Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: 2fs4jG6cewbILLYx31VCbUzdX7h93Y7yNDln8bZBFKE=
Subject key identifier: 1E:2A:81:80:32:8C:45:B4:6C:A1:39:C5:EF:7A:42:4F:1D:D3:68:ED
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 301691610A3F78EE4E7553D723088B860DA4C9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: FD
Signing time: Tue 11 Nov 2025 04:48:32 +0000
Manifest this update: Tue 11 Nov 2025 04:43:32 +0000
Manifest next update: Wed 12 Nov 2025 04:49:32 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: VFLyTMDxI2Xdupu8D7vYf4frOe94MV2OKRoxZWx1jrI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:16:91:61:0a:3f:78:ee:4e:75:53:d7:23:08:8b:86:0d:a4:c9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Nov 11 04:43:32 2025 GMT
Not After : Nov 12 04:49:32 2025 GMT
Subject: CN=1E2A8180328C45B46CA139C5EF7A424F1DD368ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:f1:15:56:bf:ac:e1:72:e9:e2:c5:da:83:
5b:92:a8:92:72:d3:0a:1c:76:33:74:1a:39:86:e2:
43:67:3f:63:ae:e0:81:9e:e2:39:8a:bd:06:1b:9b:
81:80:19:90:4c:5f:4d:a5:a4:82:a1:1b:a7:53:70:
b8:96:44:68:57:60:51:c7:d6:ad:5e:6e:4a:cf:e0:
3f:cd:b4:31:27:e6:f4:e7:3f:c3:73:63:e8:7a:ff:
83:8b:f7:2b:f8:b3:d3:cf:2a:c3:61:49:b9:d3:43:
ce:41:45:d1:06:f1:82:af:18:d5:e3:b8:6b:6f:db:
17:27:3f:c7:3d:44:5b:cb:6d:7d:c6:9d:73:c5:56:
4d:0b:1c:fa:ff:da:60:6a:23:f4:ca:f4:99:fe:eb:
14:70:1a:64:7a:11:c6:81:f2:31:b4:e2:d2:e0:f2:
cb:1e:48:8e:67:f1:12:55:60:c9:25:41:b9:09:61:
93:6a:86:fb:44:05:ff:8c:09:28:a8:4e:19:5d:03:
57:b9:c6:02:c4:fa:41:0e:33:d1:48:c5:46:a2:63:
82:0e:03:8c:ca:95:95:ea:0e:5c:c0:92:40:e8:44:
d5:37:22:a5:34:b7:fc:2f:ca:1c:5a:87:e1:40:e3:
bd:ee:b6:3c:06:e1:3d:22:a1:bd:58:e7:ce:93:e2:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:81:80:32:8C:45:B4:6C:A1:39:C5:EF:7A:42:4F:1D:D3:68:ED
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:3b:8b:c8:c1:b6:f7:56:91:7a:0a:02:ae:9a:43:cd:7b:91:
7d:6a:9f:2d:f6:29:f4:8c:de:42:10:c1:25:d8:c1:81:a8:5d:
4f:0c:b7:55:f9:e8:79:23:c4:8d:21:49:13:8f:d9:9f:e3:7d:
47:3d:15:d0:44:57:23:33:59:da:f3:40:4a:93:68:23:e1:c0:
c3:0e:5f:2f:5f:f6:ea:37:dc:a9:23:70:ac:85:cd:2c:b2:da:
2d:16:3e:a2:1d:5d:36:86:8e:32:14:89:83:07:1f:26:61:fb:
12:3b:77:0b:0d:8c:19:bf:db:55:1b:01:9c:dc:58:3f:28:0e:
ac:95:49:15:04:c3:69:b7:78:4a:a7:97:d4:f9:5d:ad:bb:60:
ad:29:f9:e3:e1:82:a8:4d:e4:0b:d4:05:e0:7a:04:15:7e:7c:
5a:2c:f4:68:c1:28:d5:71:da:86:c5:31:1a:11:77:85:f5:39:
14:ce:be:60:95:da:0f:37:07:fb:80:44:f6:cf:a2:8c:2e:4c:
5f:7c:1b:90:a5:f2:5a:d1:7f:4e:a5:f3:e0:b2:82:6b:82:7f:
22:94:c7:f0:ea:d4:94:68:b7:e9:61:73:c3:31:43:80:14:b8:
30:ef:16:0c:f1:47:86:f1:4c:24:1e:dd:a3:3b:ee:c6:9e:4d:
53:dd:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:18 2025 by rpki-client