Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: kOGBtwYpm+jEhv6vVYtB8uRT/zs8f7JMIqtOz+VnjV0=
Subject key identifier: 33:37:FF:E3:F7:E1:F7:C4:59:43:F5:05:61:FC:2E:D7:1C:93:63:3A
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019938DE9DAFE5A58A989BEA5732D4130669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 13:02:17 +0000
Manifest this update: Thu 11 Sep 2025 13:02:17 +0000
Manifest next update: Fri 12 Sep 2025 13:02:17 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: IKQzXNZsQXfiIlw1Rc3d1gaE7CWN4GLIaGcGrkhuHrk=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:9d:af:e5:a5:8a:98:9b:ea:57:32:d4:13:06:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Sep 11 13:02:17 2025 GMT
Not After : Sep 12 13:02:17 2025 GMT
Subject: CN=3337ffe3f7e1f7c45943f50561fc2ed71c93633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:32:28:5e:7c:5d:d2:24:fc:f9:e2:1d:d6:
8b:74:b4:60:9c:73:48:e6:8f:6a:df:08:ec:5c:96:
93:52:f1:b6:2a:d9:01:33:bb:3a:89:60:8a:bf:64:
ab:90:08:57:3d:f9:1f:e0:09:57:75:5f:2b:ce:20:
ef:69:e2:59:b2:e9:35:46:21:c9:4c:6b:63:4a:8f:
28:2f:5e:9f:1f:bb:0c:65:85:c2:08:69:52:49:ae:
c6:38:34:6e:4b:d7:f9:39:93:01:d2:10:9d:8c:08:
86:79:36:ba:23:de:ea:16:dc:f3:c0:b6:1e:aa:99:
5c:ea:a4:a6:e1:b3:48:18:45:b3:6c:7f:14:2f:5c:
d0:55:a5:61:de:ff:d1:4b:7f:68:4f:a9:85:81:e5:
15:38:6c:f8:13:7c:2c:1d:13:1c:f2:ea:78:9b:e9:
86:bd:97:0b:bb:5b:cb:55:12:b7:9c:67:77:ae:78:
71:74:43:37:46:be:40:86:1d:c5:6d:25:e9:06:9b:
9e:f2:0f:f3:22:cb:92:f6:55:49:0c:fb:3c:bd:2c:
81:35:d7:26:4b:cf:d8:a1:3b:16:c8:7d:80:cb:b4:
b3:44:97:c8:66:13:59:06:a1:bf:0f:af:6d:e6:4a:
8a:20:20:a0:44:8c:a0:59:72:4e:84:2d:4a:15:ee:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:FF:E3:F7:E1:F7:C4:59:43:F5:05:61:FC:2E:D7:1C:93:63:3A
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:42:29:7e:e3:bc:84:d3:a7:eb:6b:15:77:95:dc:ed:2e:d9:
3f:4c:77:d2:2c:97:7b:c4:28:61:75:26:3c:d4:67:19:06:c7:
92:2e:03:c1:e5:95:a1:59:e2:e5:83:ea:1e:8d:ad:37:8b:8f:
4d:ed:50:03:b0:19:64:b5:7b:fe:0c:9f:b2:bc:4e:14:b2:54:
33:4a:22:2b:59:d3:c8:9e:a3:27:cd:b8:d3:9e:c8:8e:38:8d:
1d:c4:56:f8:e8:d0:f0:a3:15:ad:46:58:b6:c4:12:db:b0:8a:
d8:30:0c:c8:8f:35:3f:f7:d0:14:da:61:3e:a9:1c:c5:86:99:
78:16:02:cb:a9:ee:a0:31:c4:7c:d7:09:44:21:59:75:c5:b2:
56:11:3b:7a:d3:a4:3e:01:dc:57:e1:4c:34:29:2e:02:33:3c:
79:6f:9b:f9:b1:f5:51:06:b4:31:e0:44:11:2e:5b:33:17:8e:
48:b2:ff:51:cb:28:30:04:20:07:87:79:38:06:3c:71:2f:36:
78:9a:9f:fc:f5:1d:58:41:2f:30:b0:de:ea:c9:79:29:f3:83:
9b:45:19:fd:98:3a:4c:6c:ca:e0:0f:7c:d2:53:21:50:72:93:
f9:b7:22:d0:c9:45:df:1e:ef:6c:aa:d9:72:7e:91:b5:16:5f:
ae:7f:01:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk43p2v5aWKmJvqVzLUEwZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWI5MzlkN2JjYTEzYjZkOGNjZjRkOGU3ODY3NmYzODA3
YTBlY2UwHhcNMjUwOTExMTMwMjE3WhcNMjUwOTEyMTMwMjE3WjAzMTEwLwYDVQQD
EygzMzM3ZmZlM2Y3ZTFmN2M0NTk0M2Y1MDU2MWZjMmVkNzFjOTM2MzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx0yKF58XdIk/PniHdaLdLRgnHNI
5o9q3wjsXJaTUvG2KtkBM7s6iWCKv2SrkAhXPfkf4AlXdV8rziDvaeJZsuk1RiHJ
TGtjSo8oL16fH7sMZYXCCGlSSa7GODRuS9f5OZMB0hCdjAiGeTa6I97qFtzzwLYe
qplc6qSm4bNIGEWzbH8UL1zQVaVh3v/RS39oT6mFgeUVOGz4E3wsHRMc8up4m+mG
vZcLu1vLVRK3nGd3rnhxdEM3Rr5Ahh3FbSXpBpue8g/zIsuS9lVJDPs8vSyBNdcm
S8/YoTsWyH2Ay7SzRJfIZhNZBqG/D69t5kqKICCgRIygWXJOhC1KFe5pKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM3/+P34ffEWUP1BWH8Ltcck2M6MB8GA1UdIwQY
MBaAFNubk517yhO22Mz02OeGdvOAeg7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMt
YTY5YzViYzdlZDU3LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMtYTY5YzViYzdlZDU3
LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUIpfuO8
hNOn62sVd5Xc7S7ZP0x30iyXe8QoYXUmPNRnGQbHki4DweWVoVni5YPqHo2tN4uP
Te1QA7AZZLV7/gyfsrxOFLJUM0oiK1nTyJ6jJ824057IjjiNHcRW+OjQ8KMVrUZY
tsQS27CK2DAMyI81P/fQFNphPqkcxYaZeBYCy6nuoDHEfNcJRCFZdcWyVhE7etOk
PgHcV+FMNCkuAjM8eW+b+bH1UQa0MeBEES5bMxeOSLL/UcsoMAQgB4d5OAY8cS82
eJqf/PUdWEEvMLDe6sl5KfODm0UZ/Zg6TGzK4A980lMhUHKT+bci0MlF3x7vbKrZ
cn6RtRZfrn8Bew==
-----END CERTIFICATE-----
Generated at Thu Sep 11 17:47:42 2025 by rpki-client