Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: Lv2R6nt0N/K/uy7HT21L6dWrqFNIozVGMEagdgAfm6A=
Subject key identifier: 77:4F:61:AD:FE:6E:69:DD:DF:5C:AC:9F:00:F4:5A:28:FF:9A:4D:AE
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 0197B6A2428003D7C5CC8F7A4DD449647170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: yaJP3nY9CXNF1NYNJUqUsrQiRFwmnxoQ0IJO2crGZlM=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:42:80:03:d7:c5:cc:8f:7a:4d:d4:49:64:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=774f61adfe6e69dddf5cac9f00f45a28ff9a4dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:4f:3c:87:66:8c:b0:94:cb:48:34:1a:38:
c1:b6:fc:50:9d:ba:6d:d1:41:1f:60:34:97:8a:02:
d8:61:d8:c2:e8:e5:30:8a:31:2a:f8:4f:6f:9f:72:
eb:ed:e2:c4:ed:49:5f:f7:54:cc:8d:2a:dd:2a:08:
39:a4:62:0b:ee:e9:9a:20:42:33:71:dd:6a:bb:2c:
e3:fa:a3:ea:6b:41:ca:67:ff:fa:a2:73:5a:4a:35:
60:f6:49:50:5f:bf:db:9b:9e:f9:db:66:fe:c2:fb:
55:fd:a2:74:fd:2a:8e:a7:72:86:6b:3b:3e:b5:20:
60:a1:73:c7:98:e2:65:12:5b:31:07:37:62:50:83:
a8:e1:60:72:7d:0f:74:a0:10:08:04:79:bb:15:ba:
33:7d:27:76:16:d6:0b:c9:b7:5f:01:2c:e9:7d:0f:
fa:25:7a:ff:53:3f:de:d7:b2:53:7e:9f:e1:b3:37:
08:37:04:e5:59:d5:5e:12:38:d5:cc:12:fc:30:64:
91:20:f3:5a:58:77:c8:36:9a:4c:1a:04:49:cd:da:
00:d8:08:7d:50:3e:2d:9e:53:9c:a1:65:a8:e2:47:
43:c6:59:2a:78:e7:e2:d1:54:0b:e3:54:e3:71:f1:
d2:e6:c6:15:ac:47:21:d1:0c:ab:b5:8b:ef:ba:f1:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4F:61:AD:FE:6E:69:DD:DF:5C:AC:9F:00:F4:5A:28:FF:9A:4D:AE
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:81:c0:21:46:c8:da:79:f6:ab:38:6b:e2:a4:fa:e3:85:
01:fb:f1:85:3e:cd:fe:53:eb:46:bc:05:a5:ee:49:2d:29:2b:
26:1f:b9:1e:87:d0:4d:fb:ff:47:33:33:1d:85:7a:7b:15:de:
36:c5:e0:1c:7a:a8:cc:4e:90:37:4e:64:be:97:9f:f6:8f:06:
aa:a6:6d:3d:88:be:45:6e:6d:22:e4:2a:7f:86:be:d5:04:48:
12:df:7a:7b:78:fc:57:83:32:04:5b:a9:66:4c:28:79:a9:a3:
82:71:d8:b9:54:c4:76:fa:68:ea:da:f4:b4:10:92:cb:05:70:
12:31:92:6f:5c:19:60:40:b1:00:d3:87:f5:28:75:84:a3:52:
5d:43:62:49:72:23:8c:5f:33:ac:19:01:59:6f:23:f3:6b:07:
59:41:e1:a3:b1:99:0e:03:a3:2d:c1:6f:cf:8f:2b:d0:41:a0:
f5:99:a4:e9:59:71:16:47:08:f0:5f:13:75:09:58:6e:1a:09:
9f:33:79:42:b2:76:4e:71:ad:8b:13:00:61:71:36:9a:4f:5a:
b7:25:1d:7e:d2:8a:04:40:46:72:a0:dc:ce:b0:af:3d:94:7f:
b2:fc:ea:72:cc:dc:b5:40:19:87:b7:98:cb:9a:04:63:0d:f8:
9c:6c:92:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2okKAA9fFzI96TdRJZHFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWI5MzlkN2JjYTEzYjZkOGNjZjRkOGU3ODY3NmYzODA3
YTBlY2UwHhcNMjUwNjI4MTMwMjU2WhcNMjUwNjI5MTMwMjU2WjAzMTEwLwYDVQQD
Eyg3NzRmNjFhZGZlNmU2OWRkZGY1Y2FjOWYwMGY0NWEyOGZmOWE0ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD9PPIdmjLCUy0g0GjjBtvxQnbpt
0UEfYDSXigLYYdjC6OUwijEq+E9vn3Lr7eLE7Ulf91TMjSrdKgg5pGIL7umaIEIz
cd1quyzj+qPqa0HKZ//6onNaSjVg9klQX7/bm57522b+wvtV/aJ0/SqOp3KGazs+
tSBgoXPHmOJlElsxBzdiUIOo4WByfQ90oBAIBHm7FbozfSd2FtYLybdfASzpfQ/6
JXr/Uz/e17JTfp/hszcINwTlWdVeEjjVzBL8MGSRIPNaWHfINppMGgRJzdoA2Ah9
UD4tnlOcoWWo4kdDxlkqeOfi0VQL41TjcfHS5sYVrEch0QyrtYvvuvEywwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdPYa3+bmnd31ysnwD0Wij/mk2uMB8GA1UdIwQY
MBaAFNubk517yhO22Mz02OeGdvOAeg7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMt
YTY5YzViYzdlZDU3LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMtYTY5YzViYzdlZDU3
LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9qBwCFG
yNp59qs4a+Kk+uOFAfvxhT7N/lPrRrwFpe5JLSkrJh+5HofQTfv/RzMzHYV6exXe
NsXgHHqozE6QN05kvpef9o8GqqZtPYi+RW5tIuQqf4a+1QRIEt96e3j8V4MyBFup
ZkwoeamjgnHYuVTEdvpo6tr0tBCSywVwEjGSb1wZYECxANOH9Sh1hKNSXUNiSXIj
jF8zrBkBWW8j82sHWUHho7GZDgOjLcFvz48r0EGg9Zmk6VlxFkcI8F8TdQlYbhoJ
nzN5QrJ2TnGtixMAYXE2mk9atyUdftKKBEBGcqDczrCvPZR/svzqcszctUAZh7eY
y5oEYw34nGyS2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:56 2025 by rpki-client