Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: T/r83hYvAt1X8/uvB8ku72EO2kIdMHMGR8xyOaz2h04=
Subject key identifier: 59:0E:F5:8A:40:0C:BC:BD:26:9A:D6:B5:E8:D4:C8:63:98:0C:5B:62
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 0197B70EA9F21F406CD5CA73A9A4FBBF6E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0239
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: KH+8Oz7Q+qQsxv2HKYsuSLFpHoYACZoKQ8aoWTBa86Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a9:f2:1f:40:6c:d5:ca:73:a9:a4:fb:bf:6e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=590ef58a400cbcbd269ad6b5e8d4c863980c5b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:b7:bb:bd:e4:3e:36:41:e2:a4:b4:94:7c:
ea:53:de:61:38:3f:4c:0f:92:08:c0:1e:8a:f3:77:
c8:bc:7e:c6:0d:98:fc:d1:3d:2a:22:ee:4a:4c:3b:
69:af:10:ee:e7:52:43:37:4e:18:5a:dd:73:07:7e:
8b:23:fe:9a:56:4d:51:02:c7:08:d7:fd:b1:48:6c:
57:12:a6:7e:d8:83:69:d1:93:13:03:52:cc:90:6c:
a2:02:ed:94:e4:a3:8c:68:b3:2a:8d:c5:d4:eb:6a:
b0:1e:0e:d4:63:bb:36:d6:54:4e:31:65:3b:18:08:
36:40:f3:49:b1:13:30:71:ce:27:85:2b:09:05:a4:
25:67:44:30:69:6e:94:f4:dc:eb:44:ce:46:bf:b0:
ee:4a:68:ce:1d:77:32:d5:77:c8:3d:61:50:39:2c:
45:b8:af:7e:ca:7b:63:4b:6b:99:53:21:d4:b6:01:
55:8c:e8:b3:82:59:8e:0c:4d:1f:2f:bc:d7:ff:b8:
17:be:10:33:24:ba:c9:d1:c1:96:07:fc:b7:a4:1c:
95:72:c4:7a:0b:1f:0a:c3:7b:5d:22:cc:00:a2:98:
fe:da:2a:4f:2d:bc:e6:52:50:ca:a9:ab:b1:b6:8d:
64:15:5d:5b:64:cf:2a:6e:4b:40:95:2f:6f:a1:55:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0E:F5:8A:40:0C:BC:BD:26:9A:D6:B5:E8:D4:C8:63:98:0C:5B:62
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:00:12:31:33:ed:06:3b:ac:5d:e4:38:04:48:e3:b8:17:33:
8d:04:70:54:0c:8a:fd:34:cc:6a:f7:ec:fa:49:af:f5:c7:45:
5f:16:ca:78:b3:e5:a7:5d:2e:0e:d4:f6:74:cc:9c:df:79:16:
21:70:e0:fb:95:d2:69:0a:91:c7:8c:0b:10:cd:b2:21:35:92:
77:8b:7b:ba:d2:78:22:f2:fb:66:be:2f:49:e1:22:5f:5e:f6:
19:68:9b:e7:ad:5f:40:6c:d4:e5:a4:0a:07:e3:56:e0:ea:a9:
b8:d2:64:5b:25:b5:85:4a:e0:d5:16:e8:51:b1:6e:b6:c4:15:
ca:36:02:bf:a9:25:45:60:60:9e:82:67:61:32:54:99:25:75:
b4:f5:ab:6c:42:11:34:20:95:96:12:23:94:b3:fd:d5:33:6d:
f2:bb:59:56:33:c8:61:58:95:82:58:87:6c:a5:98:90:11:6f:
1c:ba:af:c0:4f:b8:01:f3:dd:40:fb:a4:a6:83:a5:c9:34:f2:
bf:9e:59:6b:ac:5c:a0:d4:54:29:c1:45:58:66:4d:3b:a0:df:
12:35:9c:fd:43:50:4b:28:2f:c9:2f:6c:24:48:c0:75:55:5d:
63:62:19:93:74:51:42:95:e6:1d:da:45:0b:23:3e:fd:c8:8c:
07:b9:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:46 2025 by rpki-client