Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: 8kCmthas7Wg2/LkFQdsf90WYwl/Hna1E2+4XKNrxu58=
Subject key identifier: 2A:26:7B:E3:28:90:16:BF:7D:F8:A8:93:DF:2B:AF:C0:E2:C3:15:C5
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 01987CE5B99C57110A2CB0D7CDD0E0E44ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 1624
Signing time: Wed 06 Aug 2025 01:01:26 +0000
Manifest this update: Wed 06 Aug 2025 01:01:26 +0000
Manifest next update: Thu 07 Aug 2025 01:01:26 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: Dh2N8xVpCj7MVN0Kr3RJZP6kag5G/xY8ON3dyIY6/JI=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:b9:9c:57:11:0a:2c:b0:d7:cd:d0:e0:e4:4a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Aug 6 01:01:26 2025 GMT
Not After : Aug 7 01:01:26 2025 GMT
Subject: CN=2a267be3289016bf7df8a893df2bafc0e2c315c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:d7:c5:b5:c3:0d:a0:07:43:32:4a:c7:e4:
5e:45:8a:23:0c:e2:22:60:17:0e:1d:49:88:84:8e:
01:3a:31:c1:a5:71:d1:85:56:5a:75:e3:00:9f:65:
e2:f6:96:f3:9a:a1:9f:a1:44:74:9d:3f:3d:79:01:
bc:9c:b1:ff:54:67:e0:b4:a0:3d:41:4b:6a:89:67:
d3:79:96:21:7f:3f:ee:4b:04:47:6d:26:95:62:f0:
d1:61:16:d9:ff:0a:80:88:45:b7:3d:d0:4a:f8:ef:
1d:7d:ff:3c:8d:a5:ce:56:7a:48:d3:cf:51:6a:45:
11:cd:61:05:12:45:1d:21:e9:1a:e5:df:d6:0d:ef:
b5:58:b9:d8:ea:1e:84:24:f1:73:de:91:42:38:6b:
fa:b5:95:83:c1:0c:0f:d0:3a:5e:9d:64:95:40:71:
ce:86:43:bb:dc:d8:6d:5c:9a:5d:51:46:6c:4f:20:
c5:5b:2b:43:b0:47:23:cb:9a:56:0c:d1:3a:98:06:
71:cf:0a:09:c8:64:b2:94:2c:a9:d9:c2:38:56:0e:
52:40:d8:cc:29:18:09:40:0a:dc:72:5b:de:a5:bc:
1d:11:23:f7:24:89:41:3b:dd:b9:c4:97:84:4a:9f:
60:ca:bb:17:00:87:7a:a7:33:1d:30:22:eb:cc:91:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:7B:E3:28:90:16:BF:7D:F8:A8:93:DF:2B:AF:C0:E2:C3:15:C5
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e1:7f:d9:82:11:b7:c4:42:60:3b:b8:ce:38:41:f7:fc:c6:
8d:ed:0a:d2:2a:82:c3:c8:8b:13:80:e1:ce:21:a5:30:bf:0d:
45:58:17:22:1c:20:32:7a:c5:6b:51:51:75:de:5a:c5:7c:7f:
9b:17:e9:88:8a:d8:fb:29:50:71:56:bb:f6:fc:ee:45:10:3b:
af:24:68:c8:1f:f2:0b:59:db:da:4d:e6:09:63:b0:9e:5a:50:
d1:1c:b6:cd:b4:8a:e4:38:b1:96:46:d6:84:70:04:22:1a:50:
ce:4d:12:96:38:21:9b:df:78:ee:85:40:ed:00:c4:d8:6e:65:
19:fe:92:5f:a5:12:f6:e7:12:b8:ad:f7:c6:4a:46:7b:4d:51:
9f:b2:03:c8:8c:89:52:ff:80:84:51:d0:79:b2:a9:c5:94:e0:
e4:0f:90:b3:5d:84:08:cf:e2:59:64:da:ac:b6:6a:8b:62:f7:
bc:ed:f6:21:28:c2:6d:6c:53:c4:d6:7f:b4:38:55:94:af:a0:
f7:af:17:aa:04:e5:e5:80:6b:f9:41:f2:0b:8f:33:5a:3f:27:
94:66:52:17:dd:23:e6:4c:14:24:b9:9b:fb:3a:8e:5b:6c:e0:
7c:d0:13:99:d4:7e:b8:a9:10:57:e3:bd:a1:c8:49:45:55:0c:
f9:e5:d4:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85bmcVxEKLLDXzdDg5EreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MDBkNTAxM2MxMjg1MjI0MjM0MzA5M2NiZjUxNDhkNGVh
ZWFhZjkwHhcNMjUwODA2MDEwMTI2WhcNMjUwODA3MDEwMTI2WjAzMTEwLwYDVQQD
EygyYTI2N2JlMzI4OTAxNmJmN2RmOGE4OTNkZjJiYWZjMGUyYzMxNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZTXxbXDDaAHQzJKx+ReRYojDOIi
YBcOHUmIhI4BOjHBpXHRhVZadeMAn2Xi9pbzmqGfoUR0nT89eQG8nLH/VGfgtKA9
QUtqiWfTeZYhfz/uSwRHbSaVYvDRYRbZ/wqAiEW3PdBK+O8dff88jaXOVnpI089R
akURzWEFEkUdIeka5d/WDe+1WLnY6h6EJPFz3pFCOGv6tZWDwQwP0DpenWSVQHHO
hkO73NhtXJpdUUZsTyDFWytDsEcjy5pWDNE6mAZxzwoJyGSylCyp2cI4Vg5SQNjM
KRgJQArcclvepbwdESP3JIlBO925xJeESp9gyrsXAId6pzMdMCLrzJFgIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCome+MokBa/ffiok98rr8DiwxXFMB8GA1UdIwQY
MBaAFHQA1QE8EoUiQjQwk8v1FI1Orqr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAt
ZTA4OTJhMjhhYWM5LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAtZTA4OTJhMjhhYWM5
LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+F/2YIR
t8RCYDu4zjhB9/zGje0K0iqCw8iLE4DhziGlML8NRVgXIhwgMnrFa1FRdd5axXx/
mxfpiIrY+ylQcVa79vzuRRA7ryRoyB/yC1nb2k3mCWOwnlpQ0Ry2zbSK5DixlkbW
hHAEIhpQzk0Sljghm9947oVA7QDE2G5lGf6SX6US9ucSuK33xkpGe01Rn7IDyIyJ
Uv+AhFHQebKpxZTg5A+Qs12ECM/iWWTarLZqi2L3vO32ISjCbWxTxNZ/tDhVlK+g
968XqgTl5YBr+UHyC48zWj8nlGZSF90j5kwUJLmb+zqOW2zgfNATmdR+uKkQV+O9
ochJRVUM+eXUYQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:26 2025 by rpki-client