Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: lWeNyaY5FQ1Rnp480xKtEYCe9KhAj1VLFth38Y4wEwQ=
Subject key identifier: CF:58:E8:4A:B9:5F:1C:59:95:45:B5:73:63:63:40:48:54:8B:F1:97
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 1CE32792BEB9052DD31DF377D1498D27998B9164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: 0176
Signing time: Sun 29 Mar 2026 03:27:32 +0000
Manifest this update: Sun 29 Mar 2026 03:22:32 +0000
Manifest next update: Mon 30 Mar 2026 05:53:32 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: IAPfmdqi5GL1ZMKnucXB8OQwd3EhBh2GBpsgYnHmIC4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e3:27:92:be:b9:05:2d:d3:1d:f3:77:d1:49:8d:27:99:8b:91:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Mar 29 03:22:32 2026 GMT
Not After : Mar 30 05:53:32 2026 GMT
Subject: CN=CF58E84AB95F1C599545B57363634048548BF197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:3c:81:ba:3d:7a:49:ef:04:28:48:d9:a9:
30:9e:ae:0a:21:00:de:d9:ef:00:bb:9e:44:a4:7f:
6c:42:6c:3b:82:ec:29:5b:fd:60:d3:06:97:d4:0c:
22:25:39:4f:89:89:9b:88:59:b8:c0:e3:03:90:0a:
6a:fd:c6:1b:53:0d:eb:e3:0f:aa:82:88:d9:e4:08:
34:41:d5:c8:52:16:bb:cb:c1:ab:81:dd:df:8a:e4:
b5:9a:b3:d3:74:8f:f1:71:70:b0:17:d0:c8:8e:c6:
f7:94:2e:9b:d7:57:9b:c0:f9:22:9c:a9:ba:2e:72:
75:f6:89:f4:20:e4:16:9e:ff:70:b9:b1:e6:b5:9d:
91:2a:da:d7:69:0b:91:a9:08:56:35:c2:c1:61:26:
5b:ff:54:5e:e1:78:c8:98:56:cd:ba:71:b5:2b:c6:
88:6e:0b:51:d1:98:7c:a3:ed:4b:1a:78:b7:22:fc:
7f:99:81:ab:a2:c4:74:4d:a7:ed:af:19:fc:89:88:
a7:be:03:ec:19:ef:25:e3:ce:d6:fd:35:65:55:bd:
8e:b3:49:e9:0b:9e:a2:31:f5:e3:0b:56:cd:33:e6:
65:05:d1:34:de:2a:83:33:62:f6:25:98:98:c5:78:
44:ea:8c:3b:4f:63:56:29:93:f0:d8:67:5b:93:fa:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:E8:4A:B9:5F:1C:59:95:45:B5:73:63:63:40:48:54:8B:F1:97
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f2:3b:99:a8:a6:99:a9:ec:6b:89:36:fa:0b:59:67:70:d7:
42:1a:0f:77:18:20:5b:ce:a1:d3:82:46:37:7c:69:7f:2a:89:
d8:3e:ca:77:3e:a3:76:76:d2:da:f3:ae:c4:f9:e0:31:ee:72:
b7:f4:44:0f:12:7f:51:48:25:40:9c:0c:a8:2c:49:9f:99:b8:
1b:6f:fc:aa:07:eb:3f:f8:4e:1d:6e:88:0b:7d:f8:3a:84:b7:
24:b3:57:4b:39:00:f5:ab:78:e9:eb:bb:86:95:09:be:e3:18:
f8:5f:9e:51:5c:19:50:87:72:83:b6:87:19:68:2d:9b:d1:25:
ec:c3:96:d8:02:03:f3:3b:1e:7d:c9:44:77:b5:03:d3:0c:23:
fc:c1:39:38:22:10:9d:01:c6:71:d1:5e:2d:bc:16:f5:27:48:
e8:f5:a6:a9:07:52:ba:cf:0f:e0:ec:f8:a3:cf:0b:81:1d:5d:
d6:f2:54:73:ef:fd:00:06:e1:64:54:16:4f:3d:f0:3d:4c:2f:
cf:18:03:88:47:cd:05:c3:26:96:93:57:3f:13:45:1d:98:2d:
77:14:af:bd:a0:7d:42:77:64:e6:26:29:bb:fa:1b:ec:a3:00:
f4:ed:db:1b:4c:1b:6d:8e:45:e1:28:52:57:6a:55:39:2a:28:
b8:74:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:31 2026 by rpki-client