Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: WrP4kz4u12XyMQ6ltL1A2joZ1wuC8iF/snFD8QaOVqk=
Subject key identifier: 90:52:8C:93:6C:06:A5:68:D2:53:E8:4E:4C:2D:EE:AE:FC:C6:3E:B1
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 0197B6D7B40BEF3892DEADB10B4CB99DC63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 09C3
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: aayLU7VxpCpzXorTTTg81NAsjWa6I8GlupxfpvsZ/9w=)
2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b4:0b:ef:38:92:de:ad:b1:0b:4c:b9:9d:c6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=90528c936c06a568d253e84e4c2deeaefcc63eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:87:5e:5e:59:cc:53:9c:76:a6:96:09:fa:
31:36:b5:d4:4f:07:1a:90:9b:32:89:87:4a:fd:0f:
72:1b:15:f9:6a:d6:35:cd:ca:fa:b6:2c:11:c0:83:
bf:44:4e:19:9d:ec:e0:7a:33:83:83:11:79:e1:12:
9d:bb:ee:f1:1c:a5:85:7c:80:06:66:e0:85:9e:2a:
3a:65:45:80:76:28:13:03:4c:2f:ac:cd:cc:0d:95:
ae:50:c2:63:af:8f:7e:b9:cd:46:3a:2f:f0:46:2b:
67:f2:a5:05:58:53:72:38:3b:43:15:7a:a4:55:bb:
77:57:ad:a3:05:18:77:5a:5c:b0:de:9c:9f:59:7e:
17:80:f3:4d:fc:8a:38:fb:e7:03:77:c2:4c:32:7e:
0f:8f:6d:0f:38:a9:ff:0e:06:90:ca:23:98:33:66:
8d:78:51:5e:3f:22:10:a6:e1:2f:8b:c7:98:44:a2:
fc:7d:83:fe:33:63:bb:2e:69:7a:26:0b:63:69:7a:
88:f1:cc:b2:21:4d:3f:d3:d3:f3:dd:16:0d:68:79:
b5:7d:87:e1:83:82:8a:9a:34:ab:fc:ef:1f:8e:12:
e3:87:03:19:ab:1b:6b:1e:0f:88:f7:ea:1f:22:ce:
72:f4:c1:20:90:86:cd:32:f1:a6:22:b7:59:02:3f:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:8C:93:6C:06:A5:68:D2:53:E8:4E:4C:2D:EE:AE:FC:C6:3E:B1
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:29:2c:d2:a3:2a:9e:32:bc:cf:47:27:88:ab:96:43:02:c8:
20:24:3c:c7:3f:a5:8f:f0:89:b5:0f:71:e6:09:66:85:4a:3c:
84:79:c4:f1:e8:15:f2:56:b4:9d:d1:0f:86:d4:36:30:31:ca:
e1:ae:36:97:a1:e3:6f:d9:0c:cf:9f:67:5c:c8:ec:74:a9:f5:
8f:32:43:08:11:f3:70:f9:5c:14:73:bb:ac:86:51:da:4c:19:
3a:24:be:0b:da:10:95:6e:6e:0c:77:83:bc:74:20:23:51:ae:
57:90:58:9c:41:7b:b9:00:7a:c5:b1:2b:03:f6:48:b1:cf:f9:
5c:4b:97:31:7f:d7:7f:99:1d:70:2e:2a:97:49:5b:70:59:a0:
26:c1:bd:cd:6d:5f:e4:01:21:42:ed:ed:f3:b5:54:12:04:76:
d5:9b:7e:b9:64:f1:c0:eb:39:9d:15:6a:a6:5e:f9:5b:d5:e4:
be:69:da:b4:88:ce:0a:d4:82:6d:79:45:9d:52:3b:72:fb:bc:
c8:b3:4a:13:08:6a:64:12:fe:11:11:70:bd:70:4a:1b:6a:33:
31:fa:a3:6a:e6:63:7e:50:7f:45:f2:18:d4:f1:f7:1f:7f:41:
d8:c3:61:2f:00:37:3c:44:06:e3:51:a9:3a:23:57:a0:6c:1e:
6d:73:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:24 2025 by rpki-client