
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File: Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier: RMkqm4a/rorG2FxAyfPRBgcq7fzuJKnNOr0RToA7Uzc=
Subject key identifier: 3B:3B:DB:D9:BD:7B:3C:1C:16:97:AF:24:A5:50:FB:26:80:C2:6A:F4
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer: /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial: 0198816864A8BF0249F62014AD97841611B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number: 100F
Signing time: Wed 06 Aug 2025 22:02:39 +0000
Manifest this update: Wed 06 Aug 2025 22:02:39 +0000
Manifest next update: Thu 07 Aug 2025 22:02:39 +0000
Files and hashes: 1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: dRtC6x/t8KbvykOPCvB9gzrbmuBYtZ7r4BlERHDW+Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:64:a8:bf:02:49:f6:20:14:ad:97:84:16:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Validity
Not Before: Aug 6 22:02:39 2025 GMT
Not After : Aug 7 22:02:39 2025 GMT
Subject: CN=3b3bdbd9bd7b3c1c1697af24a550fb2680c26af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:ed:24:81:a9:9d:c8:c2:14:a8:ca:6e:dc:
3e:30:77:dc:d1:28:36:e9:31:c9:85:4c:61:9d:4d:
e1:5b:28:0d:1c:f0:81:d2:e2:23:43:ed:28:72:46:
04:99:26:33:2f:1d:84:a5:4e:c5:80:c7:33:b6:9c:
99:91:6d:f4:75:d8:39:a1:73:ef:ca:43:1b:41:48:
dc:95:90:1d:cf:f2:70:cf:f7:db:7d:d9:eb:e7:99:
c1:60:e3:b2:4a:26:32:3f:5c:50:5a:53:e2:37:70:
63:e7:37:0a:7d:79:03:22:5e:35:ea:7d:b4:1d:61:
74:29:10:57:32:b1:4d:22:21:fc:4b:3a:38:18:c2:
5e:df:63:9b:41:1c:ba:51:d7:66:25:dd:4e:b9:f1:
e1:ce:0b:4d:9d:77:92:17:3b:2e:bf:09:49:4d:3d:
c0:ce:10:1b:c5:2c:7a:d4:c2:be:53:66:5e:79:43:
b5:db:6a:52:c4:9b:93:43:6b:8a:50:ca:f9:d9:f0:
51:1b:7b:48:d6:bd:7b:ac:eb:91:e4:c4:79:9d:3b:
0d:47:2d:37:93:42:f5:73:27:6f:1f:a0:02:ba:29:
31:f3:0e:33:ee:83:4c:0b:bf:d5:83:c3:e6:5e:71:
59:b8:88:e2:d6:4f:42:52:0d:89:ec:c9:8d:83:a8:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:DB:D9:BD:7B:3C:1C:16:97:AF:24:A5:50:FB:26:80:C2:6A:F4
X509v3 Authority Key Identifier:
keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:98:6d:19:b4:72:b9:62:29:4b:8a:df:dc:ea:e3:02:45:d0:
c1:98:20:41:05:5d:79:01:58:8d:64:bd:dc:b2:7a:a6:94:49:
94:6b:bf:4d:22:7e:98:c5:dc:51:24:5f:e5:61:ef:70:43:d3:
0f:ff:5e:26:fa:a1:20:42:96:c9:a0:a1:04:c4:0b:59:99:6b:
f0:71:df:1f:8a:f7:98:0b:90:a7:b9:e7:6e:1a:62:45:6c:a9:
32:7e:6a:1b:24:eb:90:4c:00:b7:7b:8f:2d:66:55:91:2b:4a:
40:e9:74:f7:8c:70:7c:39:21:79:42:a6:14:b3:58:b1:4a:d6:
2e:10:9d:e0:14:27:5f:25:91:a9:97:7c:e9:e1:7f:3d:4b:d3:
4b:01:85:f4:4b:b0:d3:fb:e0:3b:c3:4d:f8:cf:f1:76:89:e2:
0f:8b:2e:bf:bb:a4:3f:d9:7e:eb:34:de:26:6b:c4:fc:44:8b:
df:7b:fd:4b:f9:4c:f6:57:62:bf:97:06:d7:66:92:0a:ee:e3:
10:fe:30:20:ca:f3:b2:dd:ec:5c:9e:7a:af:9e:2f:f9:b3:80:
e2:60:55:2d:a2:e9:40:0d:af:f6:85:0e:30:9e:fb:89:c7:a6:
59:fb:7c:1e:f4:11:6d:8f:24:cd:02:22:47:bc:39:98:38:79:
b9:de:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:19 2025 by rpki-client