Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: 4koyMLz7jlroIZJ1XEecxeE7n74pRy1tvW4rcojgXUU=
Subject key identifier: 1E:61:E9:61:93:95:74:6B:0A:28:01:5D:6E:2D:07:AF:20:15:CF:7E
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019A1D636D791ECF774286364F6575B2BC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 03DF
Signing time: Sat 25 Oct 2025 22:00:46 +0000
Manifest this update: Sat 25 Oct 2025 22:00:46 +0000
Manifest next update: Sun 26 Oct 2025 22:00:46 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: rC0B/QgizrGcBVAC3hZqHB9WYt9tS2QfdKX9eD73U6c=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:6d:79:1e:cf:77:42:86:36:4f:65:75:b2:bc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Oct 25 22:00:46 2025 GMT
Not After : Oct 26 22:00:46 2025 GMT
Subject: CN=1e61e9619395746b0a28015d6e2d07af2015cf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:25:4c:5a:0e:26:0e:0f:fa:53:55:89:61:
fc:bc:33:ae:22:64:be:0f:2d:0d:a7:ab:53:3d:9d:
26:d4:0e:7d:a0:37:79:dc:e4:ba:93:61:7b:95:c7:
39:01:6f:5f:5a:72:97:a3:5a:46:cc:97:80:ed:e6:
06:55:78:40:88:e4:4d:57:70:c0:f5:db:96:7b:88:
d8:ae:94:e6:34:05:93:f3:1f:66:80:27:57:a8:ea:
9c:16:26:bc:cc:dc:ca:25:88:cc:a1:56:e5:c8:4b:
a2:75:54:95:ac:92:c9:5c:9f:69:ef:55:6f:f9:b7:
d7:0f:55:b0:85:30:91:14:2d:1c:1b:3a:59:52:1e:
d7:5c:d6:31:a6:ae:f8:b6:6e:00:c4:19:a1:e8:f3:
e4:40:88:81:42:f8:08:37:1b:97:71:0b:cb:fe:06:
b6:2d:ed:b5:ca:cd:ec:e8:cc:48:ad:0c:21:e4:f1:
f2:56:96:3f:64:f3:c6:8e:31:69:b7:41:63:e7:13:
1e:cd:fa:05:c2:42:1d:c7:56:10:1e:f4:73:29:df:
a7:dd:22:8f:3e:71:db:d1:e7:ba:dc:56:09:8f:18:
13:a1:49:00:55:15:e3:5b:7e:72:78:9e:8c:df:24:
5b:7b:6e:34:16:5a:23:73:2c:4e:55:c8:94:b1:45:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:E9:61:93:95:74:6B:0A:28:01:5D:6E:2D:07:AF:20:15:CF:7E
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:76:89:9d:75:99:1d:2c:d5:9c:d7:d1:f1:a8:84:d8:f3:51:
40:83:dc:9d:51:a1:ba:e0:38:4c:51:4b:c8:14:9c:62:b2:8f:
97:97:32:8f:a0:cd:fb:1a:18:6d:4e:7a:cf:f8:e5:34:a4:bc:
40:50:39:2a:74:67:cc:6b:e5:42:31:2b:fb:d0:41:d1:5f:35:
31:00:1d:e3:0c:99:b2:0f:13:31:70:ad:6f:6c:a1:a1:8c:e3:
c9:33:de:50:d3:33:5e:df:1d:83:78:e8:54:18:78:72:8b:5c:
9f:e2:28:f1:22:ae:f8:79:c4:46:7e:d3:0a:2c:cc:b6:57:1d:
31:f2:99:d6:e7:ed:38:e3:b5:40:1e:c9:9e:7b:18:33:21:0f:
94:4e:20:5a:de:36:fe:7c:75:45:4d:57:cf:5a:0f:4a:bb:5d:
5d:06:ec:c1:a0:90:91:69:5d:7a:9c:9b:4a:ba:00:01:d2:b6:
3a:4c:37:70:17:b4:bd:94:cf:9a:b8:b5:64:c0:b1:1d:74:1f:
81:db:c4:84:4e:6c:5a:69:05:9e:a8:50:27:ec:84:87:3b:94:
b8:54:e7:50:98:4a:ef:af:a6:ae:54:e7:9d:40:87:7d:12:e2:
23:9e:0d:b4:2a:89:0e:63:48:e3:fb:5e:4d:2f:bc:93:43:0d:
15:5f:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:14:04 2025 by rpki-client