Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: 3GQFYD/4tspG8Vy8/oz9G7SmTTH8//LQHyE6mKET7HE=
Subject key identifier: 34:BB:1C:41:CB:0B:A3:97:E4:23:CC:6E:71:2C:A6:96:80:B1:BE:84
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 3DA428C4EA3EB524C65D74CFC3064865626AF6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: BA
Signing time: Sat 23 Aug 2025 03:11:16 +0000
Manifest this update: Sat 23 Aug 2025 03:06:16 +0000
Manifest next update: Sun 24 Aug 2025 06:41:16 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: 9OpVsHDTHlsllf/iyg6BndrDoQj1/jG79cGOCPUUY9o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a4:28:c4:ea:3e:b5:24:c6:5d:74:cf:c3:06:48:65:62:6a:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Aug 23 03:06:16 2025 GMT
Not After : Aug 24 06:41:16 2025 GMT
Subject: CN=34BB1C41CB0BA397E423CC6E712CA69680B1BE84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:db:5e:fc:ee:d3:28:b5:d5:7a:50:ad:d0:
52:82:75:e8:67:1d:eb:b6:9d:ba:c0:83:61:7b:6e:
62:48:2a:4c:b7:ac:55:0d:e1:73:1f:7a:f6:d3:8b:
7c:a3:30:e0:e3:b5:01:1a:c1:e0:6f:fb:72:97:c0:
a8:02:24:ab:48:f3:6b:45:75:fa:8f:24:95:f8:9e:
92:4b:35:24:70:cc:76:ec:f9:3e:71:a0:9f:47:e7:
80:88:87:86:5c:54:4d:ee:1a:8e:a8:66:a2:8e:d7:
25:ff:2a:f1:3f:23:ff:9d:20:7c:e3:c2:23:1b:2d:
30:d1:69:10:38:fe:b0:d7:5f:09:3c:bc:18:3a:36:
9c:9a:8e:d6:64:dd:cb:5b:56:22:ff:1e:46:44:d4:
56:c9:05:fd:9b:e2:01:77:9c:be:15:8d:09:33:24:
8c:56:32:76:6f:bb:07:75:ec:87:48:11:9b:63:0d:
59:87:cc:5f:ee:4c:05:4a:64:5e:38:e9:31:0a:c6:
ad:86:c2:9f:20:68:e8:66:9a:37:70:5d:aa:84:3a:
a0:58:06:51:5c:d7:4f:6e:03:ed:4f:7d:41:5b:72:
53:3f:e8:54:a6:a0:ff:21:bb:dd:be:72:9d:18:43:
81:88:32:48:0b:b3:b1:ab:76:a2:9d:1e:14:9d:3c:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:1C:41:CB:0B:A3:97:E4:23:CC:6E:71:2C:A6:96:80:B1:BE:84
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:e0:8b:d4:cb:c4:2d:cc:69:bf:d2:ff:bf:e8:9d:02:e5:7c:
e7:62:02:ec:f8:02:da:13:30:81:d5:fe:0e:85:ec:ff:2b:c5:
6a:b7:9e:53:6e:6c:dd:57:d7:c2:64:51:f9:7f:0e:8e:08:6a:
27:4a:d4:73:2a:44:9d:bf:c6:dd:58:e8:4c:70:9c:d3:6c:69:
2f:60:4e:2a:07:8d:93:c6:6a:0e:ca:84:ea:f4:da:e1:39:db:
68:01:a9:4e:d1:87:f0:73:77:8c:df:96:0a:50:86:85:61:9e:
46:a3:f0:79:37:88:e7:0e:6d:1d:59:7a:46:5f:ed:e6:ee:ab:
47:4a:a2:d9:6d:59:e2:4b:67:2e:9a:83:3c:c5:c2:98:49:2f:
8e:59:78:f5:61:3b:97:9c:26:7e:ac:21:02:19:45:42:dc:75:
ef:d0:b4:7d:9f:17:41:25:c9:3f:31:8e:e1:c6:a4:dc:2f:71:
8f:d5:d6:75:79:45:ed:2d:0c:60:08:36:e8:74:f3:f2:02:56:
25:39:6e:95:0c:f2:69:ce:61:d9:69:af:ab:ec:19:45:4c:30:
f1:6f:4d:7f:06:fa:15:5d:55:86:6b:ee:b8:49:7a:1c:77:c3:
e5:d5:b2:55:d7:2c:00:99:4d:dd:52:84:69:17:ce:13:44:42:
af:19:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:52 2025 by rpki-client