Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: BNugF5CizKVxKbwK9mzAVTcBf34MYHaOAIN/8X8KPBU=
Subject key identifier: A9:39:81:99:4B:52:A8:AA:DE:BB:5D:CC:79:1F:88:56:83:B1:9B:7C
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 0198819E377BA49E581A4786E72D13573134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 0F5D
Signing time: Wed 06 Aug 2025 23:01:26 +0000
Manifest this update: Wed 06 Aug 2025 23:01:26 +0000
Manifest next update: Thu 07 Aug 2025 23:01:26 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: deSBYFBda5B70CLX2z62E82RM54PjYZcb9Ug0Fmx6i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:37:7b:a4:9e:58:1a:47:86:e7:2d:13:57:31:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Aug 6 23:01:26 2025 GMT
Not After : Aug 7 23:01:26 2025 GMT
Subject: CN=a93981994b52a8aadebb5dcc791f885683b19b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:73:4e:f0:28:d3:07:dd:01:37:a0:52:d7:
67:23:aa:25:f1:31:bc:5b:68:f3:9d:88:cc:c0:c5:
c4:81:1c:be:c5:23:94:41:3b:e7:2d:7d:40:f0:b6:
26:14:1f:4e:62:37:48:cd:19:56:18:34:a3:10:38:
14:e6:92:ee:c8:fa:2d:b9:5d:20:67:f7:af:0a:dc:
38:fc:fd:df:51:4a:43:9b:bb:1f:43:11:61:af:f4:
57:3d:7c:0e:5f:8f:89:e2:0c:cd:af:16:6e:90:03:
bd:20:b4:6d:5a:e2:00:86:3f:4d:65:12:60:c0:a8:
3e:2d:7a:c2:65:a0:e4:45:a7:76:16:8a:ac:c8:d7:
9f:c7:31:81:27:77:78:2a:be:a2:39:e0:8d:12:6a:
1e:e5:78:76:98:39:d6:ae:82:66:a5:0d:b0:5a:e2:
16:c2:ae:c8:10:3a:8f:98:02:e5:1b:55:f6:78:37:
43:99:d4:8e:95:9f:fb:1a:48:1c:b2:df:5a:4f:34:
ed:4f:3d:c0:b7:8e:12:3f:04:d4:dd:4c:52:11:f8:
36:bc:f9:4c:9e:70:a9:2a:c5:f6:7b:ea:76:0d:f7:
60:49:01:f8:86:e9:85:fb:c1:91:a1:8f:7f:5b:88:
64:11:1a:e9:33:b5:d0:7c:8a:d4:95:9d:43:cc:c1:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:81:99:4B:52:A8:AA:DE:BB:5D:CC:79:1F:88:56:83:B1:9B:7C
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:79:94:b6:40:78:86:b5:8e:28:c4:a8:82:d0:bf:ee:a5:83:
3d:e0:60:ae:a5:2e:95:b7:96:d6:68:09:c6:e1:07:00:5b:d2:
60:9e:af:6f:d5:24:b9:1c:54:2a:07:a0:63:b6:13:2f:40:53:
83:0d:ff:22:2e:cc:68:cb:12:42:35:92:0a:fb:e3:60:37:0c:
cc:36:86:b3:2b:b5:c5:fe:cd:cb:2e:29:9c:fe:c6:76:82:03:
51:b6:f8:01:b5:57:42:61:b2:37:4b:6b:be:65:c5:e1:c3:53:
c7:5c:02:99:69:aa:4d:b9:19:ed:8e:61:c3:aa:d6:3b:62:c9:
23:c7:40:e8:b0:cf:e6:72:f7:17:7a:67:bd:b5:f3:f2:38:ce:
cd:9c:60:e2:80:a6:a5:ea:35:2b:0e:0e:13:5d:79:bd:44:eb:
bf:a1:1d:ac:69:e7:60:1a:10:e9:83:bf:b0:3a:37:91:4b:2f:
fc:eb:b7:98:ae:f3:22:9e:63:8c:c6:5e:fb:cb:36:af:33:96:
b0:c3:fb:dc:bb:5a:fc:3a:14:46:1c:00:f4:74:62:65:5a:4d:
1f:ca:ed:4f:d2:2d:f9:cf:fe:47:13:38:7f:28:08:b3:78:7c:
b3:3f:24:bc:9d:1b:ec:68:a0:dc:95:aa:e7:0d:86:07:bb:46:
80:f5:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:26:05 2025 by rpki-client