Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: e5CjHa3ndnh5mIdhscpk2m97KRCGsv9XnoHsmy76+Hw=
Subject key identifier: C8:7E:A7:CE:99:68:60:0C:44:AC:0A:BB:6E:E6:29:0E:3C:FE:81:99
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 0197C56ED6DC60E897944A7478AF2476E3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 094F
Signing time: Tue 01 Jul 2025 10:01:04 +0000
Manifest this update: Tue 01 Jul 2025 10:01:04 +0000
Manifest next update: Wed 02 Jul 2025 10:01:04 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: h/ITZGrP5nnxGCiMht0z66bH5AQ4g0J2sCmEm3vwIJQ=)
2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:d6:dc:60:e8:97:94:4a:74:78:af:24:76:e3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Jul 1 10:01:04 2025 GMT
Not After : Jul 2 10:01:04 2025 GMT
Subject: CN=c87ea7ce9968600c44ac0abb6ee6290e3cfe8199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:05:fc:49:6e:da:ac:13:e5:66:ae:3e:97:
09:62:5c:18:66:d4:bf:b2:15:ef:aa:95:c5:6c:6b:
20:2b:a5:3f:fb:71:00:31:e9:fb:56:74:01:e5:f4:
11:e6:b0:1c:78:3f:d3:67:1b:2a:94:95:84:14:51:
fe:9c:39:c1:06:29:b9:27:f7:26:db:8c:75:a1:9b:
df:3d:c2:e0:52:73:51:33:b8:2b:6f:f8:de:1c:ae:
d1:89:2d:27:e7:c2:e3:c9:db:5c:55:61:ef:ca:0f:
fc:7d:63:00:da:54:e4:af:f3:3a:71:bb:27:8e:5d:
80:47:d1:6b:09:01:87:0f:5e:b0:fd:66:17:60:42:
5f:cf:0a:13:c6:55:3a:53:79:73:a2:69:55:4b:3f:
3a:13:e3:14:aa:5d:c2:e8:21:77:57:91:f8:26:04:
2d:df:8b:74:6a:4b:a6:66:8f:cc:64:f5:a8:80:02:
3e:97:aa:ad:de:1e:9d:50:94:38:0c:e4:fe:55:e6:
34:13:97:16:06:d0:9a:ff:f5:49:42:f5:5b:7b:77:
cd:00:9d:65:97:61:e5:d1:7c:58:b4:0a:89:a5:99:
db:e1:d2:45:93:cf:b5:84:5a:32:97:f8:69:04:d3:
70:c9:f6:1d:95:52:29:f9:a2:d7:de:73:35:db:9f:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7E:A7:CE:99:68:60:0C:44:AC:0A:BB:6E:E6:29:0E:3C:FE:81:99
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ec:26:9c:e2:08:91:46:92:5a:5d:90:d4:54:e6:58:af:cb:
9f:df:21:e9:4a:74:c3:d0:47:b5:fb:0b:64:b3:56:e9:22:cc:
cb:9e:3e:11:33:cb:9f:11:80:df:53:3d:b3:b1:8c:65:77:98:
e0:e5:30:d2:54:06:93:84:b4:9f:a4:c3:e1:39:45:17:12:e1:
f9:fb:03:81:80:7f:3d:b6:93:4f:ad:93:e7:24:9c:de:58:c2:
8c:fc:70:bd:7b:66:31:9f:98:2f:b9:bb:13:48:5d:5a:2b:d4:
f2:05:9c:b8:1c:24:b6:41:5a:21:c1:17:97:b5:bb:ce:8c:87:
c6:b8:06:28:1e:ec:f2:3f:f6:f6:96:ab:8c:c0:8c:15:1f:a9:
c4:51:80:b3:36:c8:b1:06:77:62:ca:a0:dc:16:98:c7:f8:c4:
23:cb:b3:37:2c:45:ea:5f:66:1f:56:e3:fe:53:4b:b9:29:6a:
8c:ea:e5:29:76:03:04:eb:1b:89:2e:c8:e5:6d:1c:3c:71:f9:
a4:23:16:14:e5:ef:bf:d8:1b:2a:88:50:94:a5:ff:a7:2f:af:
ee:db:bb:b6:39:2d:2a:20:a3:30:c2:4b:99:97:c3:55:d7:55:
7a:29:26:3e:cf:5c:26:05:68:e7:9a:22:39:c0:4b:ea:ce:a4:
9f:04:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:47 2025 by rpki-client