Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: KFqpbBzWTM0PMbxHPO/ommtBRsuWJJshNX9+jn/uXOE=
Subject key identifier: C3:99:24:8A:50:9A:CE:7E:9E:2D:CB:22:07:F0:77:57:22:7A:7D:0C
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 3B050A950DA44DB9E89CCD16F42919F94EB22CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 03F4
Signing time: Tue 22 Jul 2025 18:05:07 +0000
Manifest this update: Tue 22 Jul 2025 18:00:06 +0000
Manifest next update: Wed 23 Jul 2025 20:19:06 +0000
Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: jkBdE0xc0FP2Sw823XRqVK2R81y3PruhvKcT/mCEaPY=)
2: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:05:0a:95:0d:a4:4d:b9:e8:9c:cd:16:f4:29:19:f9:4e:b2:2c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Jul 22 18:00:06 2025 GMT
Not After : Jul 23 20:19:06 2025 GMT
Subject: CN=C399248A509ACE7E9E2DCB2207F07757227A7D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:67:e3:12:f8:b2:51:1c:b7:97:5a:0e:af:
4b:aa:7c:dd:97:02:d3:80:da:db:73:80:61:7e:58:
ac:1e:f6:af:49:b2:9d:f6:ce:a3:9e:55:43:f7:2e:
4a:bb:70:d2:68:2b:fc:8b:51:7d:cd:d2:7f:ee:52:
75:37:a4:99:9a:0b:36:33:bc:50:cc:14:b3:6f:95:
d9:09:e9:07:d7:b2:6d:04:0a:4f:1d:3f:d9:52:4a:
80:5a:4a:bd:ff:b8:0b:37:ef:b0:74:3e:e4:69:49:
0e:c0:89:a2:f1:39:60:e7:ec:21:01:56:bb:46:46:
5b:df:ae:8e:21:a1:60:95:57:45:62:cd:ee:d2:48:
07:ef:50:6d:26:0a:94:d9:27:eb:ce:b6:14:e7:f9:
45:59:33:c0:b6:ab:d9:ca:35:4a:21:27:32:37:d8:
d1:86:a0:2e:1c:cc:03:c5:2a:50:9e:9b:30:23:78:
17:12:43:94:0b:a2:d4:93:d5:2e:f8:e8:f3:87:f7:
28:b7:fd:36:56:2e:79:49:b7:71:c0:74:6e:e4:e6:
47:9f:22:cc:4b:13:a5:20:fa:08:18:1e:a6:d7:e7:
ea:30:ba:49:31:b2:7c:90:c0:11:8f:6d:38:68:c8:
f5:9a:e6:d5:cc:82:ac:7a:fa:f9:92:63:e5:56:c8:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:24:8A:50:9A:CE:7E:9E:2D:CB:22:07:F0:77:57:22:7A:7D:0C
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c5:fd:ef:81:3b:46:cd:42:01:2e:68:1f:f9:eb:2e:d2:7c:
b7:be:20:89:97:ce:ac:16:9f:6e:cf:f0:60:b4:b3:58:7b:c9:
a2:3b:38:e2:71:40:ec:5c:8d:bd:fd:88:2e:20:ac:17:b8:3b:
f6:06:5f:24:a5:0f:83:79:bd:73:79:80:c5:cc:ed:0a:0b:e5:
fd:95:fb:8c:7d:da:4d:b6:e2:6a:b6:35:ec:03:50:52:72:ee:
7a:49:d0:30:19:68:2d:36:1c:71:d9:46:c6:55:e8:e9:44:87:
b5:59:dc:c4:f3:d2:b3:80:c4:85:33:eb:2e:c6:af:05:7b:c2:
49:cd:d7:f0:2b:8c:41:9a:d2:96:d8:45:4c:d5:60:97:5e:3b:
d2:d5:5d:3d:23:6c:c7:f2:c2:25:fc:de:08:3b:09:84:6c:ff:
94:64:30:3a:5a:3e:3d:47:5b:3d:cb:8c:a9:9e:c4:db:3c:e4:
b1:c3:58:36:5f:b2:59:ce:a5:75:0e:84:3b:47:e0:03:23:ac:
a6:d8:9c:bf:06:f0:9d:ef:0d:b2:1e:0c:9b:85:f4:1a:c1:44:
18:bb:83:ff:ac:65:dd:10:e9:54:80:fe:bf:76:10:4b:3c:7f:
c0:87:b9:fe:30:94:a5:60:46:f7:94:34:23:1e:d1:19:9f:e6:
5f:45:bf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:57:45 2025 by rpki-client