Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: ftkSsWtHBr0H/+mZw1AuFNlaLLqeuf6kOHkET2eX+HQ=
Subject key identifier: 5F:D3:87:77:CC:EC:20:C0:D9:B2:10:FB:23:DF:0D:E5:7F:52:ED:C4
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 312268D5F9813D6CE6872FA6B8516752D31EFADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 03C1
Signing time: Sat 14 Jun 2025 10:44:28 +0000
Manifest this update: Sat 14 Jun 2025 10:39:27 +0000
Manifest next update: Sun 15 Jun 2025 11:01:27 +0000
Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: +kuAPO6dTbDwoWTFhH7UEsyTv5stVhjxBjpunGF5Djw=)
2: AS205603.asa (hash: cBPBrIrKQApvXReq5l0HPs0LV31Ya31Pj6v8h6b+N+0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:22:68:d5:f9:81:3d:6c:e6:87:2f:a6:b8:51:67:52:d3:1e:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Jun 14 10:39:27 2025 GMT
Not After : Jun 15 11:01:27 2025 GMT
Subject: CN=5FD38777CCEC20C0D9B210FB23DF0DE57F52EDC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:e2:20:17:d0:20:d9:f0:73:04:bf:7f:6a:
cc:29:ea:a8:58:6d:22:3f:3b:74:3e:d5:32:32:88:
c0:04:66:da:0f:94:8a:c7:6d:80:a1:65:f1:86:3f:
92:09:51:9b:54:86:38:a9:8c:4a:6f:06:fe:5e:c7:
80:e3:b8:ac:14:7a:dd:d4:0f:10:bb:8b:79:49:20:
0c:41:6e:cd:76:9e:d7:c8:39:e7:af:d7:d3:9a:e5:
3e:fd:a7:20:52:b5:ed:e0:67:51:99:31:5f:7a:7e:
36:92:e2:12:f3:8b:c4:64:25:fe:6f:c9:a6:1c:71:
eb:6f:d1:c1:f2:db:b4:f5:66:c0:f5:91:d0:6c:10:
18:e8:e9:5a:dc:8c:1c:26:0b:58:b3:8e:8c:94:30:
c7:8a:37:27:35:2a:72:cf:e5:b8:20:4a:12:46:7f:
ad:3c:39:10:d7:d1:f2:91:44:7e:43:fe:7d:68:f6:
52:bf:6b:fd:20:97:66:5e:7e:85:70:ea:92:2e:d0:
e9:1d:c5:2a:e3:86:58:6f:a1:d4:1e:1d:72:db:78:
80:bb:f5:99:fb:2c:69:63:f1:b2:f8:a3:0e:dd:5b:
a0:6e:ea:2b:84:34:db:cf:cd:ca:f2:a0:cb:9f:c6:
0c:fb:48:69:8c:bb:63:e5:15:b3:e0:31:63:b7:04:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:87:77:CC:EC:20:C0:D9:B2:10:FB:23:DF:0D:E5:7F:52:ED:C4
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a4:89:ec:ac:be:f9:de:16:4c:7e:d9:fd:c5:7e:14:d0:d4:
95:51:be:59:c1:4c:b6:26:98:56:83:be:cd:9f:e7:d6:55:c9:
1f:85:11:d6:24:9a:b5:8b:c1:79:d7:4b:5a:f4:27:4b:1e:92:
33:26:0a:09:31:11:35:7a:c4:8a:ce:31:47:68:cd:73:74:72:
7b:c2:38:c8:12:ac:c4:5c:b4:66:69:c2:f6:43:94:e4:e3:c0:
9c:42:27:1d:9b:96:4a:ea:cf:ff:35:f4:85:c0:a4:32:c5:86:
2b:d6:bd:8b:75:6d:9a:82:71:ee:8a:a9:f4:a7:b0:93:36:03:
13:3a:38:4f:a8:c4:5f:89:6b:3b:85:e3:16:60:45:e3:29:e5:
9f:df:f3:ed:52:bb:87:35:49:65:a5:47:4a:7c:3d:3c:c0:2a:
3a:c1:fd:f8:46:c5:3c:c5:06:cf:ff:79:40:cb:19:ff:f2:cf:
74:8d:05:42:fe:da:71:0b:e0:ec:7d:0a:4a:b4:12:3a:be:e9:
a4:9f:26:cb:6f:ed:03:bd:ca:e0:30:88:64:05:0e:75:16:ee:
c1:13:7f:35:46:96:7b:32:43:18:96:90:ee:5d:b2:7b:79:1e:
5a:80:65:2d:6b:0e:ac:08:68:07:02:1c:81:b4:09:81:ea:73:
82:36:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:11:17 2025 by rpki-client