Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: 06/ATU189RbowfC1ssBORU3wD37zipXV1KlFnb3RKr4=
Subject key identifier: 8C:50:18:4E:D7:CD:85:7D:10:8C:9F:A8:C4:5B:A7:94:35:32:FC:B5
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 0198D4E005BFAA9DFF9CE41BD3B41D1CC797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 02CD
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: o+0t0fWHI//lzUX0bATjM1ZOilTyJ89BIZdZjf2sWzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:05:bf:aa:9d:ff:9c:e4:1b:d3:b4:1d:1c:c7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=8c50184ed7cd857d108c9fa8c45ba7943532fcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:6a:7d:52:cb:01:b6:87:c9:bf:d3:7a:37:
4f:0d:e0:84:ba:df:0e:2d:76:d3:c7:fa:b8:05:30:
50:75:40:9e:4a:bc:c6:4d:45:a8:31:41:c8:85:6a:
35:5b:f4:c6:65:f8:d2:82:46:0e:6b:30:d9:89:81:
9b:15:bb:ac:60:14:49:ff:ea:f6:a8:4a:f0:be:ed:
a3:8d:29:4e:20:92:e4:80:7a:80:25:cc:9b:ce:4c:
8a:15:c8:36:93:ff:8a:b1:c0:cf:53:49:5a:69:95:
6a:a6:b4:ad:93:fa:be:67:24:94:fa:59:0c:6a:8d:
51:f1:ba:9f:67:f7:6c:6a:5e:45:7b:77:b9:40:be:
c8:1d:eb:6d:68:38:aa:28:99:05:5e:c7:59:86:bb:
dc:b3:cd:4f:9d:75:04:19:3d:15:be:96:1d:2a:13:
b0:89:3b:ac:22:de:36:e1:9d:fb:c2:e8:84:c1:2b:
b5:07:22:65:0d:8b:6a:d3:e5:21:bb:f5:e7:3d:8a:
c2:82:73:95:fb:34:33:bf:b0:41:db:96:63:de:23:
ef:cc:89:79:13:c8:de:4a:3b:7a:4a:76:67:92:e2:
e1:5b:b5:0e:db:58:2c:9e:35:ee:b0:b5:f1:23:c9:
f6:c1:ed:d3:ad:f0:a8:44:4f:cb:f1:5e:65:8b:c6:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:18:4E:D7:CD:85:7D:10:8C:9F:A8:C4:5B:A7:94:35:32:FC:B5
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a5:17:91:12:a7:50:7a:59:d1:2b:47:c1:c0:04:ba:83:dd:
27:4b:ae:a8:c2:30:7e:1b:02:21:ab:45:6b:8d:07:ff:ba:1b:
e2:3b:b9:8e:04:08:f0:f9:54:78:35:1b:a8:1f:cb:45:4b:dc:
9f:b1:fe:00:73:78:f4:5e:26:ea:81:42:c0:f8:01:74:86:a8:
46:cb:17:13:27:df:ee:89:1c:79:6e:25:dc:dd:bd:f3:36:94:
b3:a6:43:56:dc:52:fc:23:63:3b:71:cb:93:5f:f1:e9:27:16:
ca:f2:46:54:04:73:b4:c3:a4:76:46:5e:f8:a5:f8:d9:c0:21:
d2:4a:15:50:7b:f4:55:d5:bf:89:25:5f:a5:d6:44:c2:46:16:
ed:fb:a3:85:1e:15:c2:ce:82:ec:c1:91:9e:0e:b1:3f:ff:96:
9d:72:6a:94:78:5e:37:d4:cd:5c:9a:6c:a7:5c:36:d3:3f:6b:
bd:a2:11:2a:b6:a9:c6:f8:57:1c:8b:a3:d2:ec:3a:21:30:d4:
e3:73:61:28:29:58:18:ef:f5:cf:bd:08:87:19:96:b9:8a:e8:
8a:69:29:88:69:07:36:e8:9b:05:03:97:83:13:71:2a:91:0a:
45:2b:6a:b1:e7:7c:a9:b3:fc:75:2b:12:27:30:22:41:4e:0a:
01:e5:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:44 2025 by rpki-client