Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: 3R4xSOCMqj1qw250YrQ9weLGSluOwQP8pDT5oOU+CfY=
Subject key identifier: 74:64:C7:EA:39:E3:5A:E9:4B:F8:4F:6A:0C:55:28:5A:85:3F:9F:70
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 01984588AF09448C4C0B61FBC576CFE8B9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 07:00:42 +0000
Manifest this update: Sat 26 Jul 2025 07:00:42 +0000
Manifest next update: Sun 27 Jul 2025 07:00:42 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: 4M3RQDBVWHeE95b7CF9XtBsSqMeyG5NwRJEUwLo+G+k=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:af:09:44:8c:4c:0b:61:fb:c5:76:cf:e8:b9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jul 26 07:00:42 2025 GMT
Not After : Jul 27 07:00:42 2025 GMT
Subject: CN=7464c7ea39e35ae94bf84f6a0c55285a853f9f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:41:cd:be:5d:3c:85:6f:01:ea:e7:8b:f9:
70:47:9e:c8:61:aa:2a:2d:46:49:ae:92:06:8b:6c:
5e:49:ca:02:b5:ec:aa:9a:9d:8f:73:f9:2e:f7:c4:
b8:45:5d:ca:92:84:4b:00:fb:53:48:ad:9d:18:c2:
87:03:6f:1f:79:ae:d1:76:cc:d0:23:2c:98:3b:20:
d9:17:38:a2:e0:19:67:0f:e6:ed:8e:e9:62:91:0f:
93:e0:be:05:54:16:10:95:55:0b:6e:36:0b:44:c5:
d3:8c:a4:5d:34:e0:0a:4f:57:95:2d:89:a0:4f:43:
09:35:4b:85:11:99:bf:89:d1:22:2f:38:c6:36:43:
bd:3a:77:c9:ec:6e:a4:a6:e8:14:7e:de:8a:80:1e:
e7:45:9e:05:79:f1:e0:38:ed:66:8a:6f:51:5e:ba:
50:65:2a:0f:22:23:80:09:80:b5:0f:69:81:b2:bd:
fe:85:07:ca:29:c0:e2:96:82:53:35:2f:c1:82:19:
58:75:f0:38:93:ce:6f:9b:fa:3f:35:ed:ae:87:e1:
53:4a:60:34:7c:a9:66:a5:98:e9:31:66:1e:0a:2b:
e1:f1:42:0d:18:21:da:4f:9d:05:ea:70:75:f2:ee:
2d:60:ef:b2:1e:41:e7:03:4e:e3:3a:ba:e7:10:f9:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:64:C7:EA:39:E3:5A:E9:4B:F8:4F:6A:0C:55:28:5A:85:3F:9F:70
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:89:ac:f1:36:fd:a7:4e:40:22:13:41:f1:e3:1b:2c:f2:
bf:95:51:c4:7c:bb:84:a1:23:16:a0:79:e4:7f:11:73:ea:a4:
b6:9e:3a:a6:43:78:e2:a4:b6:48:6f:ed:78:d8:f5:e8:ad:2b:
34:34:c3:79:59:7f:b9:f0:ba:54:36:c9:d3:ec:4d:a5:e5:ff:
1e:e5:7d:73:68:09:26:51:78:92:93:df:df:19:2c:a7:b1:1c:
0f:ad:56:55:77:77:4c:df:07:5f:f9:a6:41:ac:90:f2:53:9d:
0e:ea:c4:58:17:08:0e:c6:50:00:93:4f:34:27:2f:2e:bc:b0:
15:82:83:35:e7:db:16:7b:48:0c:e5:a6:67:da:b5:82:c0:59:
a1:74:19:d0:fe:47:d9:20:db:cd:f9:72:e3:ff:a9:2b:65:eb:
e2:02:38:1c:9b:e0:93:02:da:10:56:db:35:d0:8c:c7:4a:e1:
a7:7a:26:2a:99:87:22:97:e5:56:d4:1c:dc:40:36:eb:cc:55:
a7:f4:ee:4c:5c:21:fe:fa:78:fc:16:ae:b4:56:6f:8f:b5:e7:
fd:6e:c6:bf:37:de:ea:c1:b4:0c:a4:71:25:58:75:5c:c3:bf:
2a:3a:78:14:33:ae:43:0a:30:79:d7:a7:e5:6c:55:76:de:b1:
1f:cf:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:19:57 2025 by rpki-client