Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: JFdFZcSfpRZTyjCXxJvHPcYk4p9HwGL/HrEPWshLbio=
Subject key identifier: 4A:A4:9A:6A:92:D6:BD:ED:4A:B6:9D:41:49:AB:AB:4F:5C:9C:03:A1
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 4428C45F5D42C2174AB28E06CB073D28E9FFF9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 0488
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 03:56:32 +0000
Manifest next update: Wed 12 Nov 2025 04:54:32 +0000
Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: 8p5A/vTyYBC1XZ5aXI0vczDjqk/Yv/fNQ/QZywcz5pw=)
2: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:28:c4:5f:5d:42:c2:17:4a:b2:8e:06:cb:07:3d:28:e9:ff:f9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Nov 11 03:56:32 2025 GMT
Not After : Nov 12 04:54:32 2025 GMT
Subject: CN=4AA49A6A92D6BDED4AB69D4149ABAB4F5C9C03A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:5c:02:97:82:c4:6c:b3:91:08:cb:a4:3d:
dd:33:c0:c5:66:18:47:89:30:f8:26:cf:49:ac:67:
6a:ca:59:79:8b:87:6e:6f:9b:e9:b6:2a:a6:67:3f:
bf:f3:2e:e3:fe:c6:f2:43:94:6d:fd:3c:a9:28:e0:
ad:57:78:ba:9b:54:29:3c:71:86:f1:a9:c2:00:20:
a9:51:40:81:49:61:eb:9e:2e:aa:77:7b:73:91:2f:
1f:f6:5a:d6:8b:9f:4e:56:61:2e:42:d9:42:8e:8e:
69:49:ce:d7:e9:43:a8:ed:74:82:72:48:7f:72:21:
6e:29:f5:c0:ed:97:ad:b3:c5:3c:ed:d5:a5:a4:32:
2c:cf:62:d3:7e:a4:d5:50:88:fe:0c:0f:c8:32:49:
f8:35:6f:72:e5:29:28:75:c1:b9:20:e3:70:20:fd:
59:1c:d8:32:c6:8b:9e:53:0d:a4:a2:31:26:86:5a:
d0:ea:b8:a7:fb:b0:a8:7b:3c:b7:1d:31:20:9a:ba:
9a:da:82:42:fd:2c:a2:50:f5:db:b0:5a:ae:73:34:
ec:37:b2:c0:a0:05:32:d9:3f:aa:c8:0c:20:90:b0:
0c:0a:b1:05:a1:68:f1:30:db:4d:16:47:99:1a:ce:
f0:cd:ba:ab:67:9a:de:4f:14:c7:ee:b1:5b:a5:6b:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:9A:6A:92:D6:BD:ED:4A:B6:9D:41:49:AB:AB:4F:5C:9C:03:A1
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:28:46:80:99:a8:33:4d:69:c5:fa:90:98:66:55:e4:ab:da:
e9:1b:34:df:ec:9b:02:c2:3e:1d:a0:28:0d:e1:c7:99:6b:d5:
24:3d:22:0a:cc:aa:09:89:6a:8d:7a:5a:70:a9:8e:f0:23:08:
d1:70:ae:dc:af:12:57:bb:c2:53:41:b0:69:79:9b:0f:d3:1b:
aa:1f:11:0b:9a:d0:df:83:f4:50:85:44:4c:9e:bf:67:20:f0:
e0:64:3d:a5:23:c4:fe:47:d5:bb:ce:98:b1:3b:a0:9e:e6:10:
63:f9:4f:50:39:b4:22:05:e3:fa:ee:1f:93:a8:89:6a:78:dd:
ea:60:22:0f:25:28:a5:9e:76:c3:b9:98:8c:bf:0b:f4:97:d3:
45:2b:6d:03:a0:3b:db:15:66:db:0b:a0:5b:ce:f0:3a:8f:b1:
f2:a8:17:a7:9e:80:bd:ca:fb:ce:d0:cf:ec:e2:32:be:8d:10:
67:44:90:1f:33:09:7c:9a:76:9e:b0:7e:2c:b6:38:eb:4e:5e:
3c:16:a9:0e:56:df:92:68:7a:65:f5:02:d3:f9:9e:b1:8f:d5:
f7:5d:53:a1:ff:ed:a4:eb:6d:7a:23:31:6b:f5:b4:ec:f4:c9:
11:9e:58:14:63:88:72:f4:ae:d6:95:0d:20:26:de:46:19:5c:
24:6c:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:08 2025 by rpki-client