Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: 4IYni2Swd5C6LjweNkSQiu7FKbMJ8DwB5KOXcsd6+k4=
Subject key identifier: AB:90:42:09:93:5D:9E:68:AB:F2:4C:CB:9E:05:48:6C:55:FE:7B:84
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 0199239FBDFEEF7F54C2B7968D1000FB9FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 10:01:35 +0000
Manifest this update: Sun 07 Sep 2025 10:01:35 +0000
Manifest next update: Mon 08 Sep 2025 10:01:35 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: DNXagXr+H1/TZmECrH19PI1yYWptIFY6eiysq3eqQ/U=)
2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:bd:fe:ef:7f:54:c2:b7:96:8d:10:00:fb:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Sep 7 10:01:35 2025 GMT
Not After : Sep 8 10:01:35 2025 GMT
Subject: CN=ab904209935d9e68abf24ccb9e05486c55fe7b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:01:10:24:c5:7a:2f:40:06:36:3c:29:4e:3d:
99:1e:01:3c:94:f4:34:72:e8:f9:37:62:16:b7:33:
0b:d1:06:fd:f0:4a:29:fc:b4:09:44:69:1d:0c:bf:
cb:aa:36:5b:ed:c1:63:72:75:6f:68:18:6f:ef:82:
cd:c6:e7:05:1d:c8:2a:60:d5:b5:9b:af:1f:2c:10:
6d:b3:da:7b:cd:6d:e8:2f:73:0f:12:77:aa:3e:e6:
30:53:3f:56:7e:0d:f5:0a:bf:32:db:9b:85:e4:fe:
25:cd:c6:53:9e:4e:96:25:77:15:c9:43:1f:ac:dc:
55:1c:6d:e0:61:70:aa:7c:56:72:43:5d:1f:9e:55:
c5:d3:39:5a:fc:f3:f9:84:5e:75:f1:94:da:21:f2:
0a:48:69:57:18:b1:b1:08:ad:32:25:f6:28:3f:0f:
92:fd:de:49:0c:80:99:06:df:28:d9:e0:7f:88:20:
9e:a8:09:81:6d:8e:41:c5:42:76:6d:8f:ac:cf:ac:
94:7e:39:1f:85:66:4a:59:e3:d7:d4:11:38:4e:49:
04:97:00:44:ef:20:23:7b:00:4d:2a:c2:60:15:87:
61:03:bd:32:11:0a:4e:0d:36:2b:c3:14:6a:c8:14:
81:7b:07:f2:76:4e:c6:22:ff:12:e4:52:be:21:65:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:90:42:09:93:5D:9E:68:AB:F2:4C:CB:9E:05:48:6C:55:FE:7B:84
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b7:96:0d:5f:17:9a:5d:ba:52:1b:ff:45:7b:c7:25:88:e7:
e4:23:1b:2d:10:0c:c5:c5:ad:bf:6a:90:ce:01:59:a6:93:4a:
ef:ed:a4:ca:d6:56:1d:a8:1c:37:b3:8e:69:6f:22:68:d0:a2:
49:9c:75:70:51:54:cf:88:b1:95:52:7e:ed:86:4e:91:85:92:
15:8f:b4:8b:e3:a0:8b:5d:7e:27:40:f9:b4:cb:36:ad:d0:29:
c8:0c:c0:46:d6:4f:d5:30:3b:ab:e3:e9:0b:26:9b:b1:4e:4b:
e8:d7:fd:c5:f4:86:1a:c6:e9:e2:34:fc:68:8d:cd:c8:f0:24:
1b:4c:8d:e1:2e:00:fd:fa:24:35:53:f7:ae:67:18:f9:75:eb:
a7:92:4f:de:1d:bf:14:f4:7e:dd:e9:a6:7d:a3:7e:d7:20:7d:
ca:cb:e7:ce:b3:fb:3f:ff:0e:d1:e5:a0:e2:ee:4c:1a:e1:43:
4c:eb:f1:8d:46:cd:b0:cf:42:7b:ba:74:58:bf:c0:a0:f0:22:
f0:60:08:52:8d:a5:97:ba:75:cd:07:f6:07:51:c5:45:51:5c:
ec:73:87:39:1e:13:df:0e:bc:20:11:7e:13:25:cd:e6:bd:d6:
cc:77:8c:a3:83:a3:f5:0e:fe:d8:7d:ee:34:f0:6e:d3:fc:84:
19:e9:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:22 2025 by rpki-client