Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: 9ByjbHtrI30ndqrSNj7crvwxagpQwRU9NZqkovxdNTU=
Subject key identifier: 8C:5D:95:20:45:5D:65:FC:9C:AF:20:FE:1F:7B:5F:74:B6:E9:B1:B1
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 0199FBEAD49A7F2F0F4CFA02764C4DFE2399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: JLIdoJdkfdC7z0yjzqpcaRsV7Muq77NB5dOIO/82Lbs=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d4:9a:7f:2f:0f:4c:fa:02:76:4c:4d:fe:23:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=8c5d9520455d65fc9caf20fe1f7b5f74b6e9b1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:8b:7e:83:39:42:2e:59:f8:5e:1e:5a:55:
04:5d:e1:6a:ae:07:35:09:27:40:f6:58:ad:39:c7:
df:0a:9d:f0:c7:97:30:1e:69:19:1a:e0:0d:43:38:
9e:27:06:da:88:64:8d:8c:61:af:14:1f:ee:ba:75:
5d:60:a8:dd:66:be:ca:af:2b:85:42:cf:45:85:d5:
12:e1:8d:bb:93:e4:7d:a5:ea:41:6d:0c:1c:3b:bb:
d4:33:06:65:af:c4:1e:a1:68:bd:c7:40:29:12:24:
aa:4d:f8:3c:0c:f1:eb:0a:fe:0e:39:f7:00:52:d2:
dd:96:58:0d:5d:5d:f6:3c:c4:39:d8:2b:7e:08:68:
f1:ce:25:7c:ac:12:33:86:6a:f2:d8:59:3f:67:5a:
43:f3:f4:72:55:38:4d:71:ae:be:23:8b:6c:ad:66:
d3:c8:eb:9e:2f:c7:74:46:22:72:ac:ad:37:05:64:
ef:cb:52:ef:e9:f4:10:68:ec:79:a1:a1:1e:b0:ac:
2c:73:2b:32:1a:89:fa:77:b4:e1:52:a5:00:1f:f8:
44:26:4e:e9:50:13:61:00:f9:c5:3f:c6:e5:24:b3:
a6:dd:63:80:22:43:6d:4b:91:f1:1c:5d:9a:63:a1:
5c:f4:31:cd:56:db:2c:3c:3c:c8:b1:6f:60:3f:5a:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5D:95:20:45:5D:65:FC:9C:AF:20:FE:1F:7B:5F:74:B6:E9:B1:B1
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:63:f3:6a:b2:3b:dc:da:17:1b:b3:25:f2:14:23:d4:6d:7f:
23:6c:4a:f4:40:05:b8:ac:44:f6:4f:e9:7f:94:b7:53:75:19:
4b:97:95:3b:dd:41:25:ed:9a:06:31:21:e3:d4:9b:2c:8f:11:
a3:22:5e:74:14:51:3c:4b:42:3b:d4:e3:c1:51:0b:d9:df:12:
43:0e:d0:4d:c5:39:ca:86:21:59:f9:0a:8a:d6:0b:7d:54:da:
81:91:fb:11:30:da:7b:1f:1d:98:d6:19:b6:d2:d9:f0:9e:0a:
b7:bb:8b:98:39:10:e0:ea:54:4f:2f:58:1d:cd:06:a1:46:3e:
2b:66:39:11:cd:80:34:ae:c8:8d:7f:e5:a4:4e:a2:55:24:21:
36:75:0f:1a:12:b5:97:02:aa:3f:59:2d:95:4f:1e:b7:00:96:
0b:13:b6:78:6e:8e:32:0f:95:a6:c3:c8:0f:e5:4c:fd:91:91:
79:3a:c5:cc:94:8b:1f:86:75:55:81:ba:df:b9:b4:ac:3b:be:
95:33:49:07:18:bb:dc:b8:a5:00:03:bf:42:f4:59:66:a0:47:
c9:dd:b8:27:7f:82:27:4d:9d:d1:eb:e2:1c:d0:40:0f:1b:8f:
a3:93:e4:b1:df:77:96:db:26:93:1b:55:c6:e0:e2:55:66:7c:
56:fd:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:35 2025 by rpki-client