Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: XyWRsLaNMqwJYg4wEixSzll0wG4b4MwA4VuVWyP2xUk=
Subject key identifier: A9:0C:C6:3E:62:D7:D9:7C:E4:73:4E:C4:BA:6C:DA:6E:FF:88:80:02
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 0199FE0FFD1BDD5F562DB08D6B86FDDD7BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0367
Signing time: Sun 19 Oct 2025 20:01:24 +0000
Manifest this update: Sun 19 Oct 2025 20:01:24 +0000
Manifest next update: Mon 20 Oct 2025 20:01:24 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: 183CM2aAURzoCod62BxSMJin5g3ig4N9SlBltg3rxPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:fd:1b:dd:5f:56:2d:b0:8d:6b:86:fd:dd:7b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Oct 19 20:01:24 2025 GMT
Not After : Oct 20 20:01:24 2025 GMT
Subject: CN=a90cc63e62d7d97ce4734ec4ba6cda6eff888002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:3e:11:64:d5:55:cf:d7:6c:db:9a:fc:5d:
41:68:6e:91:6b:79:0a:5c:82:8c:62:d0:1d:7a:b8:
1f:75:23:84:d7:09:6b:ea:bc:75:0f:d0:9d:7f:42:
69:41:49:63:c0:7c:e3:0e:13:49:5c:67:6d:0b:a4:
02:30:8c:65:65:b1:61:29:8a:f0:14:14:93:7c:9d:
e1:9a:da:83:7a:b5:ae:d6:f9:74:e1:61:3a:55:c4:
de:6a:e9:82:2c:31:dc:68:ac:48:dd:19:73:ad:01:
57:55:1d:98:18:16:9d:32:d0:fd:36:96:44:dc:14:
b8:73:12:3f:17:5c:d6:2f:27:c1:9c:9e:f8:02:20:
de:48:c3:4b:75:a9:4e:07:4b:64:f0:8d:c4:b3:ce:
29:e6:ff:f3:f6:30:98:b7:25:6e:39:f1:0e:c5:cb:
6e:14:b3:39:19:0d:ae:2a:45:1c:98:78:2f:7d:86:
cd:30:65:5c:7d:ed:48:a4:70:7e:2a:d9:3b:a5:71:
1e:08:77:d3:fe:3f:ed:8d:40:5d:c2:0d:86:18:94:
95:48:3a:7d:d0:b6:3a:ed:a6:55:ea:28:76:fa:c9:
1d:0c:b1:ee:07:a1:f1:71:77:8e:59:47:de:64:4b:
12:30:77:71:74:ea:7c:dd:bd:46:ce:5b:d9:83:80:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0C:C6:3E:62:D7:D9:7C:E4:73:4E:C4:BA:6C:DA:6E:FF:88:80:02
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:72:15:05:b2:16:04:50:f7:eb:aa:de:69:dd:00:d5:fa:
d7:42:e4:64:5a:73:e0:48:25:fc:02:2d:a4:b3:5e:fa:dc:ef:
3c:55:45:3c:02:ff:b7:cd:43:fe:17:34:b8:85:6d:47:c0:4d:
9f:38:0e:ce:d3:dc:56:04:d1:58:82:73:0a:0f:42:d9:be:15:
de:08:f8:ce:74:df:09:f6:a9:53:cc:d8:87:07:39:a5:c6:92:
56:a4:c0:b0:f3:69:45:7a:e5:25:f3:32:a7:28:60:7c:34:22:
2e:65:98:67:81:17:67:8e:12:a9:05:7b:2b:d7:59:aa:fb:d9:
51:cf:3f:a6:5c:04:25:cf:06:5a:a1:77:fa:25:ee:f5:9a:da:
c9:e9:d4:98:7c:e6:47:57:ad:a7:f8:19:ca:ca:42:89:d8:0c:
5c:02:34:74:39:3e:3b:b3:20:01:0e:f4:ed:4f:51:28:a8:4b:
45:21:d0:15:e5:d5:6d:39:c4:dd:fc:5c:d6:1d:fb:9c:1c:e4:
af:fe:aa:49:ed:41:c7:42:3b:f2:a1:fc:9e:fb:e7:2b:33:62:
c1:0d:7a:dc:34:8c:0d:6b:03:f0:4d:00:10:91:68:32:b8:e5:
9b:f1:95:59:33:e4:88:ab:60:12:3f:b1:c5:41:48:5d:26:f6:
e1:38:2c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:50 2025 by rpki-client