Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: DEadzH1BC+RyqO0hyYHrQN79UEtqSZ/IrVQPM74iijA=
Subject key identifier: 69:AC:BF:1E:DC:6D:2A:F1:85:D0:66:86:E8:6C:B1:22:5B:06:F5:98
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 0F46857F9A9A9DD6CB9D13CDD5CAE7001A6AAE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 0404
Signing time: Sun 03 Aug 2025 17:25:18 +0000
Manifest this update: Sun 03 Aug 2025 17:20:18 +0000
Manifest next update: Mon 04 Aug 2025 18:13:18 +0000
Files and hashes: 1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: p7eSKzEURoubmphsvpiWy1DHtjtcWhv+MMkNEWbQN44=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 18:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:46:85:7f:9a:9a:9d:d6:cb:9d:13:cd:d5:ca:e7:00:1a:6a:ae:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Aug 3 17:20:18 2025 GMT
Not After : Aug 4 18:13:18 2025 GMT
Subject: CN=69ACBF1EDC6D2AF185D06686E86CB1225B06F598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:ed:12:52:a2:ec:a1:24:24:7c:c5:e0:4d:
89:f9:06:29:54:8b:c3:c3:d9:c5:73:73:99:c0:81:
04:2a:a7:f9:fc:ea:37:54:59:11:b7:d9:08:34:bb:
81:d1:52:a4:1e:f4:36:c0:a7:b2:aa:61:ca:05:f4:
bb:b8:80:99:de:14:95:b8:42:26:ad:a2:4d:91:57:
80:95:d6:a1:d7:60:9f:e7:81:33:b9:ff:3f:4f:09:
1a:b2:59:57:c2:ab:45:f6:2c:a5:0f:1e:8b:16:c8:
f7:b1:bb:c5:76:9c:62:9f:4a:05:63:67:66:45:e2:
de:49:0f:bd:cd:77:7d:f3:70:d0:ba:e5:1a:ff:92:
77:bb:25:43:2a:66:87:76:2e:04:ee:15:12:6d:b3:
3b:96:ba:00:4e:3c:8d:dc:7c:9d:f9:fc:68:e7:f4:
8e:ae:e0:91:0b:7a:72:24:a9:83:03:49:c0:0a:c5:
b4:ed:2a:f1:f9:4a:a6:90:0b:6e:8f:23:28:fb:1d:
53:d5:c1:ee:59:31:43:68:b8:88:77:29:62:52:16:
3a:11:00:c3:b1:22:ad:2f:af:9f:80:82:27:e6:2c:
ee:86:07:dd:70:04:99:a5:45:94:be:ab:4a:8e:41:
f8:1b:0b:3d:ed:95:74:fd:a7:99:35:46:40:cd:5a:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AC:BF:1E:DC:6D:2A:F1:85:D0:66:86:E8:6C:B1:22:5B:06:F5:98
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:43:a5:22:7e:8d:c2:5e:a3:c4:e1:4d:9c:a1:91:c9:0c:29:
5a:78:d5:7b:95:69:c2:70:21:99:bc:01:3c:a0:90:6d:c6:34:
70:a1:1b:03:2e:a9:51:47:a1:a0:00:6a:42:02:b7:02:c6:51:
42:75:a7:da:f9:ce:9b:b7:a0:65:61:12:58:81:60:5d:ee:a4:
be:5b:60:17:d9:5f:86:ae:a6:44:ed:69:13:c5:b7:79:3f:d3:
82:e3:8b:51:9e:8c:fb:b8:e0:42:52:57:f0:c3:a8:ab:b6:3f:
fa:50:f2:25:50:f4:a0:25:90:e5:bf:c9:59:c2:c2:23:83:f0:
48:eb:a3:d5:7a:e4:0a:9a:bf:49:a5:57:51:ae:9d:d7:02:29:
c7:7b:3d:a0:84:81:f8:d6:34:da:d6:06:d9:ca:11:30:71:e1:
7a:bc:9c:45:16:05:a6:f2:ab:d3:a5:db:50:37:f3:db:c4:1c:
12:3c:a9:ba:f9:7d:e7:b0:36:9b:b6:a3:71:80:8f:94:57:03:
ac:1a:e3:f0:32:03:45:bd:f6:7d:ca:4d:e8:5f:d6:79:d2:8c:
41:7b:1c:c9:e3:ae:f6:69:51:4a:7b:0b:03:bc:f0:18:a1:69:
93:9b:88:02:1e:c3:da:7e:7e:3c:82:dd:e4:b8:ba:2a:e0:49:
9a:91:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:28 2025 by rpki-client