Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: lZ2NFbgFs/acfZ+Tm88iio+9ZbxUG8zfTF6ABeUZrmc=
Subject key identifier: B9:FF:4B:E2:F4:84:AD:84:0F:C5:DA:28:58:25:E3:F0:13:9C:8B:A0
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019848F76430F966EB4A46CA26EB7634A5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 0122
Signing time: Sat 26 Jul 2025 23:00:29 +0000
Manifest this update: Sat 26 Jul 2025 23:00:29 +0000
Manifest next update: Sun 27 Jul 2025 23:00:29 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: 86sThKALa9lz39wMiygicVsPzIySiax5Ow8JflZVUkQ=)
2: 7Pi7IgYh5vJV-DxhZs-iQBFdIZE.roa (hash: mMqEKg8gbbKcixQMFJ/ANrO4EPfcPD9yGb46gyRhR40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:64:30:f9:66:eb:4a:46:ca:26:eb:76:34:a5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Jul 26 23:00:29 2025 GMT
Not After : Jul 27 23:00:29 2025 GMT
Subject: CN=b9ff4be2f484ad840fc5da285825e3f0139c8ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:96:0d:53:98:cd:f4:4c:58:5d:cc:ab:00:
fc:39:d6:e2:c3:b6:48:d6:7d:17:e0:3b:ae:51:a0:
1a:36:a5:88:5b:5b:aa:e7:e7:d4:6c:02:cd:e1:46:
d3:e9:3e:45:95:5d:ba:68:22:70:3c:b5:1f:c1:88:
da:ed:9a:35:37:79:57:8b:5c:26:89:7f:69:3e:fe:
33:89:a4:56:dd:bc:9b:12:ee:8d:b1:72:9c:e8:2a:
51:ab:43:4d:65:de:36:79:8f:a8:fd:95:cc:1f:b8:
fa:b7:93:88:1a:fe:23:ea:b2:b3:c4:89:91:43:9b:
85:8a:70:b4:46:d4:93:70:42:b1:cd:3f:b9:c1:59:
ca:fc:ab:9c:ac:65:89:f2:9e:16:6f:55:44:0b:14:
1f:f6:a0:41:43:a7:d4:d7:d1:0a:8e:a3:84:8a:ad:
77:85:dd:cb:cd:db:0e:34:fc:2b:be:4f:0e:5c:82:
4c:79:fa:bf:2b:54:95:bd:ac:04:3e:e5:23:df:f4:
aa:42:52:47:b9:c8:41:91:7e:f7:9f:d9:1f:57:b7:
d3:99:39:88:e1:09:2e:cc:fb:da:17:98:54:16:af:
ca:b2:39:86:6b:aa:1b:1a:b9:82:ff:64:06:95:d6:
fb:11:b8:51:2c:ae:5c:3e:b4:cc:38:03:b0:ec:54:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:4B:E2:F4:84:AD:84:0F:C5:DA:28:58:25:E3:F0:13:9C:8B:A0
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:aa:0c:ad:cd:94:00:92:4c:36:ff:97:b8:7e:f8:65:2b:99:
9d:bf:79:28:69:a6:18:11:7a:12:c6:d1:28:8a:8d:07:0c:60:
28:ed:c3:63:89:59:d4:41:a8:dc:c9:82:91:3e:50:9d:4e:29:
61:4f:b0:94:06:73:18:40:e6:3a:51:8b:f2:a5:02:a7:9f:79:
ca:34:72:34:7d:fc:a9:05:85:8c:7c:bd:81:8d:ca:c7:71:53:
7c:64:4b:cd:01:0e:4a:b1:2d:23:6f:11:f4:b3:2d:3d:61:76:
4d:e3:5f:0c:1d:87:ef:b4:36:15:1c:06:a3:24:f3:ca:be:14:
c1:27:36:ce:07:56:d6:98:d1:14:53:02:7a:5a:b2:af:76:0f:
23:07:0d:aa:b8:80:d1:4c:75:20:fa:fa:54:c8:db:7d:cf:f0:
ff:92:46:f7:c2:40:84:da:a5:6a:43:6d:69:e6:c8:62:47:95:
00:a8:0a:df:83:92:b8:16:d3:1c:cd:9a:47:80:3a:62:68:5b:
2c:e5:38:7e:8d:a6:ce:da:81:57:54:0c:06:69:c0:36:1a:51:
34:0f:4a:08:17:f5:1a:c1:2d:4e:c0:c5:8a:80:32:48:86:ee:
f4:70:a4:69:5a:96:dc:aa:09:71:6d:3a:b8:89:61:57:8d:ef:
4e:b9:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:45 2025 by rpki-client