Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: RucBZ2h19mzTKTsbDZlNM5lu+APrY3XFH/pT64YO97Y=
Subject key identifier: E7:10:FA:B4:AE:D0:D9:46:98:7F:8E:A6:D3:24:94:91:0D:C7:C9:C2
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019A2289887162DCDDFCCD63B8260C1EA9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 22:00:29 +0000
Manifest this update: Sun 26 Oct 2025 22:00:29 +0000
Manifest next update: Mon 27 Oct 2025 22:00:29 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: lqCUlyga9yYbF/vwgUV7vPsDptIfAo5eEEawH61kQSE=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:88:71:62:dc:dd:fc:cd:63:b8:26:0c:1e:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Oct 26 22:00:29 2025 GMT
Not After : Oct 27 22:00:29 2025 GMT
Subject: CN=e710fab4aed0d946987f8ea6d32494910dc7c9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:f2:30:23:20:e6:72:b0:7b:0e:02:45:91:
60:30:89:93:33:26:22:09:6f:4d:83:85:3c:8c:87:
04:e5:26:7b:50:85:69:14:9c:d9:1c:f0:77:e6:fc:
21:af:99:30:f5:cf:9f:74:07:16:8a:68:01:4d:f3:
a3:cb:a3:53:80:c9:ed:c6:79:20:5f:24:fb:e7:3e:
94:9f:56:58:c7:a3:95:87:14:9a:c7:14:d0:c8:2e:
94:98:25:f9:7f:0f:a6:af:95:95:c6:a5:80:4b:1d:
01:3b:9e:c1:7a:65:84:1e:93:77:14:ed:31:6b:ae:
62:01:0f:02:b2:aa:f4:b9:64:3c:18:b6:b8:b5:25:
79:a0:2b:8c:4f:ab:25:92:2c:a6:51:e1:63:b7:19:
66:26:d7:87:28:3f:ce:f0:d9:6b:f9:4d:c1:b8:d9:
86:1c:a8:13:32:b6:50:5b:9f:af:9d:c9:12:3b:4f:
5b:a9:c7:99:44:59:97:d7:2e:2c:6e:57:c8:c9:f4:
67:dc:a5:17:d9:e0:9d:62:5b:4e:34:c8:34:b4:96:
0f:29:87:78:e1:00:68:b0:d5:80:90:d1:86:7e:05:
43:9f:7f:7b:f8:f7:99:cf:4b:c3:18:64:66:76:9a:
ff:47:8f:ca:b7:f9:e7:a3:7e:99:6c:af:18:c5:1b:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:FA:B4:AE:D0:D9:46:98:7F:8E:A6:D3:24:94:91:0D:C7:C9:C2
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4a:03:ec:4b:d0:2f:b0:6f:e5:43:aa:c8:b0:e4:e7:fb:2e:
c6:18:6e:4c:5a:22:fe:a5:b4:29:d0:90:bc:d8:de:e8:8a:7c:
b2:f0:f7:e0:20:9f:43:ad:ec:84:fd:0e:b3:d0:05:1a:c4:df:
e7:01:f9:a9:c3:51:78:74:a4:e0:6e:e7:0c:40:9a:65:a6:4c:
2f:d2:28:db:84:43:2c:a7:b9:90:b4:91:c5:03:a1:3f:92:4b:
03:9d:17:39:11:88:5e:c8:54:1b:ba:0b:81:e6:03:87:b5:c8:
f9:aa:7e:23:ee:82:1d:fc:7a:45:07:bc:67:1d:d1:f3:eb:d7:
e1:77:00:d6:1a:0f:54:0c:e2:c1:16:bc:20:e2:de:af:a9:65:
09:3d:39:30:a8:32:17:13:bf:5d:7e:aa:9b:19:ea:b5:5a:7e:
3f:78:9d:e4:dc:92:ee:19:04:a3:c6:23:55:dd:af:2c:07:fa:
ec:16:3d:1e:7d:72:bf:16:ca:33:be:73:dc:b5:9a:c8:46:f0:
09:b9:2d:79:54:83:a6:67:c2:64:a9:a1:c4:00:a3:ef:e7:9c:
5d:6d:41:21:db:35:02:fe:06:41:71:2b:ab:fc:46:64:a8:fa:
88:2d:aa:70:56:46:36:af:2c:25:95:58:8f:68:cf:32:af:e3:
4c:77:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:22 2025 by rpki-client