
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: DhKC5Jc/s7+rjmotwDOcK2xCtzkaFaSGgXn4x5oOflk=
Subject key identifier: 32:50:B1:2F:96:E7:EB:61:8F:81:09:41:31:EF:F5:44:05:57:59:C2
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 0198D5158646A9DA1D56240BDDD9E8341591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 0335
Signing time: Sat 23 Aug 2025 04:00:14 +0000
Manifest this update: Sat 23 Aug 2025 04:00:14 +0000
Manifest next update: Sun 24 Aug 2025 04:00:14 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: PFltTEqxnHZ+2NGao+i1oP554Kic2u1BSj1lF6K1Khk=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:86:46:a9:da:1d:56:24:0b:dd:d9:e8:34:15:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Aug 23 04:00:14 2025 GMT
Not After : Aug 24 04:00:14 2025 GMT
Subject: CN=3250b12f96e7eb618f81094131eff544055759c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:06:06:58:30:9d:33:06:f0:72:0b:b0:b3:
32:90:00:65:f1:61:d0:09:12:93:fc:1a:a3:7e:34:
71:35:31:a5:21:cc:79:8e:56:66:18:e9:d5:20:09:
01:b7:a1:c7:b8:3b:82:4d:af:d5:14:8d:89:42:b2:
52:91:bc:87:a0:1d:57:00:eb:93:8a:b4:50:9f:b7:
b0:e5:4a:ec:a4:9b:64:5b:77:aa:01:e7:25:8a:74:
b1:b5:0e:f8:00:30:dd:b0:93:1c:7b:9e:0e:31:86:
28:67:8f:1b:b9:12:3f:4f:db:86:ca:09:50:d1:8d:
6d:96:19:d9:fc:dc:0a:aa:0e:5e:6e:b2:c2:1b:77:
61:81:83:37:cc:f0:4a:08:63:2a:e0:e1:7c:60:7c:
b0:a5:47:01:e9:0e:be:4c:db:b8:63:86:10:54:b6:
07:c9:be:43:7e:15:fe:51:fc:69:8b:6f:c4:71:a5:
be:cb:fc:74:ae:2e:ce:3b:83:06:31:34:d8:68:a3:
d5:be:d8:2f:4c:0c:97:26:bc:95:e7:e5:3d:87:ea:
2a:63:77:13:b0:26:78:d5:5e:a7:2d:8e:92:f4:31:
77:b1:f8:9c:63:47:74:3a:3a:45:76:7f:5d:14:38:
e6:8a:40:98:36:8f:c8:38:99:e3:ae:02:ed:e3:b3:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:50:B1:2F:96:E7:EB:61:8F:81:09:41:31:EF:F5:44:05:57:59:C2
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4f:20:f0:ae:60:6e:03:da:54:44:05:a6:d8:16:87:2b:06:
ef:94:8d:73:73:26:f0:17:08:bf:6f:d4:01:bd:f3:af:2a:94:
0c:8e:3d:64:61:aa:80:9b:5b:90:f6:45:d8:cc:ae:2b:72:b5:
9b:2c:56:54:8d:09:43:1c:4d:db:08:c3:a6:82:fc:1a:ac:84:
4e:ec:3a:72:29:4f:69:50:43:95:38:97:ee:46:25:51:3d:01:
15:34:99:f5:46:88:e0:ad:ec:78:ba:ad:28:f9:3f:63:18:1b:
d0:5b:b8:0a:d6:40:94:77:f8:59:fc:09:41:6c:75:6b:47:b9:
7c:5c:0f:f4:d6:96:5a:90:30:60:9e:e2:ae:7f:11:d8:54:5a:
1f:e5:1b:88:70:cc:e6:22:1c:00:36:1a:73:45:28:3a:10:42:
8a:92:b5:bc:5d:b8:7d:43:e6:ff:6d:5b:4a:03:9d:f7:48:c7:
79:ef:a3:5c:ab:a3:87:58:26:01:7e:46:63:c9:95:45:ac:35:
08:14:c3:4c:36:5c:7b:e3:ec:f3:3b:bf:d4:a3:8b:ea:90:50:
c6:1e:86:aa:a6:12:53:4f:10:d7:d9:af:73:25:b7:62:7f:8a:
f9:4f:f2:48:a1:ae:56:9b:b9:9d:7f:e0:db:c6:f1:c2:c1:69:
37:5c:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:28 2025 by rpki-client