Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: IXdDlVBKSIkomgDzgcffu9+jfjd+urC224ObTOIzb70=
Subject key identifier: 96:64:7C:9A:E1:06:52:EA:A1:0E:94:A1:58:5B:96:A1:32:23:E1:0C
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 35809F7B9E412F4072CECB4267C7CDAABD5602CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 046A
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:56:20 +0000
Manifest next update: Mon 20 Oct 2025 20:31:20 +0000
Files and hashes: 1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: Y0OjrO4+8dXN/0mrGEEhENirO/6NvbpgMfQjNjsEt90=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:80:9f:7b:9e:41:2f:40:72:ce:cb:42:67:c7:cd:aa:bd:56:02:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Oct 19 16:56:20 2025 GMT
Not After : Oct 20 20:31:20 2025 GMT
Subject: CN=96647C9AE10652EAA10E94A1585B96A13223E10C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:58:a0:73:f6:19:95:a7:dc:df:dc:c2:df:
a0:d7:ac:18:30:32:9c:1b:b1:e4:23:27:08:14:23:
98:e6:54:67:49:45:f9:6b:47:b5:bc:83:e2:c2:f6:
8e:41:b2:94:8c:fc:5a:4a:32:1f:c6:92:91:f9:66:
3e:5e:05:c9:3c:3b:29:4f:28:4b:a7:c7:f3:73:e6:
62:7e:d8:76:6c:97:39:9d:20:72:7f:e0:7b:a6:5f:
a8:57:b7:dd:e1:da:82:b8:e2:0d:4f:2d:a6:7a:67:
96:5e:1d:cc:c8:1c:bc:24:a8:1e:4d:a3:1a:83:94:
51:8a:1e:0f:4c:ac:63:83:63:f1:a6:34:c4:bf:47:
7d:e6:3d:59:b3:ee:f0:a1:20:4a:72:03:01:0b:75:
44:d8:60:85:3f:ba:a8:f1:be:58:e5:04:cf:31:52:
af:9c:46:e3:cd:44:42:9d:c7:0f:09:9e:4a:4a:1d:
45:bf:7d:fd:8d:ec:de:d9:a4:18:28:a1:3e:94:f2:
f4:d4:42:b2:d6:d3:34:71:b8:79:82:2b:6c:8f:00:
b3:5d:66:a9:ff:26:80:44:4b:2b:a1:ef:67:02:a6:
dc:68:e3:e3:10:a1:3b:c9:82:a6:c4:50:ac:a6:66:
f9:b7:3d:e8:25:24:0e:9c:cc:6e:de:a1:14:7c:89:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:7C:9A:E1:06:52:EA:A1:0E:94:A1:58:5B:96:A1:32:23:E1:0C
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:ed:00:3f:14:8b:ec:51:cd:32:98:e4:55:ce:dc:04:d1:
1b:2d:77:e7:43:89:84:6b:52:cf:65:93:09:e6:2f:7f:f1:39:
b4:8c:bd:07:00:6c:68:3f:9c:86:ac:ed:d0:76:f0:35:75:ef:
98:c6:17:c7:76:4d:50:80:37:04:da:c9:bd:aa:c8:33:0e:0d:
27:f7:df:25:3e:9b:2c:26:51:2f:18:bf:95:5f:90:f9:92:b7:
9b:4e:3f:d9:9a:1b:b3:7b:66:c9:20:14:68:f3:15:17:fc:1f:
05:73:a3:00:9a:91:5b:6c:30:26:f8:78:6b:d7:82:95:fd:26:
53:0b:ca:02:c8:27:dc:40:a0:9c:ee:2c:42:a9:6d:11:6a:9c:
86:98:ba:bd:b7:40:23:34:69:66:b4:32:86:a1:d3:74:15:61:
8c:e1:78:77:6a:32:d3:2d:52:cf:3d:cb:aa:f7:bd:06:1a:cc:
a5:5d:d9:fe:4e:05:2e:29:36:5d:40:fe:0d:48:f1:34:97:9c:
5c:36:f8:db:a1:d4:61:2a:0a:df:7e:ea:b8:77:d9:e4:69:0b:
1c:f6:21:c7:07:80:01:4a:82:23:36:a1:c0:a6:6f:3f:48:07:
3e:ec:7b:53:18:92:72:8d:9a:c0:42:35:00:9c:cb:f4:07:06:
36:6c:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:27:54 2025 by rpki-client