Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: aQJR9SN1IlrPwpbykVNov8KSDI6rReNNADoStrFTIAI=
Subject key identifier: F2:25:97:FC:15:91:5F:A5:5E:77:5C:8B:F9:F5:55:34:BF:72:0F:B8
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019A503D92ACD89197BB98CDACCCC9A7438C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 19:00:03 +0000
Manifest this update: Tue 04 Nov 2025 19:00:03 +0000
Manifest next update: Wed 05 Nov 2025 19:00:03 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: b7OeaFSjP0Np2NMTT8OfX+2fnYsXAl3lqw0sJX3vVoE=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:92:ac:d8:91:97:bb:98:cd:ac:cc:c9:a7:43:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Nov 4 19:00:03 2025 GMT
Not After : Nov 5 19:00:03 2025 GMT
Subject: CN=f22597fc15915fa55e775c8bf9f55534bf720fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:52:b2:1b:52:55:77:af:a2:1a:9f:57:a0:
9a:44:c0:76:89:4f:79:dd:2a:dd:b5:08:58:76:17:
5e:ea:8c:2f:ae:66:3d:a7:b6:91:c3:9c:ff:20:08:
a7:2d:9b:55:34:c7:55:1d:b3:7a:11:d2:54:1a:cf:
5a:01:74:d0:a0:92:83:c1:09:93:a6:5d:ac:b6:c9:
aa:b8:0e:dd:74:59:3f:74:7a:ad:44:3c:ed:42:8f:
36:bb:a0:33:3a:72:dd:91:7b:a5:bf:35:35:41:19:
5f:ae:45:b0:01:d0:0f:0e:a0:39:8f:01:c9:1f:0c:
9f:b9:08:1c:9a:58:ce:23:e5:a5:cc:7a:17:2f:cf:
f1:fc:bd:57:8d:99:0f:f9:9b:b5:bb:05:73:64:19:
25:0e:af:fd:42:95:87:50:30:de:ad:1d:69:7f:f0:
be:a5:12:d6:95:4d:a6:96:cb:35:54:25:4a:b2:1d:
f7:7a:c8:0d:69:3f:dc:dd:3b:ec:a4:5f:0e:c0:30:
5f:4e:0a:3a:eb:29:cf:59:d1:67:4f:61:b7:10:de:
0c:63:8b:4c:cc:ee:c0:ec:b2:3f:6d:1a:97:36:47:
97:85:93:33:e2:ec:18:e0:15:ef:ac:cc:8c:39:18:
04:b7:79:fd:e2:df:1d:5d:c3:f9:38:0d:ad:e5:1f:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:97:FC:15:91:5F:A5:5E:77:5C:8B:F9:F5:55:34:BF:72:0F:B8
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f2:7d:46:71:e0:94:93:21:b0:58:f9:88:05:e2:d1:5d:42:
8c:da:a1:2a:ac:3a:8d:80:61:76:7f:c6:94:62:6b:3b:23:3c:
ba:98:5d:e8:5f:e7:6b:5b:3b:0e:57:39:84:a9:b5:b3:17:b6:
e3:5a:6b:37:68:5e:80:75:4e:7d:41:99:80:a8:cb:39:bd:2b:
7d:f8:2c:41:e8:58:d2:20:47:f6:91:f1:31:72:f2:6f:7b:86:
18:4e:b1:c6:01:7e:6c:f5:91:54:c3:a5:f9:a1:64:88:3b:6c:
c7:3a:ad:d8:39:f7:70:7a:2c:ad:67:4d:4a:ad:f0:e8:72:ba:
5d:e4:cd:ea:a3:e9:c5:28:d4:de:78:8f:b6:0f:7e:d8:13:98:
42:8a:61:a9:42:fc:e1:cc:89:53:63:34:45:d4:c4:c5:99:51:
5e:dd:5d:b6:b1:62:6a:9f:65:03:32:cb:e6:0d:17:1d:53:08:
d9:55:20:42:1c:fe:b3:af:6f:29:db:af:28:5c:6d:b0:7f:06:
5b:d8:7a:32:f4:23:1f:ef:91:3c:f3:49:4f:73:2b:ef:95:ef:
f0:29:4d:71:92:03:9c:ce:4a:fc:95:19:4c:bc:70:7b:8b:2a:
1a:26:13:84:66:92:f2:1f:db:09:d8:dc:0e:5b:23:6b:f2:fe:
2b:7c:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:12:24 2025 by rpki-client