
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: zYQ7Aru9IUMmNpXT2rsW1RR0XD+30prm5ZnnI9TtMdQ=
Subject key identifier: 9F:93:25:83:E9:6A:57:2D:38:12:18:F5:78:F0:EE:32:91:F9:E9:53
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 1B01ADE74D9C9C443169A458C3E08A4A87F16F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: 7C
Signing time: Sat 28 Jun 2025 17:49:07 +0000
Manifest this update: Sat 28 Jun 2025 17:44:07 +0000
Manifest next update: Sun 29 Jun 2025 18:10:07 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: CfUlcCvahQzopTcmyZoPKrYQDOWDxVBGDrTvOk86jxs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:01:ad:e7:4d:9c:9c:44:31:69:a4:58:c3:e0:8a:4a:87:f1:6f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Jun 28 17:44:07 2025 GMT
Not After : Jun 29 18:10:07 2025 GMT
Subject: CN=9F932583E96A572D381218F578F0EE3291F9E953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:ba:7f:ac:a7:f5:60:1f:f6:1b:38:47:05:
8a:0f:89:d1:ce:b0:7c:7e:f0:05:25:60:88:32:29:
cd:11:16:a3:ff:a1:72:94:4a:d1:a5:9e:b0:9e:d1:
29:da:da:fd:03:c5:2b:d2:4d:ad:ab:0a:47:f5:7a:
1d:85:9d:b2:c8:a1:c1:33:f0:64:0e:59:0e:d6:7e:
6c:d6:03:86:5e:42:3d:44:a9:b2:50:87:44:fe:ca:
99:6e:78:6a:46:c4:5f:69:f8:0e:07:54:4a:ba:7b:
0d:ce:76:c8:6b:40:8b:c4:ef:ab:8f:08:7b:0f:f5:
00:f5:4e:89:af:ea:d9:8d:6c:2b:e1:43:01:9f:1e:
5f:01:68:ea:ee:f5:79:8d:f5:af:e0:2a:38:57:ce:
7f:f8:da:48:c6:7e:2e:6f:e6:b1:dd:b8:64:b7:66:
1d:f9:f2:e7:94:d3:4c:94:21:ae:f9:70:0e:30:89:
2f:7a:4d:51:81:9d:39:f2:10:3a:3a:bc:55:39:70:
f2:35:3f:bb:f9:a2:0f:bd:d4:18:fe:71:9b:a8:a5:
d8:b0:aa:11:c8:2c:2f:6f:b8:f5:d2:fd:60:20:d0:
a4:b2:57:f5:b3:09:09:c7:c1:4a:36:c1:a3:72:e8:
e7:69:cd:56:c9:7f:27:1d:96:f6:17:63:93:2a:65:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:93:25:83:E9:6A:57:2D:38:12:18:F5:78:F0:EE:32:91:F9:E9:53
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:06:d3:96:dc:e5:9a:8c:0f:50:18:07:ea:91:c6:eb:49:
da:23:4c:d7:4b:bb:84:dd:a3:13:44:aa:45:13:d6:ee:54:fb:
4b:6b:59:b0:9c:2d:0e:4e:81:52:b9:bd:94:34:57:c4:e6:61:
7e:ae:df:cb:71:54:65:72:54:98:0b:8c:b9:bc:c6:86:ab:2c:
df:7e:ca:4e:d1:a8:cb:71:03:23:0f:00:7a:8f:d0:6b:ae:17:
9b:97:80:74:12:7a:65:28:da:5f:5c:a4:9f:32:7e:a9:d5:85:
92:2a:0b:f0:19:b3:bb:9e:97:7a:ee:02:f4:66:6a:b2:14:ed:
b3:fe:b4:66:b9:40:32:66:58:dd:4c:89:e6:c7:71:db:9f:45:
d4:ef:3d:4e:4a:ba:61:7f:23:36:26:7d:55:be:09:2d:e2:be:
98:cc:9a:96:53:5c:73:4d:a6:14:18:0d:40:bb:62:47:dd:b0:
5e:88:13:3c:42:40:a9:65:ec:35:fd:00:8e:3a:ce:1f:7d:92:
af:39:10:be:9d:43:15:39:68:3b:ad:1f:96:4a:17:3a:4e:7e:
b9:66:38:13:27:1a:7b:93:a8:b0:96:9d:64:71:e4:05:c1:44:
d4:fd:98:f7:20:ef:50:92:b2:9a:e3:6d:9e:86:65:7f:80:21:
2c:b2:4f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:35 2025 by rpki-client