Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: S3IxjbFRicU83tC2O8AkF6qPD+uqvTb4Cakcz15YAwQ=
Subject key identifier: 5C:49:BD:2C:62:4F:02:AC:78:30:69:F9:AA:32:E5:55:36:DA:05:EA
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 017CDF48D7B6759913F15E8C16A67564B15A8BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 03D4
Signing time: Sat 28 Jun 2025 05:04:44 +0000
Manifest this update: Sat 28 Jun 2025 04:59:44 +0000
Manifest next update: Sun 29 Jun 2025 07:58:44 +0000
Files and hashes: 1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: 6MfwcbO7IrxKBBXQ/WMhCt4HG6/A2x4Y9+kfNtmK+wI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 07:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7c:df:48:d7:b6:75:99:13:f1:5e:8c:16:a6:75:64:b1:5a:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Jun 28 04:59:44 2025 GMT
Not After : Jun 29 07:58:44 2025 GMT
Subject: CN=5C49BD2C624F02AC783069F9AA32E55536DA05EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:4a:12:ac:39:52:cf:7b:cc:c3:e7:35:59:
22:c4:d5:3e:71:0d:16:a3:a1:f5:8c:02:d0:17:bb:
53:00:a6:f0:39:84:49:77:65:f1:86:11:c3:04:85:
1e:a9:40:29:53:f5:6b:0b:39:9e:cf:77:c1:d9:7c:
aa:82:40:95:85:01:1a:75:ef:d3:20:72:87:50:4d:
c8:6d:8c:44:7d:04:58:65:b2:50:eb:c6:0b:17:19:
6c:77:03:cb:87:d6:4d:30:f3:5a:68:b1:fc:d9:81:
fa:63:53:77:94:e3:2a:53:ca:78:f5:b6:f0:56:16:
65:11:b5:a7:23:37:8d:18:d9:54:0e:f3:6d:e0:7a:
b5:58:02:5a:63:96:28:57:9b:58:b4:a0:b9:1b:b5:
f0:3a:a1:09:09:c0:38:56:01:a3:20:ab:9d:c7:83:
e3:f2:1a:5d:98:1a:82:b2:40:6c:dc:dd:67:7d:58:
7a:06:40:2a:9a:a4:41:12:1c:7d:e9:28:c2:f1:ba:
14:10:68:f5:8d:15:9b:57:fb:c1:c4:d5:de:50:c3:
6c:0f:19:20:7e:0f:c9:0e:80:36:28:00:8b:0e:67:
16:90:76:a4:75:c3:2e:52:cd:87:9f:f8:71:fe:13:
e7:ce:37:92:2f:d9:6d:21:d8:93:89:94:c6:7d:d2:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:BD:2C:62:4F:02:AC:78:30:69:F9:AA:32:E5:55:36:DA:05:EA
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:f4:ab:c8:39:e5:9b:e9:ca:34:74:99:9c:9e:f4:82:f0:
72:8a:ab:1f:29:5d:fe:d4:23:7e:5c:e0:37:b1:eb:69:8a:80:
5c:12:ad:bc:1b:69:89:93:b8:62:36:4d:dd:13:cd:90:f9:7c:
12:d1:75:04:db:1a:8a:7c:df:37:51:07:fc:89:fd:41:d9:18:
49:b2:16:f4:e9:6f:f2:81:1a:fd:4f:ac:3c:be:d5:ee:62:fa:
a6:55:e5:2c:dd:4a:88:f9:fc:60:f7:78:67:49:72:6b:64:b0:
5f:16:b7:77:5e:fe:82:dd:54:46:fc:f7:87:7f:ac:03:32:06:
c4:e7:41:fd:51:9c:82:6b:93:75:05:49:22:5a:6d:b1:c5:40:
9d:09:ca:b0:61:ab:4c:ce:f3:0f:88:2b:21:52:4b:58:b7:bd:
dc:0f:cb:f3:de:da:82:fa:ec:17:c2:57:a8:51:b5:6a:fe:b3:
72:61:9a:77:19:ae:8c:12:e3:0d:dc:d2:1c:01:5b:1f:f8:fd:
02:b4:4a:0d:9d:47:3e:c0:13:df:b9:b0:5e:cf:0b:8a:dd:2b:
75:8e:2b:e3:bc:66:49:21:a4:8e:15:75:bd:43:20:a5:42:84:
d9:3f:57:8c:d6:ea:07:53:bc:a5:c1:95:d8:5e:87:24:71:37:
10:e5:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:05 2025 by rpki-client