Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: 5Zy60Aoe+BhIDebX93oE/paNm8pyv2FgwMqiL3+7Xe0=
Subject key identifier: 3A:2E:D6:6F:AF:69:0E:BF:33:5F:E8:12:66:A8:AF:2D:43:F0:CE:EF
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 0199FD34358CDDAAF0C87DCA5FAAF5272843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0A75
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: 03PbO3Cpt3tilnbUKK2t252nb364ETSf1LCPD+LpJIo=)
2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:35:8c:dd:aa:f0:c8:7d:ca:5f:aa:f5:27:28:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=3a2ed66faf690ebf335fe81266a8af2d43f0ceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:c3:64:1d:7e:b8:06:fb:0c:fe:fb:7a:3f:
fa:8e:8c:d4:06:6c:44:36:c5:d9:6d:7c:e6:c1:b7:
44:e8:1d:c1:68:d5:00:55:35:de:0d:d4:8a:77:ab:
be:b4:43:0b:5b:8e:26:f9:84:9b:d1:1e:ac:38:65:
0e:45:cf:b3:5b:d7:9a:34:fe:6d:c4:22:d3:d0:c2:
c5:95:28:4e:6a:6b:4c:58:00:cd:ed:f4:e6:23:c1:
c7:6f:d4:0e:16:98:e2:a3:17:da:2d:69:94:fe:e3:
01:1e:56:81:62:d3:ca:bb:91:19:ce:f0:26:fa:d5:
ca:61:04:04:29:ea:05:2d:9b:9a:90:bc:68:72:27:
af:42:d7:bb:6c:6a:7f:54:f0:c9:34:74:9c:6d:a2:
eb:36:c1:45:d9:37:53:03:13:dd:05:52:f7:bc:45:
98:06:24:6c:c9:21:8b:58:93:64:8b:1e:45:c8:78:
7d:25:ef:fa:f5:91:48:0b:e9:f8:a2:28:c6:06:18:
6a:65:72:f7:0f:8e:5a:a3:0e:7c:ee:8d:52:c6:9e:
71:8c:d9:da:c4:18:29:76:63:05:28:9e:04:ab:c9:
3c:6b:ce:79:cd:22:b8:ab:de:aa:ff:8c:70:bd:a5:
8a:1e:a8:af:1e:d2:35:66:88:fd:19:02:f9:d2:94:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:D6:6F:AF:69:0E:BF:33:5F:E8:12:66:A8:AF:2D:43:F0:CE:EF
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8b:68:f1:63:0b:9c:c9:f0:86:34:b1:d5:b7:5c:e6:7a:1d:
0f:57:18:fc:65:30:6b:b7:fb:d2:34:68:09:64:83:4e:c6:06:
d7:35:1c:6a:c1:64:82:49:59:b7:34:12:b5:3f:46:5c:dd:dc:
00:5a:c5:7b:d8:3a:54:81:0b:96:8c:f0:06:13:6d:77:56:a7:
53:4b:39:f9:d0:db:39:5e:bc:aa:9b:7f:b0:15:fa:d3:b1:50:
21:ec:e3:d2:7e:2d:05:fb:7a:5e:d7:53:f7:c7:48:a4:5f:8e:
f3:e4:24:c6:7e:70:ac:05:a3:cc:c5:2c:c7:7f:6f:97:bc:f3:
24:be:b8:27:03:d4:cc:d0:d1:13:2f:c7:ff:61:c6:3f:8a:90:
2e:31:e6:51:d7:49:ef:ec:01:6a:6b:10:5b:2a:aa:70:bf:a4:
a9:33:e9:19:f0:27:5d:35:4c:39:52:e6:79:16:f6:e0:64:ed:
dd:6f:1f:fb:d4:b4:43:03:72:32:15:2c:53:bb:90:2e:30:c4:
a4:29:c4:7a:40:39:00:32:af:5a:e8:13:9e:ed:42:7a:34:98:
10:b4:c2:de:77:f5:9e:1d:0d:0c:7a:58:9f:aa:8a:dd:ee:94:
17:56:1a:31:67:f5:32:82:6e:af:d1:1d:b0:53:e3:03:49:b8:
b2:f9:83:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NDWM3arwyH3KX6r1JyhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTc5Yjg5OGMwZjU4MzRjYmM4MzhhNjlhMDVlM2FiZThj
MDI5MDMwHhcNMjUxMDE5MTYwMTIxWhcNMjUxMDIwMTYwMTIxWjAzMTEwLwYDVQQD
EygzYTJlZDY2ZmFmNjkwZWJmMzM1ZmU4MTI2NmE4YWYyZDQzZjBjZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyLDZB1+uAb7DP77ej/6jozUBmxE
NsXZbXzmwbdE6B3BaNUAVTXeDdSKd6u+tEMLW44m+YSb0R6sOGUORc+zW9eaNP5t
xCLT0MLFlShOamtMWADN7fTmI8HHb9QOFpjioxfaLWmU/uMBHlaBYtPKu5EZzvAm
+tXKYQQEKeoFLZuakLxocievQte7bGp/VPDJNHScbaLrNsFF2TdTAxPdBVL3vEWY
BiRsySGLWJNkix5FyHh9Je/69ZFIC+n4oijGBhhqZXL3D45aow587o1Sxp5xjNna
xBgpdmMFKJ4Eq8k8a855zSK4q96q/4xwvaWKHqivHtI1Zoj9GQL50pTfQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDou1m+vaQ6/M1/oEmaory1D8M7vMB8GA1UdIwQY
MBaAFNuXm4mMD1g0y8g4ppoF46vowCkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUt
NGNiMjU3ZWUxOTJjLzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUtNGNiMjU3ZWUxOTJj
LzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoto8WML
nMnwhjSx1bdc5nodD1cY/GUwa7f70jRoCWSDTsYG1zUcasFkgklZtzQStT9GXN3c
AFrFe9g6VIELlozwBhNtd1anU0s5+dDbOV68qpt/sBX607FQIezj0n4tBft6XtdT
98dIpF+O8+Qkxn5wrAWjzMUsx39vl7zzJL64JwPUzNDREy/H/2HGP4qQLjHmUddJ
7+wBamsQWyqqcL+kqTPpGfAnXTVMOVLmeRb24GTt3W8f+9S0QwNyMhUsU7uQLjDE
pCnEekA5ADKvWugTnu1CejSYELTC3nf1nh0NDHpYn6qK3e6UF1YaMWf1MoJur9Ed
sFPjA0m4svmDkQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:40 2025 by rpki-client