Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: nKqeKYjgr/PH5/BjYoRzyOr86VLFBZWow2r/Ghyhevs=
Subject key identifier: C4:CD:9B:1E:19:36:09:40:74:A6:E5:54:B4:69:CB:A7:A3:91:AC:8F
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 6E1C6E80E60F964BE5CCD23C624C33ED4A900B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 053F
Signing time: Sat 28 Mar 2026 04:58:05 +0000
Manifest this update: Sat 28 Mar 2026 04:53:05 +0000
Manifest next update: Sun 29 Mar 2026 08:15:05 +0000
Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: CticBcYezYDwjt+W+/JUQ3E8a1biF7Xz93ABToMBlqM=)
2: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1c:6e:80:e6:0f:96:4b:e5:cc:d2:3c:62:4c:33:ed:4a:90:0b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Mar 28 04:53:05 2026 GMT
Not After : Mar 29 08:15:05 2026 GMT
Subject: CN=C4CD9B1E1936094074A6E554B469CBA7A391AC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:7a:1c:e4:0d:28:40:fd:b4:10:86:d3:80:
23:c8:b4:22:9f:88:f9:17:b6:84:48:68:a7:7d:cf:
6f:b1:e6:c9:5f:22:8e:3a:66:62:37:7b:53:29:86:
fd:a3:1b:dd:6e:ef:9a:16:b1:e1:b8:61:4a:25:30:
ed:56:74:4e:e5:5a:84:aa:ed:b3:fe:56:5b:76:b4:
92:dc:07:71:99:ec:45:a8:d9:68:59:ee:3d:26:6c:
cc:38:97:77:ce:6e:cc:92:01:b9:f0:49:02:d3:ec:
9b:56:b1:5f:ca:bd:d8:90:e8:fc:c7:3a:a6:4c:f4:
ed:ee:26:a0:eb:e9:44:8c:38:cf:27:5e:de:dd:22:
45:09:5f:9b:12:3f:09:55:4c:48:17:50:49:e7:3b:
62:9e:29:34:70:50:c8:f9:85:af:ac:7a:65:9c:94:
a8:8c:ee:21:85:6b:0e:24:9a:1b:b1:d9:0a:e3:d8:
5b:b2:93:1e:0d:b6:08:1e:0c:19:34:79:fa:be:95:
d5:8c:a9:bb:63:32:5c:83:c7:9b:21:7d:ee:3a:63:
17:61:f7:01:c4:d9:f8:92:2b:95:bc:f0:63:82:d5:
d5:c5:80:e6:ea:b7:4a:fa:51:51:36:dd:00:04:89:
f8:6e:87:7d:11:30:34:53:fb:88:a4:6d:5d:68:5c:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CD:9B:1E:19:36:09:40:74:A6:E5:54:B4:69:CB:A7:A3:91:AC:8F
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7a:e7:99:3c:a3:33:9b:7f:20:d4:70:85:b5:30:b1:78:9b:
f8:8f:04:99:25:2a:5d:ae:33:92:c5:2a:b7:a5:f2:98:86:e0:
54:25:1e:bf:4f:63:b5:39:74:f5:e9:c1:30:77:18:30:43:ec:
9f:73:36:03:81:e6:d3:d7:80:73:2f:ba:4b:ae:9b:d4:ba:93:
65:71:58:38:ed:f4:4e:29:03:4e:ff:4e:2d:bd:78:d2:5e:fb:
93:4b:1a:47:67:4c:45:19:07:a9:f6:e5:2d:28:5c:6c:36:a0:
d2:74:ae:69:f6:4e:85:59:c9:59:3e:a9:9d:2f:1a:96:ee:32:
36:2d:a1:43:e0:c2:8f:44:08:7b:f3:15:39:56:3b:4b:90:99:
30:ec:49:bf:c5:ea:b2:ee:d1:56:cc:c6:1c:77:9b:07:23:e7:
c6:da:e2:b7:fe:3b:76:cb:de:cf:01:87:94:01:62:1a:f5:64:
77:73:91:a1:bf:73:7f:6b:4e:2a:43:df:e3:f0:1e:f6:6b:bf:
ed:11:43:89:16:3a:3c:a9:2a:bb:01:7b:f5:4b:4f:45:61:b7:
a3:6c:0f:70:f9:22:2c:89:18:11:6d:e0:0a:ef:4b:4b:c0:bb:
a8:64:91:51:6e:ea:88:62:24:80:4c:26:6a:30:6d:08:d3:69:
81:9e:51:39
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbhxugOYPlkvlzNI8Ykwz7UqQC50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVjNzNkZmM4NjhjM2Y2MmNiN2ZmOTcxYWY0Nzc2NzFj
YWYzODBhYTAeFw0yNjAzMjgwNDUzMDVaFw0yNjAzMjkwODE1MDVaMDMxMTAvBgNV
BAMTKEM0Q0Q5QjFFMTkzNjA5NDA3NEE2RTU1NEI0NjlDQkE3QTM5MUFDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItXoc5A0oQP20EIbTgCPItCKf
iPkXtoRIaKd9z2+x5slfIo46ZmI3e1Mphv2jG91u75oWseG4YUolMO1WdE7lWoSq
7bP+Vlt2tJLcB3GZ7EWo2WhZ7j0mbMw4l3fObsySAbnwSQLT7JtWsV/KvdiQ6PzH
OqZM9O3uJqDr6USMOM8nXt7dIkUJX5sSPwlVTEgXUEnnO2KeKTRwUMj5ha+semWc
lKiM7iGFaw4kmhux2Qrj2Fuykx4NtggeDBk0efq+ldWMqbtjMlyDx5shfe46Yxdh
9wHE2fiSK5W88GOC1dXFgObqt0r6UVE23QAEifhuh30RMDRT+4ikbV1oXC6ZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUxM2bHhk2CUB0puVUtGnLp6ORrI8wHwYDVR0j
BBgwFoAUJcc9/IaMP2LLf/lxr0d2ccrzgKowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGVjMzYyMTAtZjZjZi00YzRmLWExNTUtNzhhOGViNWJm
MGJmLzAvMjVDNzNERkM4NjhDM0Y2MkNCN0ZGOTcxQUY0Nzc2NzFDQUYzODBBQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pjYzlfSWFNUDJMTGZfbHhyMGQyY2Ny
emdLby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZWMzNjIxMC1m
NmNmLTRjNGYtYTE1NS03OGE4ZWI1YmYwYmYvMC8yNUM3M0RGQzg2OEMzRjYyQ0I3
RkY5NzFBRjQ3NzY3MUNBRjM4MEFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3rnmTyjM5t/INRwhbUw
sXib+I8EmSUqXa4zksUqt6XymIbgVCUev09jtTl09enBMHcYMEPsn3M2A4Hm09eA
cy+6S66b1LqTZXFYOO30TikDTv9OLb140l77k0saR2dMRRkHqfblLShcbDag0nSu
afZOhVnJWT6pnS8alu4yNi2hQ+DCj0QIe/MVOVY7S5CZMOxJv8Xqsu7RVszGHHeb
ByPnxtrit/47dsvezwGHlAFiGvVkd3ORob9zf2tOKkPf4/Ae9mu/7RFDiRY6PKkq
uwF79UtPRWG3o2wPcPkiLIkYEW3gCu9LS8C7qGSRUW7qiGIkgEwmajBtCNNpgZ5R
OQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:08 2026 by rpki-client