Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: VnHWKM7RHQdUGB1PJSGghPY6TET9XcXRFm1RPIPX9Bk=
Subject key identifier: 79:14:99:31:D5:AF:88:4D:EF:A4:C3:99:6F:F4:8F:69:82:D6:AD:1E
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 69C469B93EDFE10AAE228353CC7189B5AE42D6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 053B
Signing time: Wed 25 Mar 2026 09:48:05 +0000
Manifest this update: Wed 25 Mar 2026 09:43:05 +0000
Manifest next update: Thu 26 Mar 2026 09:51:05 +0000
Files and hashes: 1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: xmhPfmtpPVVCHuLkyT8h2yfCO2hz5y2SSRqSv8zKDKo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 09:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c4:69:b9:3e:df:e1:0a:ae:22:83:53:cc:71:89:b5:ae:42:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Mar 25 09:43:05 2026 GMT
Not After : Mar 26 09:51:05 2026 GMT
Subject: CN=79149931D5AF884DEFA4C3996FF48F6982D6AD1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:7f:0c:e7:c1:a4:70:9e:10:bd:47:3f:13:
cd:79:bb:5d:03:75:0a:c9:f7:f8:0c:f3:59:af:f2:
cb:04:1c:62:6c:60:c9:4c:2f:09:eb:b6:de:6f:70:
78:45:77:7f:f7:7f:35:17:07:a8:e7:2b:8c:54:48:
e2:01:6a:0b:2f:62:29:8c:15:f5:1c:74:83:08:19:
55:28:c7:4e:32:c0:a8:af:81:92:59:cd:84:5b:fe:
cf:9e:60:c9:5c:e3:ff:28:41:fa:9f:d2:7e:6d:08:
a1:ef:14:01:4d:5e:21:bf:4e:b3:33:db:a6:cb:d0:
06:dc:35:c7:87:ae:06:a7:41:a3:3c:50:00:14:cd:
98:d5:05:3d:e1:f8:9a:05:3d:cb:b1:41:60:13:08:
dc:f4:d8:96:2f:85:bf:b9:b4:15:f1:e3:bd:5f:61:
d2:f1:19:c9:14:da:d6:63:ec:42:27:9e:f8:e1:0a:
cf:ee:c1:8d:0e:7a:2b:13:f3:82:ab:ac:ce:ea:f1:
9c:9a:3f:21:de:ed:f8:5c:68:87:e1:df:ee:ee:18:
00:55:a3:1d:56:79:17:c4:2b:c3:32:24:68:86:2e:
b2:2b:70:65:17:4a:d5:79:2d:b4:4b:56:69:de:7f:
c5:fd:41:46:ac:7c:db:6e:16:f3:60:1c:04:c6:a0:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:14:99:31:D5:AF:88:4D:EF:A4:C3:99:6F:F4:8F:69:82:D6:AD:1E
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:f4:98:d4:9b:15:75:17:f5:d8:ef:37:4d:ad:a0:a5:b8:
92:c4:83:19:04:4e:73:75:c3:17:71:96:e4:c8:99:68:9a:a3:
c4:80:36:80:93:eb:b7:ae:f5:99:d7:23:f6:5e:12:a0:90:08:
67:8d:b4:62:bb:9d:ab:de:6f:49:ee:04:6c:f8:9e:66:41:b2:
bd:2d:fa:03:8c:73:8a:78:ed:fa:bc:3a:38:d3:94:6c:59:c8:
f5:87:82:41:1e:22:75:bf:34:ff:cd:27:1e:f8:68:0d:ea:7f:
3a:0b:2f:15:0d:e1:0c:3e:72:e4:07:8c:91:bb:8a:bc:55:57:
0e:07:34:46:03:9c:ed:28:35:3e:cd:e8:a7:81:d2:38:d9:ac:
6c:25:a2:1c:16:2c:68:7a:d8:75:f0:4d:6c:64:19:1c:f4:6c:
28:ef:ee:5f:59:35:e0:ef:94:ab:4e:db:15:dd:de:49:2e:c5:
45:0b:2f:2c:43:63:51:f5:c4:b1:31:b5:7b:5e:37:87:3c:05:
8d:7d:f5:70:24:92:ee:7f:b2:cc:04:95:8b:3f:d6:4e:7a:18:
f3:27:4a:5e:f1:a3:fa:77:fc:0f:32:0e:30:fd:ef:7a:45:26:
00:3c:fb:f6:8a:47:81:f8:d7:d2:6c:94:68:87:19:38:f8:e4:
cd:1e:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:10 2026 by rpki-client