Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: Ftl2Q+FWfiQfpXX/oyQJjN1sKcq9n4ICCTFgfUi/d+8=
Subject key identifier: E8:47:6C:E6:37:00:5C:8A:F4:29:DE:2D:09:E5:2B:A4:52:E8:93:CA
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 0198D7A92A1DA6E53D0F0E396EBD73BBF4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 09DD
Signing time: Sat 23 Aug 2025 16:00:44 +0000
Manifest this update: Sat 23 Aug 2025 16:00:44 +0000
Manifest next update: Sun 24 Aug 2025 16:00:44 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: FGFtjXx5JKAWSMwvaD3XyLLt9IonlrkOCX014eUhs0Q=)
2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:2a:1d:a6:e5:3d:0f:0e:39:6e:bd:73:bb:f4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Aug 23 16:00:44 2025 GMT
Not After : Aug 24 16:00:44 2025 GMT
Subject: CN=e8476ce637005c8af429de2d09e52ba452e893ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:77:f6:a3:04:18:04:e2:85:78:4c:db:2f:67:
45:34:a7:0b:d9:36:bb:1c:09:28:80:9c:a7:fe:5c:
d9:66:c4:43:80:48:af:93:19:e6:d6:9d:f8:e1:2e:
a6:a7:72:30:72:02:52:f5:d6:a9:37:61:4b:a2:cc:
da:b3:70:84:52:d7:c2:b4:8c:be:dc:02:2f:9e:16:
a5:fc:99:4b:22:c4:5b:92:5b:ff:68:34:bf:04:83:
29:ae:22:3f:1a:e5:c7:f6:e3:27:3a:f5:9c:7d:c2:
93:f3:81:80:18:22:fe:d2:d1:67:e3:d2:17:85:5a:
a7:ad:e2:d6:41:47:0b:96:58:ce:23:9c:83:65:f7:
8a:be:bb:2d:75:69:f6:f0:2e:31:d7:a9:dd:e5:53:
14:fb:1e:e2:74:43:91:e4:12:7a:12:ab:bb:d1:52:
2f:93:96:e9:c6:2a:13:fc:0a:92:0a:b6:e7:ab:d6:
6f:c8:d0:52:0d:a1:eb:7d:c0:4e:7b:7c:aa:e0:d1:
43:80:fe:5e:f9:c8:74:52:c5:cf:83:c1:56:c8:04:
bb:33:d7:85:00:db:06:82:aa:8c:71:8d:44:24:b6:
cc:b7:ff:e9:03:95:bf:b1:f3:e2:83:96:1f:fc:7d:
3f:b9:2d:1c:f9:85:c4:24:ee:35:96:50:ff:64:cf:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:6C:E6:37:00:5C:8A:F4:29:DE:2D:09:E5:2B:A4:52:E8:93:CA
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:99:28:34:4e:1a:29:96:07:e8:8c:80:c2:83:96:3c:f9:30:
b5:1b:42:0e:3b:41:9e:1e:b5:d3:d0:3e:b0:b6:13:a3:3a:1c:
0b:d3:17:4e:9c:04:f5:c9:c9:95:82:35:43:4b:49:68:0a:62:
eb:5b:7e:c1:d6:c4:2e:8a:a7:60:74:74:81:67:52:17:bf:f6:
7c:91:ea:a1:10:7a:40:4d:bd:b4:92:c8:2e:c8:b3:ca:eb:6d:
fd:91:f8:e2:a2:45:26:50:c3:77:96:62:5d:8e:72:e7:42:c2:
9a:df:7b:2b:6e:62:1c:89:35:42:db:f1:7f:c9:0e:ff:93:75:
37:54:43:62:f9:cf:33:61:71:da:fd:3a:4c:23:b6:7e:7c:68:
39:42:f0:c3:cd:88:0a:b1:a7:ae:18:92:db:25:d2:8a:7c:6b:
51:54:6b:0c:f4:84:4f:95:25:73:2a:08:26:24:38:2d:93:93:
2d:92:2d:f4:f7:7c:60:70:62:29:01:98:9a:7a:d7:d7:97:8a:
9f:d4:0c:60:40:91:f4:18:04:16:64:56:f8:66:99:4d:1e:35:
49:22:e4:f2:99:7d:4e:fa:8e:4b:d0:a9:6b:a7:d4:ec:8e:62:
5c:04:b6:c8:b5:d8:6d:73:04:15:76:2d:9a:b7:30:c5:e7:1b:
78:b0:ea:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:42 2025 by rpki-client