Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: cUkR/2zI+uy6cEQyCriRYuDr4U58LCFd6jrgZxaZrZs=
Subject key identifier: 78:00:EB:6D:B5:4E:F7:45:2D:6D:52:87:3A:74:5C:8C:9C:11:A1:B1
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019A71EEA1ED3DFB8AB947BD4FE959C22BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 03A3
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: BevTLtM1/0zDe9OWDx8sSokRSHSJJvRTvdTVR9uh06M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a1:ed:3d:fb:8a:b9:47:bd:4f:e9:59:c2:2b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=7800eb6db54ef7452d6d52873a745c8c9c11a1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:d9:2b:47:20:91:fa:00:60:87:b4:70:cc:
e4:cf:a8:95:ac:fd:47:e4:66:97:5e:60:43:60:59:
48:36:14:c5:cc:f8:da:8f:fd:e9:b4:39:59:7e:e4:
a5:b2:3d:04:f7:8f:e7:fc:99:89:19:e8:d8:85:fd:
a6:78:fe:c5:d0:52:36:51:bc:d2:14:eb:df:11:34:
7f:11:f3:46:c5:cc:4e:12:f0:36:40:66:59:ee:e8:
4c:59:66:7d:14:d4:48:e2:b1:bb:d2:1d:fd:1e:a3:
0f:7a:a8:7f:70:c5:74:9a:73:bd:10:48:aa:c1:71:
52:74:5b:b3:85:49:0c:61:21:79:66:36:97:85:a0:
b1:77:d6:0f:bd:6f:a4:17:0b:3d:16:c9:46:52:e8:
a6:b7:50:2e:c3:8f:ac:cf:26:6b:e2:06:fb:93:47:
1b:d7:c6:63:70:97:2e:b6:7b:7e:f0:3e:6a:d5:a3:
0d:eb:f3:7d:dd:f3:bf:75:77:c9:e9:cd:36:93:4d:
15:24:8f:88:4e:98:a0:41:37:2c:6f:21:0d:11:41:
ca:e1:dd:aa:9e:43:10:ea:fc:b2:7b:88:0c:c2:f9:
dc:62:9e:e3:fd:eb:20:36:6e:c3:3f:d9:f9:8a:e2:
5a:ac:f3:a7:1c:c5:10:db:69:ed:59:28:57:a3:b3:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:00:EB:6D:B5:4E:F7:45:2D:6D:52:87:3A:74:5C:8C:9C:11:A1:B1
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:45:e2:b0:3d:9c:f9:f9:4e:ef:d9:97:2b:aa:57:fb:40:70:
e9:fe:44:c6:d2:bb:b3:9d:3e:1a:eb:02:fa:c6:47:74:fc:ba:
94:a3:bd:cc:f5:35:93:e2:56:05:5f:fa:a2:14:07:1f:fb:77:
d2:ef:8c:7c:d0:c5:d0:39:f1:c9:57:c6:49:a5:a7:b7:ac:4c:
b3:7e:f4:80:18:3f:21:91:cf:18:3e:1a:d4:50:35:b3:b3:5e:
fc:cc:8e:f6:90:4c:9f:89:fe:00:fd:ba:02:b0:37:b8:b9:23:
a3:93:2b:90:36:3a:77:c1:8a:6a:37:de:09:37:7c:da:9e:a7:
45:07:bf:9a:b0:02:35:49:d5:39:8c:28:75:ce:d2:9c:74:24:
f7:41:e0:2e:1d:88:f1:9b:84:0d:78:87:d3:c3:30:a2:ad:d0:
ee:bb:04:3e:c9:8b:5b:33:68:bd:b6:fb:bc:02:46:a6:d9:64:
38:75:86:f6:6d:55:7b:2d:b4:d0:6c:da:48:49:d6:a2:20:78:
03:6e:a3:ea:cd:1f:5e:ae:f4:36:0e:35:50:cf:fd:b2:d3:54:
1c:7a:b9:cc:aa:a9:5b:fa:93:58:cc:e7:dd:3e:54:06:90:18:
d9:07:6b:eb:d1:f2:2a:e0:0b:20:ea:24:d6:98:35:25:28:8b:
c0:aa:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:40 2025 by rpki-client