Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: bO+VEbEH+DLdOPiE4aKIK1iavIZ4K9kYrR32BwZq2F8=
Subject key identifier: 01:54:B8:25:16:9E:25:0E:99:9B:63:BB:8E:C9:5D:2D:02:BD:B2:7F
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 0198D4A839D93971766CBD521E4EC1FB079E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 02:00:51 +0000
Manifest this update: Sat 23 Aug 2025 02:00:51 +0000
Manifest next update: Sun 24 Aug 2025 02:00:51 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: q7mKVIx83Xyoyn9BtNPgDwXVFYsPYUq8Sv3tEwNwIOQ=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:39:d9:39:71:76:6c:bd:52:1e:4e:c1:fb:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Aug 23 02:00:51 2025 GMT
Not After : Aug 24 02:00:51 2025 GMT
Subject: CN=0154b825169e250e999b63bb8ec95d2d02bdb27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:75:ac:f8:05:58:bb:55:12:3c:6a:01:19:
e5:30:bb:a9:c0:f3:6a:d1:2f:60:62:30:4b:73:45:
88:dc:58:b2:76:ba:1a:6a:43:ff:33:e4:94:1f:45:
29:da:ec:d9:04:0b:14:e6:6b:d4:7c:3a:44:00:55:
11:68:b5:40:cc:7f:9e:30:e6:93:83:8d:45:bb:6c:
eb:36:a3:07:5e:19:fc:d8:61:68:6b:bb:28:45:9d:
bb:05:3f:ce:b8:b7:81:78:22:e3:3a:20:11:af:ef:
d1:88:05:72:86:91:74:8b:46:09:2d:78:ab:41:6f:
af:27:d4:73:a6:6d:41:f5:ba:ba:c4:16:89:1e:ec:
9c:78:e4:0e:04:e9:85:98:45:ea:05:a6:e1:60:49:
f9:dc:f2:65:1a:54:72:1a:12:e3:22:f5:b8:3d:96:
60:a9:42:70:d9:6b:2c:7c:c0:78:b1:fb:d5:99:b7:
09:df:f7:f9:ca:70:11:90:2f:37:81:55:41:e2:67:
ec:ce:a6:00:15:be:ae:b9:97:cd:b3:7a:c1:85:fb:
aa:71:79:a2:e2:4e:7c:64:f1:26:75:1a:1a:54:9b:
af:3f:5f:6a:37:48:b9:ca:6b:90:32:a9:07:a7:40:
3d:03:50:d8:63:b5:66:ea:9a:9d:6c:67:a9:dd:98:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:54:B8:25:16:9E:25:0E:99:9B:63:BB:8E:C9:5D:2D:02:BD:B2:7F
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dd:6f:f1:d7:0c:54:fb:27:a4:a5:8e:72:ff:66:8e:05:c8:
a9:ce:d1:14:77:97:10:13:55:c4:f6:fb:31:89:ca:f7:48:18:
36:e6:e3:a0:8f:f8:29:05:1c:fd:26:ff:69:7f:d1:89:a2:95:
6e:3a:3a:13:e9:d4:a2:82:1a:10:71:60:78:04:79:cc:f1:47:
f9:76:a0:df:42:c5:48:22:46:db:75:be:14:37:72:b0:8d:02:
74:c4:6f:14:da:49:4d:ed:21:de:b2:7b:c5:58:9b:53:a7:e9:
2e:c1:8e:95:92:ed:8d:aa:c4:4c:91:5a:38:21:a1:22:80:f3:
dd:e1:c5:87:39:f6:69:9e:ee:86:ca:59:c3:74:da:ab:48:8f:
ab:13:ac:d0:7a:21:4b:eb:82:fb:a4:70:a5:21:31:26:d1:e6:
2e:91:31:a3:e3:2d:c7:d1:69:70:d1:03:93:43:da:20:d7:ab:
fa:82:90:1f:a7:5b:7b:44:a7:0f:49:f5:e4:4d:12:95:b0:96:
6d:a8:b1:a3:29:f2:bf:0d:2e:ee:cb:5d:89:ea:35:d9:4f:25:
81:da:45:1d:58:ed:ca:07:53:ad:d5:a5:33:91:47:c3:89:82:
52:40:38:9a:48:22:e9:7a:26:66:3a:e6:8c:92:e9:c3:5f:f6:
a3:0f:f0:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqDnZOXF2bL1SHk7B+weeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx
NTRhMWEwHhcNMjUwODIzMDIwMDUxWhcNMjUwODI0MDIwMDUxWjAzMTEwLwYDVQQD
EygwMTU0YjgyNTE2OWUyNTBlOTk5YjYzYmI4ZWM5NWQyZDAyYmRiMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr311rPgFWLtVEjxqARnlMLupwPNq
0S9gYjBLc0WI3FiydroaakP/M+SUH0Up2uzZBAsU5mvUfDpEAFURaLVAzH+eMOaT
g41Fu2zrNqMHXhn82GFoa7soRZ27BT/OuLeBeCLjOiARr+/RiAVyhpF0i0YJLXir
QW+vJ9Rzpm1B9bq6xBaJHuyceOQOBOmFmEXqBabhYEn53PJlGlRyGhLjIvW4PZZg
qUJw2WssfMB4sfvVmbcJ3/f5ynARkC83gVVB4mfszqYAFb6uuZfNs3rBhfuqcXmi
4k58ZPEmdRoaVJuvP19qN0i5ymuQMqkHp0A9A1DYY7Vm6pqdbGep3ZixGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFUuCUWniUOmZtju47JXS0CvbJ/MB8GA1UdIwQY
MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt
ZjkzNWZjMGYyMGQ1LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1
LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP91v8dcM
VPsnpKWOcv9mjgXIqc7RFHeXEBNVxPb7MYnK90gYNubjoI/4KQUc/Sb/aX/RiaKV
bjo6E+nUooIaEHFgeAR5zPFH+Xag30LFSCJG23W+FDdysI0CdMRvFNpJTe0h3rJ7
xVibU6fpLsGOlZLtjarETJFaOCGhIoDz3eHFhzn2aZ7uhspZw3Taq0iPqxOs0Hoh
S+uC+6RwpSExJtHmLpExo+Mtx9FpcNEDk0PaINer+oKQH6dbe0SnD0n15E0SlbCW
baixoynyvw0u7stdieo12U8lgdpFHVjtygdTrdWlM5FHw4mCUkA4mkgi6XomZjrm
jJLpw1/2ow/wkQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:45 2025 by rpki-client