Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: Wn0iHt34LKmlMD0AqtbrRdroeY9sQiV1bBwzsNW8NfE=
Subject key identifier: 16:14:92:B3:DA:42:DE:62:FB:84:52:32:4C:63:71:E6:3C:A1:54:23
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 01984AAF035730ADC1818A662FDED049C6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0994
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: YDT/ZHd3cVgJdCoJU/yftKMMiTX5QyIwH9uu3l49vwM=)
2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:03:57:30:ad:c1:81:8a:66:2f:de:d0:49:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=161492b3da42de62fb8452324c6371e63ca15423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:8e:12:bc:c5:a8:f1:bf:23:23:5d:8e:12:
59:dc:d4:a1:d3:e1:74:f8:d8:bb:bb:0a:03:bb:89:
82:37:f6:54:7a:73:00:50:1a:0c:12:50:b2:09:77:
9a:0b:29:48:0a:77:1a:d1:bd:7e:45:94:ee:c3:6a:
b0:d9:6d:98:03:c6:0f:84:e9:d8:29:d5:8b:20:d7:
d4:cf:9b:88:41:f6:bb:8b:1f:40:36:f0:78:84:06:
90:f0:ba:b7:72:31:a2:ea:4c:b4:ff:c4:89:f8:f2:
66:3e:ff:b3:5f:c2:2b:45:9b:73:bc:00:7d:19:13:
8b:58:b9:e5:92:67:3a:c9:cd:44:e4:27:28:33:b3:
73:0e:09:90:64:9d:01:8f:d9:cf:ab:4a:25:52:09:
16:07:06:67:5c:a8:44:fa:ba:4c:9f:09:f8:ab:e5:
98:cd:c3:40:61:ec:19:2a:8e:d0:de:38:02:77:cc:
c4:af:ac:74:71:ed:ba:bb:a4:0c:0f:89:9d:ff:3c:
87:da:1f:4f:85:23:12:ae:cd:77:ee:6c:50:d4:7e:
43:20:9d:e6:15:4f:2e:a3:64:27:65:09:23:2a:6a:
16:e5:8b:69:44:8a:07:54:82:af:1d:c9:07:3a:e5:
cb:18:d9:6c:1a:6e:60:fb:7b:93:1e:9c:ff:ed:16:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:92:B3:DA:42:DE:62:FB:84:52:32:4C:63:71:E6:3C:A1:54:23
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:31:75:c0:d9:73:e2:06:62:b9:96:eb:34:0b:6c:ae:70:30:
25:de:fc:8d:8b:dd:5d:ca:d7:86:49:5b:ea:31:32:c3:7a:e7:
9d:21:fd:b1:09:ed:6c:b5:44:11:27:b7:b5:bf:af:0c:97:9c:
80:e8:51:1a:a3:fc:8b:22:c6:fb:a4:a3:c5:3f:53:af:30:e9:
d7:50:9f:51:1c:81:da:79:8a:86:e7:a2:c8:f3:bd:7b:0c:e1:
da:67:c6:67:e0:70:cc:10:05:44:6d:b8:50:e2:39:46:03:b9:
1b:33:fb:d5:78:54:ce:55:70:68:83:38:45:7a:2d:bf:67:4f:
5c:db:19:25:94:13:9a:c8:37:a4:61:d5:46:29:85:c4:11:b6:
7d:d3:05:5a:a7:f6:ce:d0:87:84:7c:3e:0a:c8:73:a5:c0:df:
ef:52:ae:61:77:fa:1b:99:59:0b:91:42:41:52:a2:03:47:5c:
ad:59:27:da:57:80:a6:ad:0c:cb:bc:22:3b:74:86:9e:e1:af:
89:69:71:4c:a7:13:03:af:f6:3e:66:c7:8a:b7:1b:d1:e2:b2:
4e:7e:b3:b5:4b:a6:e9:7a:17:73:90:84:34:ab:b8:bc:5d:cc:
15:35:f7:ca:16:35:a2:29:c4:73:44:ae:a5:dd:04:d8:ca:36:
83:5f:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:51 2025 by rpki-client