Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: iUHyh4akiUiVEQIutjZ7hPSgd4O/z5r030KR+rSHzWI=
Subject key identifier: 14:44:BA:7C:12:5D:04:DD:8A:BF:BB:4B:2A:1A:E7:02:A2:23:73:D5
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019A71EEA508B1F00DFB68AC238DFD839F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0B2D
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: Exm9fGARxsQzCZBbkiOrcjTaNhDU3JwBmirluYU/78g=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a5:08:b1:f0:0d:fb:68:ac:23:8d:fd:83:9f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=1444ba7c125d04dd8abfbb4b2a1ae702a22373d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:92:45:fd:20:ad:bf:f0:e4:cf:cb:d7:ef:
29:af:7d:1c:72:44:61:8f:b6:c7:94:76:5d:1d:d7:
2c:71:fd:7c:91:fe:99:62:de:32:d1:ba:85:98:a4:
c3:d6:16:e6:fd:d5:f6:c5:fa:c0:7d:78:bc:82:71:
b5:3b:db:27:c5:47:07:c6:b2:4d:d2:51:99:6e:09:
f1:d3:fc:55:c2:dc:96:9c:79:12:e1:9f:2f:da:26:
13:a8:02:35:4d:16:6a:63:1e:7a:04:59:ed:9a:33:
ef:f5:4b:75:3b:b8:80:34:1e:7c:62:dd:ef:54:d0:
fd:82:f9:f7:f9:13:b4:4d:71:a9:22:c8:3b:00:b4:
26:79:6f:17:7e:a9:6c:1a:d3:f8:b1:03:6a:5a:f7:
1e:99:37:6e:cf:27:61:30:86:2c:5e:25:2c:00:df:
52:bd:8a:d7:3d:ae:27:80:ae:69:c5:07:fe:ab:7d:
5f:de:d0:f0:48:fa:fa:2f:4d:70:87:5c:2f:3c:92:
59:5f:30:79:78:52:7e:e6:c6:51:b8:5d:90:7a:3d:
02:05:ac:c1:c1:de:41:18:96:e0:26:dd:40:35:41:
05:ec:2b:90:84:80:ce:0a:55:b5:e0:26:ed:b0:ea:
2f:a3:1c:c1:0b:b6:42:4b:49:40:d0:16:68:f1:cb:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:BA:7C:12:5D:04:DD:8A:BF:BB:4B:2A:1A:E7:02:A2:23:73:D5
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b9:34:41:e1:af:67:07:2f:4d:22:69:f8:d3:19:d8:1e:fa:
98:d5:9e:cc:93:c3:cf:d8:ee:1a:86:26:1a:4a:6f:74:7f:84:
cc:70:f9:5e:15:4c:01:fa:30:b1:10:c6:20:8d:85:91:8c:09:
10:bf:5b:fd:49:6c:1a:22:28:50:3f:ef:db:1a:2f:17:8a:82:
ca:13:75:0a:d0:7f:3d:79:47:01:78:b4:84:8d:69:21:5f:7a:
f9:13:5e:77:4a:0d:03:2d:57:f0:d3:37:38:9e:3e:2a:99:1c:
6a:61:04:9d:45:58:2a:a8:fb:cd:94:5a:ae:55:2a:4a:0f:95:
19:d2:61:71:1b:aa:0a:66:68:0c:6b:c5:c5:45:c6:5a:68:4a:
58:af:bb:d7:8b:8a:24:6b:74:1f:73:09:54:57:02:38:10:3f:
3d:71:81:83:9b:06:71:69:98:89:1a:75:32:4e:3f:30:94:93:
76:93:23:ce:e0:3c:cb:16:22:b6:f5:2e:8f:eb:67:c0:0d:e5:
5a:a8:18:8c:f6:89:cc:b3:57:da:b8:3a:47:f3:c1:53:c0:1d:
47:b4:a4:6f:2e:40:59:b9:81:f6:e6:36:6b:af:ec:0b:47:d1:
2f:b2:5b:bd:67:3f:40:e1:37:ff:d5:4e:c3:dc:6c:ab:7e:ad:
6e:25:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client