Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: 8cJZpiJUtqvdrFOLO0Bm3P0546rZnM20afJRQBeOwHA=
Subject key identifier: 67:83:1B:FB:65:7E:80:F9:E7:FC:4A:DE:6F:05:B9:85:E8:2B:01:CB
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019A1BE28633E7B3D9091F98B91E931AB4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 0218
Signing time: Sat 25 Oct 2025 15:00:21 +0000
Manifest this update: Sat 25 Oct 2025 15:00:21 +0000
Manifest next update: Sun 26 Oct 2025 15:00:21 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: eYVxb3GJzAQ5WvCRC5cgxGWrTrU2zpP681WxPin/eUw=)
2: 8ls1IYf4jQgBfxPe5pEbNm_NZ0o.roa (hash: rz6mEuTJKM68i99abhpJpeLaSY9D73ABA1sM9jV+L58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:86:33:e7:b3:d9:09:1f:98:b9:1e:93:1a:b4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Oct 25 15:00:21 2025 GMT
Not After : Oct 26 15:00:21 2025 GMT
Subject: CN=67831bfb657e80f9e7fc4ade6f05b985e82b01cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:e6:d7:72:07:be:f1:28:a5:77:19:14:3b:
1a:4a:bf:e1:1f:31:12:46:34:3a:ce:e7:13:74:4a:
f6:ea:8d:dc:b5:29:b4:f3:d2:e2:fb:7e:eb:bb:66:
01:98:15:12:f6:f3:41:84:c1:94:7f:bf:6e:56:c8:
93:f1:6a:33:ff:d6:19:ad:61:d9:3b:ec:92:fd:7a:
10:18:7f:b0:b7:d9:bf:29:e5:c1:6d:23:fb:0d:fd:
6d:06:14:cf:c7:b0:66:84:4a:e6:ca:22:6b:a5:d0:
95:7b:7a:25:a3:51:b3:cc:6e:8d:38:12:34:f6:7c:
81:f7:96:07:2f:8a:b7:c4:1c:4b:d5:85:08:24:a0:
04:50:3c:6f:64:fb:c3:aa:bb:26:d3:88:d5:40:14:
88:ec:e6:f8:5c:8b:ea:0c:e3:c0:14:b6:fd:bb:68:
17:4f:f4:98:2a:1b:66:ca:a9:cd:a6:81:2e:12:1b:
38:08:84:0a:39:79:13:d2:dd:af:18:05:a5:43:06:
23:f5:8e:4d:e8:7c:79:d5:a0:00:2d:36:b7:dc:21:
4a:e7:30:f2:e8:ad:a0:41:c3:78:19:73:61:b8:8a:
49:a7:ad:df:4f:f5:06:df:f3:20:cf:22:82:e9:1f:
e0:95:1b:26:e7:37:fd:00:05:1b:f3:1e:a5:17:74:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:1B:FB:65:7E:80:F9:E7:FC:4A:DE:6F:05:B9:85:E8:2B:01:CB
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:69:0b:be:81:d8:4d:58:41:2d:3a:05:b0:79:33:52:f2:df:
0e:a8:14:9d:59:52:9c:cd:dd:7f:58:09:77:e2:93:02:83:55:
83:22:10:f1:62:e1:13:4a:ad:c7:4a:27:86:0e:27:99:eb:1f:
c3:a4:cf:64:e5:12:8d:0d:39:2d:e9:37:f6:88:22:b7:2c:be:
aa:8b:ff:3e:e4:f0:6e:f9:32:0a:ee:e1:57:41:ea:51:97:cc:
4e:4c:d8:e1:ae:8a:79:37:f4:5f:50:cf:02:e9:ae:26:58:07:
b3:a2:70:36:06:28:8b:ba:cc:b4:73:82:4f:a6:a1:6c:f8:03:
c2:f8:99:a4:48:07:91:0c:09:52:ba:71:f7:08:c2:37:a5:eb:
32:9d:90:11:fe:ad:1f:2b:d2:a3:df:a4:b1:04:76:49:03:6e:
4d:2f:e5:d9:9d:75:b0:78:e9:0e:09:0f:aa:02:84:e0:73:01:
da:4b:a0:04:a3:48:91:0a:f2:42:01:19:c2:cf:83:d0:0a:e5:
47:af:4e:cb:dc:e8:fc:3c:72:af:90:42:53:23:3a:00:65:f0:
ac:3c:53:68:a5:70:67:1e:49:b5:52:51:b4:5b:a1:03:61:c0:
aa:9a:74:19:14:e8:d3:6e:29:c5:60:bd:a8:7b:6a:45:c8:f8:
c2:55:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:05:22 2025 by rpki-client