Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: +ONW5NsddsIDH0g3vdoG6S5GOenNWBibfF8AfmeDaqU=
Subject key identifier: 8D:BF:FE:CD:4F:1D:B4:E8:D6:62:EA:2D:4D:B2:79:5E:9F:E5:CE:D3
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 0198D7E1718A586BDFA54BE15E7746C1CE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 016C
Signing time: Sat 23 Aug 2025 17:02:12 +0000
Manifest this update: Sat 23 Aug 2025 17:02:12 +0000
Manifest next update: Sun 24 Aug 2025 17:02:12 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: 8Eq19PsoZgYsE4V8TeEs5R1shOJPglneZCwmv9CCKOQ=)
2: 7Pi7IgYh5vJV-DxhZs-iQBFdIZE.roa (hash: mMqEKg8gbbKcixQMFJ/ANrO4EPfcPD9yGb46gyRhR40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:71:8a:58:6b:df:a5:4b:e1:5e:77:46:c1:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Aug 23 17:02:12 2025 GMT
Not After : Aug 24 17:02:12 2025 GMT
Subject: CN=8dbffecd4f1db4e8d662ea2d4db2795e9fe5ced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:d0:64:29:4a:c7:8c:23:51:e6:d0:3a:53:
cb:ca:30:66:d4:54:a9:9c:69:93:27:6b:18:b6:d0:
36:ea:b4:d8:9c:2f:87:b7:9e:e2:78:0b:a1:e1:da:
5c:d9:4d:1a:47:0f:6b:d9:fe:c6:49:f3:4f:fc:76:
5d:19:e4:4f:b5:06:1b:f1:3b:dc:3d:19:85:10:0d:
10:3a:70:fc:45:ef:53:96:fd:68:c1:9a:50:6e:fc:
05:bb:2c:de:3a:12:89:48:b9:77:45:d1:d8:fd:b7:
3f:d6:b8:fa:18:7c:2f:5b:cf:0e:1b:bd:41:1a:1b:
0c:0d:c1:dc:98:44:a6:b6:ee:2f:e0:83:ea:a8:f1:
e2:be:bc:f7:2a:dd:5d:12:d8:00:98:41:d1:46:dc:
55:4d:01:60:d9:f7:7b:9c:1f:8c:fe:2b:a9:5d:3f:
31:a4:64:21:c9:2b:e4:f2:07:da:5a:f6:31:9b:3d:
e4:0e:c8:4c:d2:11:36:35:1a:02:da:eb:1e:08:dc:
b4:fe:62:f5:bf:a1:c9:a7:19:8e:25:34:dd:9b:59:
69:c0:f9:4c:17:ce:0a:51:54:3e:d6:a7:ab:1a:6b:
5e:be:b8:19:3b:6b:38:8f:b3:fe:07:d7:e0:50:27:
fe:28:59:f6:3e:4f:b4:fa:ca:78:8b:08:ad:e5:67:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BF:FE:CD:4F:1D:B4:E8:D6:62:EA:2D:4D:B2:79:5E:9F:E5:CE:D3
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b2:01:16:4f:46:53:bd:f3:bf:c4:16:e5:a2:ef:18:5d:ae:
a8:4b:46:05:59:6d:64:9c:7c:8e:1e:b6:c3:38:1f:ed:a7:0a:
fe:66:a4:72:c0:e1:39:18:a3:7d:9d:38:88:b8:1a:dd:15:e5:
33:80:cb:d3:fa:73:3f:21:85:6b:a5:b8:88:e8:4b:45:1a:04:
b4:6f:f8:74:36:5f:7c:0c:c0:de:1e:0a:1d:3f:2e:69:c1:95:
0c:99:ba:29:98:3e:d4:7f:f7:a5:58:8c:c8:3e:e4:ce:9f:ac:
25:d0:f8:32:55:f7:08:c6:27:27:d6:58:b5:0a:77:a3:47:d0:
a8:98:15:0c:75:74:ad:0b:4d:6f:d7:4b:d2:9e:6e:b8:ef:13:
5c:7a:fb:77:e4:3e:88:c7:f6:ac:ce:ad:fd:0f:c4:bb:db:38:
30:7c:ae:cc:e6:68:7a:e6:30:f2:a2:6c:e9:2a:f1:63:1b:2f:
c2:c0:e6:ee:5f:a2:ef:07:b6:c3:15:9f:d6:fc:56:30:3b:03:
6a:b7:fe:83:9b:5f:ab:9b:32:84:99:36:36:94:ad:74:15:a8:
14:58:99:26:26:5a:92:b6:66:55:8a:67:2c:c2:a2:e0:96:9f:
b0:1c:43:27:9d:fc:c9:e8:fb:a5:9b:9b:3c:a8:a1:cb:27:29:
94:0a:81:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4XGKWGvfpUvhXndGwc6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0
NTExMDMwHhcNMjUwODIzMTcwMjEyWhcNMjUwODI0MTcwMjEyWjAzMTEwLwYDVQQD
Eyg4ZGJmZmVjZDRmMWRiNGU4ZDY2MmVhMmQ0ZGIyNzk1ZTlmZTVjZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PDQZClKx4wjUebQOlPLyjBm1FSp
nGmTJ2sYttA26rTYnC+Ht57ieAuh4dpc2U0aRw9r2f7GSfNP/HZdGeRPtQYb8Tvc
PRmFEA0QOnD8Re9Tlv1owZpQbvwFuyzeOhKJSLl3RdHY/bc/1rj6GHwvW88OG71B
GhsMDcHcmESmtu4v4IPqqPHivrz3Kt1dEtgAmEHRRtxVTQFg2fd7nB+M/iupXT8x
pGQhySvk8gfaWvYxmz3kDshM0hE2NRoC2useCNy0/mL1v6HJpxmOJTTdm1lpwPlM
F84KUVQ+1qerGmtevrgZO2s4j7P+B9fgUCf+KFn2Pk+0+sp4iwit5Wd6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2//s1PHbTo1mLqLU2yeV6f5c7TMB8GA1UdIwQY
MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt
ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3
LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrIBFk9G
U73zv8QW5aLvGF2uqEtGBVltZJx8jh62wzgf7acK/makcsDhORijfZ04iLga3RXl
M4DL0/pzPyGFa6W4iOhLRRoEtG/4dDZffAzA3h4KHT8uacGVDJm6KZg+1H/3pViM
yD7kzp+sJdD4MlX3CMYnJ9ZYtQp3o0fQqJgVDHV0rQtNb9dL0p5uuO8TXHr7d+Q+
iMf2rM6t/Q/Eu9s4MHyuzOZoeuYw8qJs6SrxYxsvwsDm7l+i7we2wxWf1vxWMDsD
arf+g5tfq5syhJk2NpStdBWoFFiZJiZakrZmVYpnLMKi4JafsBxDJ538yej7pZub
PKihyycplAqB8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:44 2025 by rpki-client