Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: wcsuF3TlWlCKV7tdDIJVHjMGhSy7x8Mwpsr7y12TmRI=
Subject key identifier: 19:DD:D3:3B:17:A6:47:3F:6C:A4:82:63:CC:C4:68:6F:B5:5E:DD:9C
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 0199FC21550BE04878B6C0F46E031E65D515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0AF0
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: rrsexzabJ9pqd9vQV5NOJyla+RyulC1F/wkRqZ/VP1c=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:55:0b:e0:48:78:b6:c0:f4:6e:03:1e:65:d5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=19ddd33b17a6473f6ca48263ccc4686fb55edd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:fa:ae:5c:41:ec:55:6c:27:ad:a9:94:14:
77:d4:6a:a3:3d:36:c0:20:59:71:b3:f8:08:d2:c5:
9b:f6:5a:f5:cd:d8:fd:c7:dd:5c:d0:c2:07:f3:dd:
1f:f3:c4:f0:47:d2:a6:a9:3f:3c:44:a3:d3:50:3f:
5c:b6:72:1a:e8:f8:8c:75:78:63:f4:89:8f:51:88:
f2:1d:ef:a3:85:6f:1d:f8:c8:f8:4a:89:17:5d:85:
ab:18:b5:eb:d3:b6:8a:7d:65:a2:6f:a9:a5:56:e0:
af:1d:f0:26:84:04:17:be:02:69:9b:fe:3c:3e:de:
8d:35:c4:5e:51:f9:19:aa:67:bd:58:1b:c3:b4:42:
12:de:9d:ed:cb:f7:0f:af:1c:7d:cf:0c:1b:72:e4:
7c:f2:dc:6f:48:95:ee:c3:5c:6d:98:5f:cb:7a:fb:
07:e2:b6:f9:c4:5f:57:8c:94:97:59:ea:7a:0f:d7:
e3:1b:b9:fd:8e:87:21:cb:f4:53:ed:f4:fa:08:cf:
88:51:87:a0:18:17:39:2c:a0:6f:b3:05:d1:ff:6a:
36:22:e3:e5:03:f8:49:a7:48:9c:ff:95:e8:7d:fd:
04:80:16:db:58:73:d3:2f:a4:ae:c8:c2:ce:38:95:
c3:77:9f:11:97:5c:3d:a4:82:9c:79:b8:dd:03:9f:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:D3:3B:17:A6:47:3F:6C:A4:82:63:CC:C4:68:6F:B5:5E:DD:9C
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1e:14:fb:9f:60:d7:d2:3e:6f:65:72:e5:51:30:48:7e:2f:
ef:ba:8e:3e:d5:0e:bc:8a:8e:ff:bc:7d:b8:72:19:f3:fe:69:
09:b3:78:6e:a2:82:85:99:92:ac:5c:c5:7b:ef:3f:e7:cd:8b:
b3:ce:b6:36:06:6b:4b:c6:1c:39:5f:bf:5c:5e:0d:2f:bd:df:
0b:29:41:ff:a3:10:6d:34:a1:a8:32:b1:ba:f0:42:b6:2d:33:
83:39:ed:62:90:7d:6b:08:a7:63:e7:e4:6d:b5:8b:4b:8b:d9:
06:08:15:d7:da:24:95:c5:76:f6:59:78:e9:84:d0:09:a1:d3:
22:9c:4e:87:e0:30:95:e6:1d:8f:4a:7e:45:8b:c6:b7:98:c9:
7a:02:d2:06:e5:ef:65:8d:1b:1d:2c:f2:37:a9:85:3c:bb:e1:
e7:b4:d3:12:a7:4e:37:ef:34:35:62:95:86:73:c0:2e:9a:6e:
ff:d6:66:d3:d7:bf:f5:93:f9:5b:e9:f8:47:12:9c:46:60:66:
50:d8:d7:d3:6b:10:e2:a9:f4:7c:21:e2:bd:70:b6:b6:b3:f6:
5d:67:e4:d8:f4:00:9c:21:d1:93:6b:9f:31:d0:fe:16:98:4e:
56:8d:91:5e:2f:f5:14:a2:63:b4:70:5e:ae:2d:76:c4:37:d0:
40:03:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:59 2025 by rpki-client