Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: TZcmm52srLsEa4WfxgNJmXiQyd1fNu2goF2zuUfoCGg=
Subject key identifier: 85:05:CA:09:F7:C0:FE:10:B4:20:F5:58:84:76:0E:C9:AC:33:9F:E1
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 18E377746AB7C5E48A93625352AEEE8A05818535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 051B
Signing time: Sun 01 Mar 2026 10:57:51 +0000
Manifest this update: Sun 01 Mar 2026 10:52:51 +0000
Manifest next update: Mon 02 Mar 2026 12:36:51 +0000
Files and hashes: 1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: YWk5kAXe6s4vMW80vLFXARQ2v+1lux9cAl6S9DhMEc0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e3:77:74:6a:b7:c5:e4:8a:93:62:53:52:ae:ee:8a:05:81:85:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Mar 1 10:52:51 2026 GMT
Not After : Mar 2 12:36:51 2026 GMT
Subject: CN=8505CA09F7C0FE10B420F55884760EC9AC339FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:52:44:0a:1f:a3:cf:f7:9c:57:91:57:fb:
6e:8e:44:b1:60:10:20:6e:d3:dd:84:fc:c2:02:a8:
c2:a5:a9:33:d4:40:b3:95:47:dd:6a:b2:73:e2:89:
33:c0:bf:ec:5d:a2:7f:fa:00:aa:00:1b:8b:48:a4:
57:9c:e5:11:09:77:61:41:f4:24:be:35:de:4c:03:
87:6f:35:a4:f3:24:ff:3f:5d:0f:52:37:3a:c6:ea:
51:86:2e:de:c7:22:c8:90:61:04:4c:14:81:d7:75:
14:5f:2c:4c:ed:5e:99:6a:a0:15:e1:7d:cb:1f:e0:
6e:13:5e:3d:19:6d:1f:84:5d:ec:b8:ab:7a:32:81:
3c:64:2a:60:06:f7:19:63:81:b4:c7:40:ee:4e:99:
e9:41:c6:20:0c:db:0e:dc:6e:b9:8b:b7:50:ce:b1:
f7:78:8a:88:6d:5e:b5:5a:cd:37:42:3e:3d:21:96:
ee:c7:3a:d2:9a:e8:3e:1b:0b:2f:64:64:1d:21:a9:
d8:0c:90:7c:c7:29:af:6f:ee:0a:7b:af:64:0a:c8:
96:c8:81:a0:92:a3:17:ec:0e:4a:78:ac:24:e3:c8:
4e:8e:b6:ff:72:c5:89:e1:d2:61:4b:80:6f:30:2c:
1e:15:a3:f2:e4:0c:ae:56:fe:5f:44:cb:db:39:04:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:05:CA:09:F7:C0:FE:10:B4:20:F5:58:84:76:0E:C9:AC:33:9F:E1
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:00:a7:d0:91:5b:25:1e:34:cd:4c:68:80:aa:95:9e:91:
8f:96:48:1d:a4:af:a8:c9:1c:28:73:85:6f:42:72:99:c5:f1:
53:1e:06:ab:4d:5c:a3:b0:f6:b6:a6:59:38:50:58:5f:3f:08:
78:9b:86:e1:9a:ae:f2:23:e0:79:f6:9c:53:21:c9:00:a9:8b:
07:7d:38:9e:22:7b:65:b3:25:3e:70:a0:5f:b2:5a:6f:bb:7d:
55:98:2d:14:41:d8:ee:56:c1:2d:52:f0:ff:77:53:a1:07:2b:
1f:83:64:cb:46:ea:a0:03:15:e7:48:87:3c:fd:6d:71:dc:8e:
81:99:6a:71:a2:00:cd:91:54:56:18:55:a0:a3:8f:93:93:73:
57:04:2e:9e:4b:2e:2e:e5:2b:46:9a:56:53:ac:38:80:a1:ab:
1f:ad:c0:d9:18:18:75:be:49:7d:41:66:af:4e:da:b8:49:fb:
da:4e:da:ae:f7:1c:87:0d:52:4e:e4:42:01:be:ab:8d:db:32:
4b:51:20:3a:77:31:b5:6b:d2:97:14:d1:81:3a:f3:11:a3:e4:
7a:e3:c2:aa:e3:d7:3f:aa:ea:2f:4b:d6:71:ac:be:39:37:f2:
ba:a1:a0:3a:9c:ac:25:77:10:aa:d2:d0:35:6e:63:89:cd:be:
74:32:ca:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:27 2026 by rpki-client