Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier: /evBeFfvzNdKXyjSNioc3Qaw19WoaPU1dTqyAF+J/RY=
Subject key identifier: 59:EC:9E:67:C3:B8:3E:91:00:33:0B:B6:98:D6:95:35:A8:AB:D5:EB
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 01987C407C26D9613731D9DCBBC755CA0731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 22:00:57 +0000
Manifest this update: Tue 05 Aug 2025 22:00:57 +0000
Manifest next update: Wed 06 Aug 2025 22:00:57 +0000
Files and hashes: 1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=)
2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: goZtFI/waUszufgmcaS3GReEntO+dP/pCn73lUmN6Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:7c:26:d9:61:37:31:d9:dc:bb:c7:55:ca:07:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Aug 5 22:00:57 2025 GMT
Not After : Aug 6 22:00:57 2025 GMT
Subject: CN=59ec9e67c3b83e9100330bb698d69535a8abd5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:a5:78:06:e4:59:96:81:41:cd:1b:5f:65:
71:ee:ef:9b:d3:fa:7a:b8:f8:52:02:80:30:37:d7:
b8:67:16:e3:5a:a3:94:0e:30:fd:79:ae:9a:db:2b:
10:61:58:7f:bc:3d:ea:84:9d:b6:be:40:3f:ad:07:
9e:22:85:f8:ba:5b:bc:8a:b4:3c:7e:cd:8b:ea:35:
e4:86:07:b6:75:41:91:60:18:7e:e4:5e:b1:30:e9:
c4:e5:15:9e:97:43:5a:e6:f4:f2:07:36:be:b4:fa:
04:52:a9:ad:36:f5:a6:4c:6d:4b:9a:4d:8c:3f:31:
5d:04:72:da:6a:22:10:2e:d4:2f:98:a1:01:77:ef:
65:b8:96:34:3d:02:60:90:47:98:8f:79:81:9d:7b:
68:c1:b1:63:6b:dc:25:9a:8f:4e:fd:37:f6:9c:80:
9e:68:77:e6:71:c1:6a:e7:d3:a0:2a:0f:b9:79:76:
fa:b5:23:a3:ac:83:d0:a9:66:23:7c:5a:9b:e4:a5:
44:f9:57:ca:5a:e5:b8:1b:e7:17:28:18:f7:0d:9b:
7f:65:79:59:b9:af:9f:a9:23:85:b6:61:b9:d4:9f:
6b:93:78:c9:c8:38:a1:aa:6d:94:05:99:52:8b:a7:
09:4a:43:54:0e:fb:62:31:bb:fd:ef:22:28:f4:42:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EC:9E:67:C3:B8:3E:91:00:33:0B:B6:98:D6:95:35:A8:AB:D5:EB
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:e6:2d:98:3b:bc:49:ce:8a:09:3e:59:d2:18:76:b6:63:
01:fe:fb:ea:ed:70:13:7c:de:a8:9d:d6:5d:d8:7d:07:ce:56:
ca:00:72:30:1b:d4:60:e0:1b:63:3d:00:2f:eb:24:da:f8:ed:
01:43:df:c0:36:6c:a0:7a:77:e5:f3:01:3c:bf:13:2e:2b:ba:
36:e2:e7:48:fe:b2:2d:6e:b7:72:e7:8b:0e:d1:af:6d:ea:dd:
de:1f:cb:bd:b2:b1:9d:e6:bd:af:6f:c0:e1:b2:58:42:25:03:
c7:20:27:0e:96:87:4a:32:c2:40:3f:e4:39:75:6a:ae:43:8c:
90:ec:dc:ec:b7:5b:fd:7f:49:c2:ce:97:12:31:61:6b:bf:3b:
22:01:b7:5c:24:8f:6a:f6:c3:72:b1:51:dc:ee:76:13:eb:7c:
02:c4:8d:e3:79:ad:03:6a:7a:02:64:5e:21:47:83:2f:6a:35:
d3:08:96:c0:19:6e:d7:b7:29:60:62:93:09:f6:72:eb:b4:ad:
c4:42:be:5c:e8:b1:f4:f9:1e:bc:71:b4:b9:cc:92:c6:96:8e:
c1:b2:3d:eb:c6:52:33:2f:aa:67:56:a9:40:c4:d1:c2:f1:2b:
af:63:1e:cd:72:a4:c8:95:46:77:0b:c7:7c:aa:d3:af:3c:3e:
06:49:7f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QHwm2WE3Mdncu8dVygcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDVkNDUyYThlZDUzNTI4N2ZlYjM2NTE0YmM4N2MwMjIz
NTVhNDMwHhcNMjUwODA1MjIwMDU3WhcNMjUwODA2MjIwMDU3WjAzMTEwLwYDVQQD
Eyg1OWVjOWU2N2MzYjgzZTkxMDAzMzBiYjY5OGQ2OTUzNWE4YWJkNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4OleAbkWZaBQc0bX2Vx7u+b0/p6
uPhSAoAwN9e4ZxbjWqOUDjD9ea6a2ysQYVh/vD3qhJ22vkA/rQeeIoX4ulu8irQ8
fs2L6jXkhge2dUGRYBh+5F6xMOnE5RWel0Na5vTyBza+tPoEUqmtNvWmTG1Lmk2M
PzFdBHLaaiIQLtQvmKEBd+9luJY0PQJgkEeYj3mBnXtowbFja9wlmo9O/Tf2nICe
aHfmccFq59OgKg+5eXb6tSOjrIPQqWYjfFqb5KVE+VfKWuW4G+cXKBj3DZt/ZXlZ
ua+fqSOFtmG51J9rk3jJyDihqm2UBZlSi6cJSkNUDvtiMbv97yIo9EJwHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnsnmfDuD6RADMLtpjWlTWoq9XrMB8GA1UdIwQY
MBaAFGnV1FKo7VNSh/6zZRS8h8AiNVpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2Yt
ZGQ5NDQzNTc5ZWQ1LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2YtZGQ5NDQzNTc5ZWQ1
LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsrmLZg7
vEnOigk+WdIYdrZjAf776u1wE3zeqJ3WXdh9B85WygByMBvUYOAbYz0AL+sk2vjt
AUPfwDZsoHp35fMBPL8TLiu6NuLnSP6yLW63cueLDtGvberd3h/LvbKxnea9r2/A
4bJYQiUDxyAnDpaHSjLCQD/kOXVqrkOMkOzc7Ldb/X9Jws6XEjFha787IgG3XCSP
avbDcrFR3O52E+t8AsSN43mtA2p6AmReIUeDL2o10wiWwBlu17cpYGKTCfZy67St
xEK+XOix9PkevHG0ucySxpaOwbI968ZSMy+qZ1apQMTRwvErr2MezXKkyJVGdwvH
fKrTrzw+Bkl/xg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:42 2025 by rpki-client