Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: cwpPUva9/KE2YcqK8xbayL3IGlWn1URpkF6UDrZ17wI=
Subject key identifier: 78:9C:65:8A:80:89:FD:93:10:34:AB:3E:EC:F0:75:01:EE:13:00:EC
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 10EB94D8927BF01A26EEBC0C2B388C616E777703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: CD
Signing time: Sat 06 Sep 2025 12:31:11 +0000
Manifest this update: Sat 06 Sep 2025 12:26:11 +0000
Manifest next update: Sun 07 Sep 2025 12:35:11 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: 03zBHJYhE7D1pwHRaiKsykECsxLGaXJq3gzR/1YasGM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:eb:94:d8:92:7b:f0:1a:26:ee:bc:0c:2b:38:8c:61:6e:77:77:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Sep 6 12:26:11 2025 GMT
Not After : Sep 7 12:35:11 2025 GMT
Subject: CN=789C658A8089FD931034AB3EECF07501EE1300EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:4d:09:37:68:11:3e:ba:81:8a:93:2f:fd:
e8:85:9b:d6:a9:51:56:2d:1b:39:1a:82:f6:4d:c3:
cb:81:36:e2:2e:31:47:fa:3a:f5:2d:b6:42:f4:46:
00:03:85:37:41:5a:ab:1a:42:c0:c1:75:a2:b1:fc:
fb:01:d7:80:92:e8:c2:8b:7d:10:d2:f3:aa:d4:e3:
09:f7:7a:87:ff:60:a3:07:24:2c:da:b7:57:b0:a2:
66:76:10:d5:c3:60:65:e4:81:a3:90:9a:94:11:dc:
d4:cf:01:32:2e:09:dd:e4:15:fe:39:1b:73:9b:6e:
71:f0:85:b1:bb:13:8f:c0:b6:14:9c:31:db:00:cb:
92:a6:98:7f:c4:b4:ee:39:35:49:98:22:f0:a8:ca:
c9:12:bf:35:28:bc:68:af:53:3d:7c:11:ce:6e:82:
61:fe:b5:0f:54:57:98:ff:a6:c7:d5:cf:82:4a:ee:
4e:0d:4c:e8:fd:80:09:3a:3f:a2:71:1e:16:8d:fd:
1b:c5:d4:ce:b0:a6:90:7e:09:26:5f:94:08:76:8e:
0d:ef:a9:32:98:24:f6:dd:a4:4f:b4:66:26:85:93:
af:de:7b:cc:7d:a1:b8:b7:b6:1f:29:c4:21:c8:f7:
41:78:d0:39:b0:fb:38:ee:03:7d:ac:c4:6f:fb:13:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:65:8A:80:89:FD:93:10:34:AB:3E:EC:F0:75:01:EE:13:00:EC
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e4:3c:36:6f:71:75:e1:38:ad:2c:26:88:2c:2d:f6:ee:a8:
87:07:b0:36:01:44:bd:8c:10:a8:35:f8:a4:db:d7:0e:7a:83:
64:5f:66:7a:7f:b5:e9:a7:96:44:9f:1a:63:54:c7:d4:65:53:
d2:7b:9f:5f:1d:fd:34:d7:d5:e0:66:54:a7:42:27:db:65:75:
f8:6a:df:4f:43:cb:01:fc:21:db:4e:5a:bc:c8:40:5c:42:e6:
e3:cb:aa:94:ed:b5:96:54:82:e9:ad:a2:1d:c2:bd:ae:1d:af:
9e:36:d1:9c:da:39:9f:16:14:c4:c3:8b:aa:da:da:ef:a0:63:
18:5d:c7:93:dd:b1:43:af:26:08:83:1f:ae:bf:cc:99:42:3f:
00:10:20:69:20:67:89:91:68:b4:87:6f:22:58:0e:16:a9:ff:
f9:54:d6:d2:cf:2d:a0:a9:12:06:03:0a:ee:83:cd:57:70:b8:
a9:7b:33:9a:95:9f:17:99:36:0c:52:ad:6b:2d:7a:df:ef:96:
2a:f2:96:20:e7:ba:35:c3:fa:b4:5a:a7:7a:bf:2f:82:ac:dd:
6b:7e:33:7c:7b:11:ef:b0:ad:9a:e7:49:a9:7c:db:3d:88:0f:
ac:52:1b:82:33:1e:f9:71:3b:64:b2:d1:36:57:83:cc:77:a0:
c7:fa:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:25 2025 by rpki-client