE/Ne5VEDBVe87E1KvnFXFglrX8T6FmzWogT9VrKn12bJx6gNavDd1TTfGTld/M
iH0VyjD+Hms5+8GNd0EQzF7gspmqLDdkK1j6z2ZUGtOQFJoRY8lewV7fdfgVBpV8
X2D+awPHxSsZxIc1jkzBHfCpMJ18jts1rjnYcBS5egSnVTJ9SB241fkBLpIBtjwW
NDl1pCCxDfwhFAs4XT8v9wGw5vYANqTTOTKU9DpLtg0sFtcZzWRP9vTWVmE1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/ADiSoBQWlgErZ5qzJSNQ7km4e0wHwYDVR0j
BBgwFoAUJbtUIFU5jKwh2yQH/Y59eVoQ9e0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzEvMjVCQjU0MjA1NTM5OENBQzIxREIyNDA3RkQ4RTdENzk1QTEwRjVFRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pidFVJRlU1akt3aDJ5UUhfWTU5ZVZv
UTllMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvMS8yNUJCNTQyMDU1Mzk4Q0FDMjFE
QjI0MDdGRDhFN0Q3OTVBMTBGNUVELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmlxD3USrxA8883T5YKu
IKMveHktXyXpC+xTntNeYTSJRFYyzSChIARn7zyiByiMGAsW52DN/LmIFPzgVgGh
3DvfvhrcvREgmNUwSsKiVTwI/5/zAenjWHkJR6Nlj1nfwwlmvci13mwI0DK4deWK
WZZ5Yq6FXu1WlcPdfnlKi/7tiQLhnFrkkla/kQqnbGjx87D5ZHYubzGc4CyiiQRZ
UE2Q0jZ7Kg84rq2m5AodCjneaXy6Q2A1QnQ1PFHibA6lWujezXScRTkZkq8yuBZ7
pkQUsNsPhZK1Wn6smhnwFziA+dpmq+2V67Y2gpbnclsFAIl+6v80PD4mTkYR2jD7
XA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:04:19 2025 by rpki-client