Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: ZEoVw1MxDQafjYc/Uc1YqzVrnpnq3D9Y7jIMmsJ+/34=
Subject key identifier: D6:6E:8A:39:E1:BF:C2:DF:08:43:E3:C1:90:B4:BA:5A:D5:0A:B9:D7
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 284FA8B13637B4C0F29E19D671378725D2F86E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 041E
Signing time: Sat 23 Aug 2025 10:05:39 +0000
Manifest this update: Sat 23 Aug 2025 10:00:39 +0000
Manifest next update: Sun 24 Aug 2025 13:50:39 +0000
Files and hashes: 1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: tZafOKkkX3cOp6csFTZfgmaR3CkIk9oVmnYOoNN8Rus=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4f:a8:b1:36:37:b4:c0:f2:9e:19:d6:71:37:87:25:d2:f8:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Aug 23 10:00:39 2025 GMT
Not After : Aug 24 13:50:39 2025 GMT
Subject: CN=D66E8A39E1BFC2DF0843E3C190B4BA5AD50AB9D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:ba:56:5b:06:b2:75:83:57:0a:3c:f4:bc:
62:91:1d:e8:e1:2c:44:23:24:53:79:31:b2:21:db:
f9:52:c3:c1:5b:7e:64:cc:8b:e3:22:15:6d:78:5a:
ae:b1:94:1d:4d:52:58:74:23:31:70:e6:fb:f1:38:
e0:5a:17:70:69:e4:98:23:3d:09:13:a4:7d:7c:05:
27:e2:90:e5:de:b5:10:9e:be:99:48:1a:a9:7c:d2:
d3:5d:9c:30:dc:e8:f8:43:e0:5a:a5:01:0f:b9:74:
6f:0c:49:77:41:df:4e:e5:32:cb:53:5e:3a:71:ba:
4a:87:36:48:fa:c0:7e:92:b8:cf:90:80:90:9a:4f:
f4:bd:ab:29:f8:19:88:b6:a2:70:8f:bc:20:ef:45:
58:20:cf:1f:4d:56:b0:c0:70:22:7a:ea:e3:20:95:
37:e4:fb:3f:5f:53:4f:96:1d:b3:03:5b:20:63:1b:
e3:d1:e5:0f:a4:8a:63:f5:3e:2b:bc:18:09:2d:71:
be:2f:31:9b:83:02:c0:91:b5:4c:00:8e:9e:f9:f2:
c3:73:be:e3:c6:8e:f1:4a:32:71:8c:f3:b6:09:60:
ee:65:7b:fb:46:e6:4e:67:0f:b6:43:3e:84:3a:31:
6d:ed:93:4c:06:6d:9d:0b:bd:b3:66:6b:94:e6:da:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:8A:39:E1:BF:C2:DF:08:43:E3:C1:90:B4:BA:5A:D5:0A:B9:D7
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:74:0a:ea:ab:df:a7:25:1f:5f:a5:e4:34:30:a8:53:a8:0a:
21:12:e8:5a:ca:95:91:5a:e8:49:08:09:95:cf:e8:92:dd:fa:
05:85:19:69:c9:b2:29:ac:46:ad:ae:52:af:22:89:94:89:d7:
ac:51:8f:04:1e:61:a4:ef:bc:5d:db:a7:8b:47:83:f2:30:a5:
64:c6:31:68:5b:79:a7:d7:35:2b:17:20:66:a8:b6:be:2c:72:
a8:90:81:0f:8c:bf:c3:ef:33:59:c9:d6:f1:39:da:a2:1c:da:
e6:b6:e0:6f:88:3d:75:c8:84:84:e8:68:e0:36:bb:ae:ea:79:
a4:a7:4a:7c:a2:d9:ae:52:a5:16:b8:c8:7f:a5:3b:1f:ae:41:
ce:b0:76:45:76:8b:15:b7:eb:cf:63:5a:f5:fa:34:cb:b8:9c:
27:b3:97:41:35:a0:6e:d8:0b:9f:f8:25:f8:6d:22:ac:d5:e6:
a9:07:da:36:06:3e:86:1b:de:22:b3:79:8f:cf:12:61:e4:52:
e6:ac:ec:ad:f5:21:f5:c3:fe:93:0e:36:b9:66:f8:3c:c0:d5:
13:9b:26:b2:52:b2:c2:a3:56:df:0a:14:6f:5a:e4:74:88:24:
2d:66:18:a4:34:7d:7b:4b:41:ec:55:c8:c6:a0:12:1b:6f:f5:
7e:0f:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:30 2025 by rpki-client