Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: bxL/qIG2wU6KBRf4ijDLWlHQjopDTEelzFwiVZ4cdMY=
Subject key identifier: A5:48:1D:18:34:14:3A:8D:9B:87:B8:E4:52:39:F6:4C:42:06:F7:E2
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019768BC37FFF61BD279C1DA78AEBDB9B6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 1595
Signing time: Fri 13 Jun 2025 10:00:54 +0000
Manifest this update: Fri 13 Jun 2025 10:00:54 +0000
Manifest next update: Sat 14 Jun 2025 10:00:54 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: defRnsdQOcZjGTBifWKcgIeZ79luY3INgHeBk9IMaPg=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:37:ff:f6:1b:d2:79:c1:da:78:ae:bd:b9:b6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Jun 13 10:00:54 2025 GMT
Not After : Jun 14 10:00:54 2025 GMT
Subject: CN=a5481d1834143a8d9b87b8e45239f64c4206f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:33:ba:8f:28:e0:d4:fb:b6:96:ee:82:f1:
f3:42:63:46:d5:07:22:ec:87:70:37:e2:f3:d5:54:
96:57:ab:4c:8f:a0:fd:8c:24:14:1f:84:e8:8b:67:
67:ab:6d:4f:47:82:16:e7:51:c0:15:e2:6c:ac:de:
0f:a9:8e:28:76:6a:53:e0:e7:53:72:3e:a9:f1:49:
5a:98:f2:ed:8f:65:ea:68:21:b7:e1:ce:95:1b:f8:
91:74:16:37:16:1f:30:ba:a3:56:0d:dc:25:87:c3:
f5:c1:ff:a2:44:44:fb:82:36:a2:6f:cc:7c:39:35:
81:40:8c:a8:29:b6:dd:f8:ea:6d:99:7e:ba:e1:9f:
e1:81:6e:92:40:a4:44:9c:e6:ed:42:f7:58:b7:fe:
79:a2:ee:f0:7e:00:c3:b9:65:08:2b:1e:6b:fe:67:
79:46:74:e5:7f:f7:27:a9:54:4f:95:37:49:1a:df:
20:2b:87:a9:98:76:88:2a:0f:12:23:f5:9b:c1:d4:
a1:90:f0:69:52:5f:39:55:f4:de:aa:24:fc:4e:54:
de:d6:38:95:e3:5f:c4:59:fa:29:c3:30:45:79:07:
aa:a9:62:9a:f5:25:73:8b:a7:3c:8d:21:39:d3:41:
dc:77:4b:47:0e:87:94:45:69:e2:7c:df:f4:1f:0b:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:48:1D:18:34:14:3A:8D:9B:87:B8:E4:52:39:F6:4C:42:06:F7:E2
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:aa:68:23:9f:65:65:8b:fe:0c:5e:3d:e0:75:83:ff:0f:c0:
76:02:df:70:e7:dd:bc:4e:76:82:8a:18:12:e6:7f:13:d4:98:
50:32:6b:52:02:8c:7e:b1:28:94:13:25:6e:3f:97:ce:b5:fd:
4c:1d:89:6f:2c:69:51:37:2b:c4:c3:f0:b0:d9:7e:a5:88:65:
45:52:c9:7e:28:d0:02:22:3e:b0:ff:20:46:28:51:6a:8a:88:
ae:5d:61:ac:56:ca:5d:fe:e8:c9:f0:7d:f9:b9:12:5b:83:7d:
7c:2b:00:71:f5:22:30:db:3f:81:0a:7d:2a:cc:a5:17:52:7a:
8e:78:24:c1:7d:aa:6a:84:cd:89:4c:74:11:c9:55:32:5b:18:
e7:1e:11:4e:ed:5f:fb:cc:e1:29:99:d8:b0:8b:21:8a:37:f3:
70:ee:e4:15:a1:44:2e:ba:f7:24:87:0b:56:6e:86:ae:7d:e0:
d6:fa:74:c4:a7:e4:70:93:ee:b6:d9:29:e6:c3:22:72:65:16:
06:c5:b7:6e:bb:21:9d:47:47:8b:81:f3:70:9a:9b:94:e4:3a:
9a:38:15:bd:0e:a7:65:ce:02:e0:de:ab:9b:15:bb:e9:f8:9d:
1c:a9:c7:49:61:cf:50:67:71:b3:8e:06:e1:24:17:0e:f3:ac:
78:1e:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:32 2025 by rpki-client