Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: jok4pKJ0lfp8TRpLe4YLznI8Fc9m6jcRHQYBq3ORglA=
Subject key identifier: 65:C2:77:4B:9C:EF:A6:B7:2C:FF:6C:83:17:01:74:DA:A5:72:8C:14
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 39AE8FE836708D5E4F25175F48F46360DE54E107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 0390
Signing time: Thu 08 May 2025 12:58:53 +0000
Manifest this update: Thu 08 May 2025 12:53:53 +0000
Manifest next update: Fri 09 May 2025 16:54:53 +0000
Files and hashes: 1: AS205603.asa (hash: cBPBrIrKQApvXReq5l0HPs0LV31Ya31Pj6v8h6b+N+0=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: 9MpbFauLSQGZXwTCYF8pJHKxYKBLEgrmOuSVRicMA4Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ae:8f:e8:36:70:8d:5e:4f:25:17:5f:48:f4:63:60:de:54:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: May 8 12:53:53 2025 GMT
Not After : May 9 16:54:53 2025 GMT
Subject: CN=65C2774B9CEFA6B72CFF6C83170174DAA5728C14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:ba:fc:b1:cb:d3:96:6a:0e:92:6a:3d:6d:
ae:af:81:9e:26:f2:a6:98:a8:79:09:1f:c7:30:90:
4a:2e:39:69:af:a9:cc:a2:0e:34:70:ca:a8:06:48:
84:a7:ff:ee:b6:60:f5:76:0f:16:66:31:db:9e:7d:
a4:2e:a5:fd:cb:31:16:45:12:c0:e8:52:2e:39:66:
0a:26:f4:59:a7:68:bb:8b:31:74:52:36:9a:b0:3f:
b5:c8:ea:76:b8:83:af:05:64:a2:6c:41:52:a5:ec:
63:a7:e6:60:4f:80:a9:02:72:64:4d:a3:96:0e:db:
aa:c8:43:61:0c:32:89:d8:8c:05:13:a4:7b:27:20:
db:26:dd:c6:ce:4b:cd:3e:09:f0:d3:e3:74:62:aa:
13:76:69:33:e4:8c:b3:bb:63:ae:57:e2:70:c4:db:
51:10:b4:d1:e4:64:f0:40:99:fd:86:49:4c:4a:3b:
06:c4:ca:37:77:ab:b9:4c:67:eb:5d:87:cf:65:90:
91:5b:d3:e8:de:8c:7d:3b:2d:64:e7:a7:c3:96:5f:
a4:1c:e8:7a:b5:9c:00:b2:3a:c1:85:e8:37:9e:bf:
54:95:5c:14:82:63:11:9d:b3:60:79:67:0e:98:49:
12:f0:51:69:e4:23:e4:74:13:ea:10:7c:99:99:b1:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:77:4B:9C:EF:A6:B7:2C:FF:6C:83:17:01:74:DA:A5:72:8C:14
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:1f:27:c4:3a:9f:d8:f9:2f:7c:d5:20:77:7c:dc:3a:43:
51:af:28:47:bd:7f:16:a4:16:b9:f9:fe:e6:e4:b4:e2:bc:6a:
b9:72:08:db:a9:c5:79:82:44:cd:4e:29:11:90:8b:9d:9a:fe:
b4:1b:4f:f6:32:7a:76:8f:52:03:f0:9b:21:e3:02:4e:89:ce:
3e:48:c5:51:4b:4c:10:3a:c8:92:54:1a:fe:e5:cb:3b:86:03:
f1:d1:df:fb:5c:f9:60:fa:ca:48:47:60:ff:db:c3:cf:90:38:
74:da:c9:27:2e:71:a9:50:cb:29:21:de:c9:b4:7a:06:52:47:
7f:b1:b8:65:15:bb:c8:d0:69:d2:6f:ae:aa:52:b2:c1:06:05:
e8:6c:47:ba:b7:e4:86:8f:bd:c7:cf:4c:30:07:e4:52:07:7d:
db:9f:76:2f:1a:a8:32:41:30:31:33:46:8d:63:b8:b2:49:61:
6d:87:32:e0:e7:a3:aa:6d:12:8b:b3:6a:c2:be:a4:82:06:37:
1d:f9:16:69:68:b7:21:cd:19:d0:fa:a7:6a:0e:c5:1f:6c:27:
8c:6a:c8:3f:91:8e:2f:6b:b5:1f:97:86:21:29:40:5d:22:e1:
e7:c7:a1:7d:7d:1f:da:b9:5f:10:dc:9f:42:19:ab:71:47:73:
32:2b:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:13:13 2025 by rpki-client