Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: G17WuUyhRO6Fow71ET8zdrfKGt9PKa+I0XTc/51VPEg=
Subject key identifier: AC:FB:FE:23:72:CA:58:9A:6F:20:2B:1C:3D:8A:99:EB:E7:0C:84:2B
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 2DA6410F09F147AEB43806AD97CAB882A140FF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 0433
Signing time: Mon 08 Sep 2025 05:15:49 +0000
Manifest this update: Mon 08 Sep 2025 05:10:49 +0000
Manifest next update: Tue 09 Sep 2025 08:56:49 +0000
Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: h7R6XQfy0ebWaQsT1guksrT0IvQMP8n1xBMpVlhXjfg=)
2: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a6:41:0f:09:f1:47:ae:b4:38:06:ad:97:ca:b8:82:a1:40:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Sep 8 05:10:49 2025 GMT
Not After : Sep 9 08:56:49 2025 GMT
Subject: CN=ACFBFE2372CA589A6F202B1C3D8A99EBE70C842B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:00:cd:9a:da:49:26:3f:89:60:ea:41:a1:
e2:23:38:56:0a:52:d5:d8:76:1f:04:32:31:24:49:
38:7f:f4:d3:ef:05:d0:62:c7:13:4a:ab:29:0b:cc:
33:ee:78:f5:28:86:b3:dc:7b:1f:0c:b2:39:ef:8b:
d7:65:c7:9d:35:60:e3:6f:aa:18:6e:c2:ed:d9:ab:
7d:ae:5e:d9:b4:1e:f3:20:90:1d:75:40:0d:2d:96:
72:72:2d:0f:2f:50:ee:cb:88:de:7f:a7:d2:15:ff:
54:cd:ba:f1:4e:d6:be:0d:2d:e9:26:ea:6b:ec:37:
7f:0f:65:19:96:96:c5:ae:03:ef:06:0d:7a:5d:5d:
46:99:31:a3:ea:c4:4d:a7:64:a2:ea:93:53:7e:40:
aa:6f:f0:04:f2:3a:40:55:25:de:5a:24:07:c3:d9:
d6:f1:1d:a6:9d:01:d8:fd:86:51:29:2c:5c:c4:69:
f2:61:1b:fc:40:a7:e9:22:c7:4e:cb:e8:6e:32:84:
9a:89:9d:ce:4e:02:a1:c8:0b:9d:69:45:e7:36:c6:
95:da:c8:3b:dc:09:39:2b:b9:fc:16:1b:b2:47:0e:
70:c7:1e:d1:2b:d4:26:17:f2:39:8d:00:e1:2a:09:
19:9c:38:59:1f:7e:b7:99:84:c3:32:01:d1:aa:43:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:FE:23:72:CA:58:9A:6F:20:2B:1C:3D:8A:99:EB:E7:0C:84:2B
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:71:1f:4c:07:fe:81:0c:5b:4a:ba:d8:23:0c:08:d4:34:e0:
8b:4d:8b:df:ad:1a:1a:d7:1a:e8:6a:98:66:78:f7:bd:bf:d1:
10:f9:8e:dd:55:37:27:a9:ea:5a:a4:45:d3:9a:82:fd:52:85:
8d:25:16:9f:e6:9e:97:e4:7e:7a:05:13:df:26:3f:1c:3e:10:
78:10:e6:09:9c:61:36:76:ae:ed:7d:8a:24:8d:2c:0f:2f:15:
9e:f6:1e:2d:57:9c:fa:b4:c9:de:28:8f:51:d6:79:56:52:b9:
3d:d4:54:2a:c1:bb:f6:6b:09:2e:06:ef:a1:dd:34:9e:81:20:
97:d8:56:51:53:3b:36:2d:b4:08:10:1d:91:57:6b:d6:b1:cf:
6c:31:07:20:ef:df:b3:bc:8d:5e:36:3a:ae:e4:60:6f:3c:48:
3b:32:2a:a8:cc:b3:78:4a:12:8d:08:6f:d0:25:cd:6d:2f:52:
14:fd:f8:4a:0b:6c:dd:91:2c:48:46:15:d4:d6:e1:bb:3b:2f:
e4:1b:a2:06:cf:fd:91:c7:24:d2:d8:e2:66:30:d7:b1:95:6c:
2c:d6:63:0b:e5:a1:94:0d:22:c3:ac:01:34:35:1f:f3:f0:4d:
36:18:11:7b:26:a4:b9:9c:e1:e6:eb:fe:8c:e1:23:b9:8a:f8:
1f:2a:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:52:51 2025 by rpki-client