Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: RSNDebYZWN+tLd+0Q6AwdLnmxZiVKFPXe0Ny6V0r6DI=
Subject key identifier: 3A:C7:55:CF:CC:86:69:20:C4:5C:4E:51:9B:53:4D:C7:BF:30:2E:19
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 18D9E267165304D9608117CA112D60D3505EB05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: 69
Signing time: Sat 14 Jun 2025 21:42:21 +0000
Manifest this update: Sat 14 Jun 2025 21:37:21 +0000
Manifest next update: Sun 15 Jun 2025 22:42:21 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: gdbEmLUV+XlD9ppO61LqhNQry8ChzPUKejpgncbxUg4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d9:e2:67:16:53:04:d9:60:81:17:ca:11:2d:60:d3:50:5e:b0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Jun 14 21:37:21 2025 GMT
Not After : Jun 15 22:42:21 2025 GMT
Subject: CN=3AC755CFCC866920C45C4E519B534DC7BF302E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:2b:46:98:e1:a5:f9:fb:d7:e9:0a:2a:73:
39:5e:7c:7f:31:78:19:1f:09:37:f1:c9:ea:f3:68:
7b:ee:43:b7:34:6e:50:0c:9b:32:25:c3:a8:42:d8:
f6:aa:da:51:1a:31:5d:c7:46:c0:69:7d:0d:57:a5:
d5:f4:fe:e1:fe:0e:af:68:60:ce:d9:86:9e:16:4f:
49:f3:07:f7:7f:27:8c:15:88:33:48:aa:22:5b:2f:
35:31:b4:7b:48:ce:a0:69:2d:3f:a2:5e:5f:b9:ed:
de:6a:85:c2:26:c5:3b:f8:98:a7:e3:3f:f5:aa:1a:
86:c9:d5:5f:f4:aa:ba:83:e5:3c:49:a7:89:e9:f0:
85:1b:50:1d:a0:12:1b:27:d8:ad:47:d6:37:e3:4b:
01:53:25:c5:2c:95:86:90:44:61:5d:56:b8:80:5c:
f7:c5:14:e1:b5:b6:43:7e:10:2e:c7:70:f2:7b:cc:
3b:61:18:e3:2a:af:30:54:c5:11:19:9c:67:d6:03:
79:d6:04:63:51:04:85:d0:df:00:e7:6c:4d:c9:cf:
47:ee:ed:9e:75:7a:cd:06:f1:81:35:06:0e:18:68:
44:25:51:08:0a:2e:9d:ad:9d:c2:e8:d9:08:5e:dd:
de:4d:33:a1:b4:f0:a5:12:ab:aa:36:51:b4:de:22:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:55:CF:CC:86:69:20:C4:5C:4E:51:9B:53:4D:C7:BF:30:2E:19
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:5b:20:75:32:39:fa:f3:40:f1:32:02:ac:ce:29:09:72:ee:
b3:b1:19:59:56:27:3d:f4:c0:59:1d:66:ba:2e:e1:ce:af:cb:
81:5f:9c:07:8e:98:c8:0b:be:13:a8:e2:ca:95:16:f6:8c:64:
c3:8a:1b:7e:91:3d:a7:77:b4:20:ca:73:1d:f3:52:9d:9e:f3:
03:3a:19:02:70:23:65:31:93:60:21:47:41:7f:af:49:69:e5:
46:29:96:7c:dc:7f:3a:f8:df:ed:be:96:2d:e2:40:a4:51:2f:
b9:9e:99:99:84:dd:11:9e:1a:42:d2:51:e8:94:fe:54:dd:87:
4e:aa:b0:95:ae:60:bf:46:03:6b:ad:97:be:67:8f:93:01:22:
f8:d0:9d:35:73:05:dd:54:03:82:dd:b9:76:72:44:cf:42:18:
ae:72:c8:cd:85:fd:e4:e6:ab:a1:a1:bb:5f:69:20:8e:94:6f:
01:10:e7:7c:ae:f2:b9:ed:76:30:67:be:a7:7b:3d:da:72:1f:
b9:ae:95:e2:83:6e:8d:73:15:97:0e:ac:df:3f:cc:9e:0b:6e:
0a:3b:11:8f:88:ed:64:e4:a4:2b:bc:c2:b8:f7:41:e9:be:07:
eb:24:b1:7f:99:4f:71:f8:a0:6c:43:9b:c2:b7:b1:16:ea:21:
a4:d9:87:2c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGNniZxZTBNlggRfKES1g01BesF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjViYjU0MjA1NTM5OGNhYzIxZGIyNDA3ZmQ4ZTdkNzk1
YTEwZjVlZDAeFw0yNTA2MTQyMTM3MjFaFw0yNTA2MTUyMjQyMjFaMDMxMTAvBgNV
BAMTKDNBQzc1NUNGQ0M4NjY5MjBDNDVDNEU1MTlCNTM0REM3QkYzMDJFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDCtGmOGl+fvX6QoqczlefH8x
eBkfCTfxyerzaHvuQ7c0blAMmzIlw6hC2Paq2lEaMV3HRsBpfQ1XpdX0/uH+Dq9o
YM7Zhp4WT0nzB/d/J4wViDNIqiJbLzUxtHtIzqBpLT+iXl+57d5qhcImxTv4mKfj
P/WqGobJ1V/0qrqD5TxJp4np8IUbUB2gEhsn2K1H1jfjSwFTJcUslYaQRGFdVriA
XPfFFOG1tkN+EC7HcPJ7zDthGOMqrzBUxREZnGfWA3nWBGNRBIXQ3wDnbE3Jz0fu
7Z51es0G8YE1Bg4YaEQlUQgKLp2tncLo2Qhe3d5NM6G08KUSq6o2UbTeIlixAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUOsdVz8yGaSDEXE5Rm1NNx78wLhkwHwYDVR0j
BBgwFoAUJbtUIFU5jKwh2yQH/Y59eVoQ9e0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzEvMjVCQjU0MjA1NTM5OENBQzIxREIyNDA3RkQ4RTdENzk1QTEwRjVFRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pidFVJRlU1akt3aDJ5UUhfWTU5ZVZv
UTllMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvMS8yNUJCNTQyMDU1Mzk4Q0FDMjFE
QjI0MDdGRDhFN0Q3OTVBMTBGNUVELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4VsgdTI5+vNA8TICrM4p
CXLus7EZWVYnPfTAWR1mui7hzq/LgV+cB46YyAu+E6jiypUW9oxkw4obfpE9p3e0
IMpzHfNSnZ7zAzoZAnAjZTGTYCFHQX+vSWnlRimWfNx/Ovjf7b6WLeJApFEvuZ6Z
mYTdEZ4aQtJR6JT+VN2HTqqwla5gv0YDa62XvmePkwEi+NCdNXMF3VQDgt25dnJE
z0IYrnLIzYX95OaroaG7X2kgjpRvARDnfK7yue12MGe+p3s92nIfua6V4oNujXMV
lw6s3z/MngtuCjsRj4jtZOSkK7zCuPdB6b4H6ySxf5lPcfigbEObwrexFuohpNmH
LA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:29 2025 by rpki-client