Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier: sNxWLoTbOnfSL3Lg0IaIqNhWAVtxey++7PIC97xK3Cg=
Subject key identifier: 12:8D:74:25:64:08:48:00:63:42:CE:FD:81:88:97:02:C5:90:F4:43
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 019A4F9958C34BB94392F5FCF289449DF48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:41 +0000
Manifest this update: Tue 04 Nov 2025 16:00:41 +0000
Manifest next update: Wed 05 Nov 2025 16:00:41 +0000
Files and hashes: 1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=)
2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: LncBK9xlEjnpv194UJ5NUt8CsK7cF1F9WBagTlkGLvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:58:c3:4b:b9:43:92:f5:fc:f2:89:44:9d:f4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Nov 4 16:00:41 2025 GMT
Not After : Nov 5 16:00:41 2025 GMT
Subject: CN=128d7425640848006342cefd81889702c590f443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:59:c4:53:e9:dc:6d:d4:03:8d:f1:52:ad:
26:5a:17:15:8f:03:d3:37:69:90:b7:8b:bc:96:ca:
4a:1b:7e:c4:d0:84:15:e4:38:03:72:c2:dc:58:53:
57:76:d4:da:1b:12:5f:cf:ba:be:40:09:ee:41:1c:
78:0a:62:d7:49:a9:36:86:81:c5:75:43:4a:2f:be:
36:f7:75:54:de:a8:d9:3c:5e:05:d9:ca:58:e7:ff:
a3:6d:a4:b7:49:68:d4:b9:d3:7a:7e:9e:a6:9a:5e:
43:08:d5:9b:f4:4e:f7:62:e8:0d:3b:3c:de:b2:fc:
44:9f:3f:a4:4a:eb:45:29:a6:af:63:00:23:25:de:
fd:e8:f6:7b:2b:97:77:ca:0a:cb:5f:41:af:91:5d:
2e:a3:1b:0b:f7:2f:bc:7d:fb:bd:7e:54:71:6c:4d:
f2:4c:c5:0f:c7:93:f3:e2:91:6d:7e:9a:96:b2:e7:
c9:a1:28:40:49:4e:2e:fc:69:2d:0c:0a:2e:e9:3b:
b0:cb:c7:24:4f:dc:8e:f6:1b:3c:60:60:f5:0c:6d:
1b:d2:75:c7:55:94:6a:93:8a:e2:c7:c2:17:7c:9b:
ad:9f:b3:4d:0a:77:21:8b:c6:fa:8a:24:eb:7e:34:
c8:b1:ca:11:36:68:61:b2:01:da:06:29:f0:ba:38:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:74:25:64:08:48:00:63:42:CE:FD:81:88:97:02:C5:90:F4:43
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5e:7d:af:ac:8f:fb:ab:07:3f:6a:18:bc:13:f8:ca:c0:e5:
ab:9b:c1:f5:f9:57:7e:37:1b:6f:99:40:5d:bd:0c:ca:f4:29:
7d:3c:18:34:b4:20:9f:fb:fa:c9:24:c0:13:d8:22:63:39:2b:
b9:b2:8c:1c:5e:f4:dd:f2:86:15:ce:6d:8c:4e:d1:7c:d7:c2:
f0:47:7e:ad:13:6a:57:ef:c3:23:35:7f:d4:aa:b3:3c:4d:09:
c7:de:db:39:2f:e1:9b:63:63:03:9a:94:4e:36:7c:32:7d:76:
ea:b5:24:3f:eb:9c:ab:b8:4a:8a:8e:4a:1c:b3:e8:e0:d6:54:
25:f0:01:ca:3c:50:18:8c:bd:9c:42:a0:b8:19:a0:09:6b:9f:
d9:df:ac:66:3f:68:dd:09:4c:61:2d:46:75:31:48:47:72:b8:
aa:cf:c8:59:7b:8c:00:3d:6f:c9:ef:e4:a0:1a:70:a9:66:0f:
03:c7:89:a0:dd:a4:a7:e6:65:58:1d:1f:fe:e4:ec:55:de:be:
96:64:64:e3:ac:6c:21:65:75:78:66:c4:c5:52:67:4f:e8:95:
90:ef:cf:06:ec:1c:99:41:4b:7a:67:d2:2f:b8:a9:92:83:1f:
26:cb:2b:2d:c0:e1:3a:93:de:8c:3d:3e:e8:83:8e:10:d5:b8:
b8:0f:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:32 2025 by rpki-client