Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: Siyk3Fylml19bl6eosMeoxKA71EdlfqxollBQ13EFQA=
Subject key identifier: BB:09:1B:E8:2A:5D:52:FD:52:B8:C5:3B:F7:61:28:6F:7F:52:44:75
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 019A54BF461F0A3639F339F4F7A3FC72D1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 170A
Signing time: Wed 05 Nov 2025 16:00:12 +0000
Manifest this update: Wed 05 Nov 2025 16:00:12 +0000
Manifest next update: Thu 06 Nov 2025 16:00:12 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: ldX8xai6bBUf05W+R23aTMMoSQJcG0ntsrU+5o0V3Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:46:1f:0a:36:39:f3:39:f4:f7:a3:fc:72:d1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Nov 5 16:00:12 2025 GMT
Not After : Nov 6 16:00:12 2025 GMT
Subject: CN=bb091be82a5d52fd52b8c53bf761286f7f524475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:92:12:f7:5c:a0:32:12:90:d7:3e:b2:a6:
46:2d:0c:da:0c:49:11:3f:dc:50:ea:5a:77:70:68:
c3:06:73:15:4a:56:db:5d:5b:f7:77:7b:63:e8:fe:
e0:5a:aa:ea:0f:97:5f:8b:15:9f:27:a0:ff:21:3b:
d3:40:5f:5f:cd:68:25:de:52:fb:23:79:fa:7a:ae:
ff:65:11:7f:9b:a4:53:83:32:65:d4:21:b2:d2:e6:
a1:32:5f:7b:f7:24:01:de:93:cd:2f:76:1c:63:14:
ce:c9:10:83:2f:90:0a:5d:6f:8f:d1:a9:8a:8a:55:
01:ff:62:9b:82:b0:e7:48:35:67:b2:83:ec:ee:ac:
f1:a4:4f:cb:07:76:41:fb:f0:4f:f5:b2:cf:96:d1:
3a:28:05:ce:14:d6:f4:79:a6:6c:fc:f9:b8:d0:b8:
af:bf:a5:8b:72:41:48:16:95:e8:c8:30:0f:49:3b:
1c:54:45:4f:45:1d:3a:cc:2c:bd:70:13:16:8b:94:
c8:ee:37:1f:09:4d:31:71:c6:cf:0c:cc:0c:4a:95:
81:25:c9:ce:18:2a:e6:3f:2c:26:d6:13:5d:79:92:
fa:2f:bb:ef:88:7a:f4:5d:c0:d1:2e:76:c7:52:dc:
ec:97:10:18:6b:a6:33:26:42:be:22:c9:64:44:40:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:1B:E8:2A:5D:52:FD:52:B8:C5:3B:F7:61:28:6F:7F:52:44:75
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1e:9e:89:9f:da:2b:15:01:7c:ef:d7:93:d5:89:7f:88:6d:
e3:5d:b3:de:46:53:a3:61:fd:be:d3:f5:e9:ae:9e:bd:a4:63:
0b:4d:04:4a:8d:1f:dc:89:63:c0:9a:e9:47:18:fb:42:32:a4:
ef:70:6d:eb:f5:14:89:e5:e9:df:fa:25:24:39:15:79:f2:e3:
38:cb:9b:26:b4:6f:95:f4:36:6a:44:53:5d:a0:ee:41:54:74:
e7:60:c3:83:68:e5:c1:5b:94:63:7a:05:ef:91:b7:3b:0d:f3:
32:9f:b1:d0:9d:0d:ae:65:fa:e1:17:d3:16:38:1c:b4:3d:fd:
02:19:d9:7b:ed:cb:92:5c:54:c7:3e:92:29:55:d6:38:62:e8:
3d:3d:7f:19:18:55:9f:31:2d:f3:bb:50:a7:c4:28:1e:c8:97:
ba:66:a9:a7:be:31:f1:ca:7f:c8:2c:13:7f:a2:0e:fd:fa:25:
8c:59:85:93:5b:53:97:93:f9:62:f6:fd:d2:ea:68:a8:5d:c2:
f2:d2:5d:0f:c1:29:b4:fb:dc:ab:0e:85:8f:ac:05:46:70:b9:
37:5f:fe:94:2d:41:c0:1a:a6:dc:78:8f:24:fb:cd:5b:ca:80:
f3:ec:c1:48:04:f2:d6:78:a5:f1:6c:32:e5:c2:2e:9a:0a:e7:
73:ab:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:08 2025 by rpki-client