Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: Q4441e310dyt72FEp6XfxfJKa0Q5J+wv9fBdBjzFwbE=
Subject key identifier: 01:B2:E3:94:3F:A4:71:D6:65:70:53:BA:5A:9E:C7:0A:53:B2:E5:2A
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019A0259D55A9F81DB0902608E679C2D9920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 03D1
Signing time: Mon 20 Oct 2025 16:00:32 +0000
Manifest this update: Mon 20 Oct 2025 16:00:32 +0000
Manifest next update: Tue 21 Oct 2025 16:00:32 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: YOer9EY/zpuZ1Vx2BBO7c0V0sgj+zLhZIii5Rzzn5Qw=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:d5:5a:9f:81:db:09:02:60:8e:67:9c:2d:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Oct 20 16:00:32 2025 GMT
Not After : Oct 21 16:00:32 2025 GMT
Subject: CN=01b2e3943fa471d6657053ba5a9ec70a53b2e52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:1b:66:15:b2:3c:96:44:b9:ac:b5:f7:93:
49:02:40:cb:4f:d4:a0:68:f2:a2:e1:61:69:0b:c8:
8c:f3:91:dd:1d:ea:01:d9:bc:72:0f:78:e9:6b:13:
00:74:9c:10:d7:97:58:07:25:c7:95:f2:96:f4:65:
ce:28:59:d0:7e:64:8d:34:4c:29:5c:04:a0:51:ac:
c3:d8:48:56:a5:aa:53:09:d0:62:db:73:66:80:4b:
08:53:6e:63:1a:bb:c5:0f:a6:8b:c1:27:58:8e:c9:
2b:3a:cf:90:28:98:4a:58:6b:d5:8a:a2:62:cf:97:
c1:c8:bd:6b:da:35:27:76:00:66:86:b2:77:0e:cd:
71:b3:94:7b:e2:6d:7b:30:6f:f1:7f:2c:c2:70:4a:
6a:da:a9:6d:f9:62:6e:0e:da:cf:00:9a:34:10:ce:
e6:60:3b:57:f1:c8:ce:e7:40:c0:9c:40:09:1f:37:
ab:46:fa:4d:3d:1d:cc:8d:be:ac:8a:9e:59:7e:6d:
34:35:e2:c8:6e:e3:9f:41:8e:2e:84:21:e5:8f:9f:
d1:79:ab:da:63:bb:93:0b:92:86:34:af:5a:16:98:
9f:ba:1e:ce:25:e5:36:33:62:f2:7f:b0:c5:fc:5b:
70:9b:e0:d8:88:c0:d1:0c:db:1e:3b:07:5e:e3:bc:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:E3:94:3F:A4:71:D6:65:70:53:BA:5A:9E:C7:0A:53:B2:E5:2A
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3b:27:7d:fb:d9:31:0b:a8:26:1b:18:33:b2:24:e3:e0:4c:
59:68:ab:2a:49:11:aa:2f:d5:01:93:47:cc:0c:90:d3:98:3d:
87:a6:f9:64:46:80:c0:55:bd:a4:46:f3:0a:90:60:90:fa:9f:
8e:21:ab:74:44:0d:78:68:ac:c9:83:9b:91:07:69:78:2e:2e:
30:e6:85:07:de:8b:eb:51:f1:99:00:f2:48:09:98:66:34:13:
37:ef:32:d0:b0:67:de:c9:ac:d3:12:6a:bc:3f:60:8f:5b:06:
ff:40:fd:0e:a0:3d:87:3a:ca:64:76:0a:95:70:ff:20:b6:77:
d1:1f:86:5c:13:fd:ec:50:30:a1:2d:2b:b1:b5:06:02:6f:b2:
f9:8e:13:5f:6e:da:7c:a3:a3:77:ba:c8:d3:34:2a:d4:cf:e0:
59:82:b6:56:9a:48:c0:be:01:e7:6f:f1:86:cc:55:aa:73:7a:
69:24:db:c9:d0:64:1e:9b:e3:06:a6:80:c5:9d:8b:d8:58:81:
1b:fa:ca:de:9f:e6:54:b1:fe:6c:8b:34:b3:41:cb:39:e7:87:
37:82:e4:91:43:21:27:3e:ae:cb:67:de:d9:3d:e5:6c:96:6a:
06:7d:12:c2:9f:8b:89:1a:bc:c4:8c:c1:c7:d3:4d:3a:b6:4b:
fc:5e:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:22 2025 by rpki-client