Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File: AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier: tK95+0wnIWXGTbv5aAh7pKoYAAeT3byPlf1dfKhiAfM=
Subject key identifier: 9F:57:DA:80:C5:EF:99:5F:69:40:FA:D8:0C:82:63:24:DB:87:F9:C8
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 01987CE5B19729CF9459B386761A15CC2FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number: 066E
Signing time: Wed 06 Aug 2025 01:01:24 +0000
Manifest this update: Wed 06 Aug 2025 01:01:24 +0000
Manifest next update: Thu 07 Aug 2025 01:01:24 +0000
Files and hashes: 1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: KLu5y98pQRsq1bte8DjUZ9yd48UL0qKMiMh63Ml3NPc=)
2: jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa (hash: HIn2EZR8FCBtV+D1WmQeFC+W9f4d6g/d5Kn+DYMnwWM=)
3: s9CrfLdwyz1HofYuhgTm-G0XcWY.roa (hash: 5D2dFiucRImYcNfGCDutgF5vRQIcWGUYkXV/9xTSSbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:b1:97:29:cf:94:59:b3:86:76:1a:15:cc:2f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Aug 6 01:01:24 2025 GMT
Not After : Aug 7 01:01:24 2025 GMT
Subject: CN=9f57da80c5ef995f6940fad80c826324db87f9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:76:88:00:49:2c:da:c7:82:8b:07:5c:07:
80:53:0e:1c:93:7a:56:f2:25:a1:ce:da:55:ae:43:
a3:3c:be:46:18:7c:7e:99:3f:c0:56:78:08:67:b8:
cb:27:6c:a1:5c:bc:5f:2a:1f:6b:d7:70:d1:eb:49:
7b:be:01:88:d3:61:ac:70:e9:c1:a5:c1:dd:c7:fa:
87:9c:2c:05:20:04:c5:36:32:d2:36:49:32:51:b7:
6a:21:2f:82:54:e7:5d:4d:88:3a:44:06:db:ea:ae:
f4:1a:fb:ae:d9:34:b8:9e:9c:44:c7:e1:c4:4a:11:
59:51:20:0b:05:62:88:88:01:1c:d5:05:b0:dd:39:
72:72:27:cf:71:7d:75:ab:d7:5a:c4:07:6d:4c:cb:
e3:c2:12:ff:4e:52:40:4f:92:8b:27:43:f8:6e:73:
e8:bc:10:a8:c0:4f:1b:fa:2d:f2:ee:dd:80:27:85:
ec:2d:6b:7e:13:9b:91:55:79:a7:8f:31:d3:2e:94:
a2:c9:11:a4:0d:20:e9:9d:0a:be:51:1b:8c:6e:0b:
d2:8d:9a:d3:e8:8c:9b:32:43:b6:b6:33:bd:3b:e5:
48:4f:6c:0f:1f:59:74:87:3f:2d:e8:b9:bc:a4:98:
53:f0:35:97:83:56:06:73:1f:f3:8b:95:a3:43:ea:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:DA:80:C5:EF:99:5F:69:40:FA:D8:0C:82:63:24:DB:87:F9:C8
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:67:36:72:37:62:6b:9b:7b:2a:96:62:9e:4d:6a:82:b1:c7:
d8:e5:21:df:99:b6:90:7f:bc:05:0c:27:71:22:cf:64:5d:2e:
f6:2e:5c:bf:44:f8:81:c6:0f:95:38:35:30:0d:27:4c:50:da:
b8:62:a3:41:c7:34:fc:06:21:81:9b:a4:f3:fe:b1:c3:71:aa:
d9:33:1e:e3:c5:88:12:e5:ef:74:cd:4b:67:d8:14:93:74:24:
af:12:9c:e6:d2:b1:26:d5:79:81:17:50:a5:38:4e:55:1c:7c:
11:f7:a1:0d:f3:bf:c9:22:f4:c7:f8:39:87:fc:53:6e:b8:1a:
45:df:9a:a6:42:cf:07:51:73:ff:2f:b3:59:f7:c9:03:d3:30:
43:77:43:ce:bf:55:8d:fa:9d:33:e6:16:fe:05:23:af:ea:f7:
3d:40:d6:14:1c:c7:c3:8a:5f:60:d2:28:8f:5e:14:e8:b5:3e:
11:56:73:6d:51:e0:81:c8:cb:4e:a4:37:c3:90:d3:00:53:f9:
80:12:5d:8f:ee:6b:14:3c:0c:91:f6:4f:e9:d7:91:cf:a3:3c:
45:5d:b4:17:10:a9:f5:f6:4f:d8:74:29:b7:a5:79:59:48:2b:
ce:3b:7c:c2:f2:b4:99:66:2b:9a:54:6b:e4:24:c5:97:aa:73:
9a:46:8a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:07 2025 by rpki-client