Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
File: adcx-k3SksDAUy7qaWfOwHkHRao.mft (raw, json)
Hash identifier: Kpx6dr+s8opzeNm1jImcS8SCABCUWcz7tJFctCuUPFw=
Subject key identifier: 73:CB:70:D3:1A:D3:1F:11:82:0C:65:7A:5F:CB:20:06:B8:CE:60:0D
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial: 01976D06563C71CCAAA44C92D3CDBE390826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
Manifest number: 0591
Signing time: Sat 14 Jun 2025 06:00:21 +0000
Manifest this update: Sat 14 Jun 2025 06:00:21 +0000
Manifest next update: Sun 15 Jun 2025 06:00:21 +0000
Files and hashes: 1: SWEdM65l-EYRwVqCTPoCOjy6GaM.roa (hash: Tv3EVv3dATD+Wzt7v7ZrOSKmfA3WJr20DMhoDuNr2kk=)
2: ZOAIGzltyHMXQU6ltllGlFexC3s.roa (hash: qgz3cg0yrRtsx1xhQCihERkPJV1q3/wNQ4j8DRBe274=)
3: adcx-k3SksDAUy7qaWfOwHkHRao.crl (hash: DxkgTxj3WhmcDuAMsuqAUqrE7t/X59O4FcNYEcd3C4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:56:3c:71:cc:aa:a4:4c:92:d3:cd:be:39:08:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Validity
Not Before: Jun 14 06:00:21 2025 GMT
Not After : Jun 15 06:00:21 2025 GMT
Subject: CN=73cb70d31ad31f11820c657a5fcb2006b8ce600d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:0b:5b:bd:f0:a7:c2:bf:c8:d9:80:96:12:
06:66:d6:e4:e4:3d:a6:88:c1:61:fb:a2:68:19:26:
f8:cb:ab:83:43:2a:a0:30:4a:72:8f:6b:75:dd:c3:
a3:8d:2d:77:e7:6e:9d:ad:37:0c:ee:b2:8c:67:74:
a6:07:e4:7b:3d:13:2a:2e:84:b0:b4:be:01:ae:76:
c0:ea:eb:6f:9d:5d:97:f4:e8:5e:e9:b2:c9:fc:97:
cc:6e:72:62:65:dd:69:0a:e8:9c:a6:05:3d:da:b3:
d0:d2:4c:3d:43:30:6e:c9:a1:92:22:05:cf:0b:c2:
99:31:74:b2:6e:6d:9f:7f:79:d3:d1:2c:25:7f:51:
c8:32:e2:61:6c:f4:28:02:a8:52:42:c7:82:4a:9b:
72:61:76:4a:79:8f:79:b1:63:28:2c:aa:4b:9b:a2:
8b:ea:91:51:1d:a2:f5:3a:87:f6:f7:a7:65:8f:95:
bd:41:81:96:60:32:94:b6:46:82:a4:23:ee:2f:ac:
c2:e4:90:bb:04:48:a1:ec:69:42:aa:b2:9b:d3:70:
35:68:4d:d0:82:84:60:73:cd:4e:d5:bb:fe:10:17:
9e:d8:07:76:81:14:77:82:54:3b:70:8e:92:69:44:
60:53:08:cb:b1:e0:7f:7a:e8:54:b4:7e:f9:09:b2:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CB:70:D3:1A:D3:1F:11:82:0C:65:7A:5F:CB:20:06:B8:CE:60:0D
X509v3 Authority Key Identifier:
keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3d:0f:68:1a:39:70:4a:41:94:eb:3c:b3:7d:ea:1b:53:6c:
4b:42:d8:e2:8c:1e:29:f9:50:a6:5e:78:93:b8:29:3e:fd:fb:
95:e7:6e:a0:99:0a:88:bb:5f:96:4f:5f:8e:e3:20:61:b2:17:
e7:71:77:a2:d3:8e:32:a8:f2:a3:9b:87:94:cb:e7:a8:68:cf:
dc:dd:0b:0f:3c:28:0b:6a:c5:2c:20:de:02:fd:38:67:c8:65:
0c:76:15:d8:28:8a:ef:16:78:09:03:0c:f9:62:00:da:99:dd:
38:75:6a:26:0c:19:98:90:cf:c4:23:87:e4:08:e3:90:2f:0b:
cf:e9:37:d5:64:35:5d:a6:05:4f:c5:0c:cc:9e:cd:b2:88:60:
c1:f7:a3:38:c6:eb:a5:c9:4f:d8:2b:20:6a:49:36:7c:5a:1c:
e8:27:d2:f7:a1:26:1a:13:ff:1d:e8:3e:5a:43:24:4a:e3:69:
79:5b:87:3a:b5:79:76:11:29:d1:f6:f6:bb:39:c1:33:a1:e6:
1a:09:cf:77:81:bc:fa:a5:07:e9:f7:31:d5:36:3d:c1:e6:4f:
26:3f:f4:0a:3a:63:2a:d6:6c:b5:f8:70:6f:87:a8:0e:18:24:
ed:ce:84:71:c5:d2:6c:45:3c:f2:f9:9e:05:bb:6d:01:41:ab:
53:3c:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:49 2025 by rpki-client