Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: qnaycfb46Qrr3TlyoUYETZSGI2EpbhQdWDJkQaVIXtc=
Subject key identifier: DD:75:9E:F2:C7:FB:B6:63:45:5C:13:5E:19:21:53:36:2D:BE:1F:4E
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 0198D65FB03F080BB74F293BB5A2946E21C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: KQed80z9YX9qzd8rQV/8qvXhXGMr2ppJ+ME/UE8ipYE=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b0:3f:08:0b:b7:4f:29:3b:b5:a2:94:6e:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=dd759ef2c7fbb663455c135e192153362dbe1f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:f4:2d:c6:2f:95:4f:2a:b1:d5:aa:e0:5d:
85:ab:b6:83:60:36:58:67:ca:81:d0:88:e2:43:05:
aa:af:e2:de:32:14:df:91:df:be:55:9a:5f:5e:60:
48:fc:85:df:8f:e8:54:f8:6a:c8:b3:9d:6e:90:fe:
f8:41:95:69:1c:3a:e7:ed:bc:13:48:2a:f6:6f:76:
7c:d0:78:d2:18:7f:93:e0:48:df:46:08:8f:25:52:
7c:6d:43:f9:3a:df:31:0f:9e:07:80:96:a2:0d:99:
63:f5:27:2e:27:aa:6d:75:92:a7:7c:e8:26:7c:1b:
d6:3c:46:45:c9:0c:fb:97:af:c4:e7:f1:b5:49:f4:
49:41:65:02:6e:d3:6b:74:8a:c2:91:e3:d0:e0:49:
7b:63:10:91:02:98:bb:31:43:22:c3:75:f4:6d:ef:
56:81:65:e0:a2:a9:93:21:46:cd:03:b7:44:67:3b:
51:4f:3c:d3:4c:22:0f:2e:1b:7c:b1:64:aa:cd:f1:
78:12:a7:ed:3c:87:5a:9e:87:85:12:48:fa:81:7c:
1e:1c:0a:4f:28:14:d6:73:83:64:69:5b:0d:8f:38:
56:63:6d:80:d1:48:e3:cb:2d:e1:cd:59:b4:56:e9:
6b:aa:f2:aa:90:d3:96:88:93:4c:e2:3e:ca:2a:14:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:75:9E:F2:C7:FB:B6:63:45:5C:13:5E:19:21:53:36:2D:BE:1F:4E
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:13:97:6c:48:de:33:1b:f5:cf:98:1c:d9:cb:fa:4b:bd:0e:
56:f4:b1:6a:e5:fc:ff:a8:29:d6:f7:97:bd:d4:ee:b1:4a:02:
04:6a:f2:e6:6c:8c:83:71:38:6a:f1:1d:1d:3c:f2:70:a0:27:
07:00:50:62:96:d5:44:a4:59:c1:d5:e1:b1:2c:d7:40:ae:90:
0a:49:5f:c0:3f:b1:0d:8c:6e:46:21:47:aa:f7:bb:dc:f7:b2:
6e:a2:16:61:e7:38:66:b1:a1:14:dd:10:50:e6:e6:5b:4c:bb:
e1:8b:6e:f9:70:29:91:8b:b1:73:82:d2:06:78:c9:14:14:4e:
07:79:af:a2:0e:e3:da:a2:46:1d:e8:e6:65:46:63:b4:e7:fe:
1a:3b:64:e1:29:f2:7a:ec:4c:16:c8:fc:9f:f1:6f:aa:9e:b9:
da:8d:fe:bd:8c:3a:4b:9d:05:14:b8:dd:ff:a6:0d:89:ce:a7:
9d:89:cd:e3:1b:b6:8e:6b:2e:bb:f7:fb:f2:01:63:de:97:ca:
99:7c:b6:a6:89:01:ac:c9:07:e4:15:b6:a8:da:e4:42:ec:2a:
a7:ba:eb:96:e9:f6:51:d1:d4:b1:91:82:8c:35:29:b9:89:ea:
e7:45:7f:d1:f0:9a:63:7d:bb:29:35:56:bf:f5:09:4a:88:d7:
16:19:97:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:34 2025 by rpki-client