Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: 34ZUMGULfeIJe0yeUWvxLJ3u/G4cHff1NTJ57BgikoA=
Subject key identifier: A4:65:D9:C0:31:40:19:42:B4:14:DD:65:0B:06:41:84:C5:65:92:05
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 019872CF76B9830273DD3AFBC5456EF482E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 02:00:55 +0000
Manifest this update: Mon 04 Aug 2025 02:00:55 +0000
Manifest next update: Tue 05 Aug 2025 02:00:55 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: MzIkA794nKTNKrnQANhm791NQ9gKypwznAG+hals2LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:76:b9:83:02:73:dd:3a:fb:c5:45:6e:f4:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Aug 4 02:00:55 2025 GMT
Not After : Aug 5 02:00:55 2025 GMT
Subject: CN=a465d9c031401942b414dd650b064184c5659205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:ff:48:98:43:25:57:03:26:62:13:41:51:
39:cd:77:64:20:90:ee:0a:b2:3e:cb:42:15:40:84:
d1:15:da:f8:3c:7a:ba:ab:c5:1b:b9:8e:89:e4:9e:
d6:36:15:a8:7c:d0:52:55:0e:02:e0:6c:71:8b:e8:
b3:ea:2d:a5:2c:0f:a1:bb:20:b6:6c:6d:ea:7e:1b:
8e:48:eb:35:f5:19:c5:aa:db:9d:a0:0b:41:eb:c8:
d9:6d:cd:d3:dd:6f:43:2d:6b:01:26:03:fe:46:26:
dc:24:59:e5:c1:4f:f1:0a:43:d7:0b:f7:cd:bd:be:
a3:ff:0e:36:72:a6:7c:ea:85:db:24:2a:ec:a5:dd:
70:ab:35:8f:d0:fd:a3:da:a8:6d:6f:37:ef:6c:ee:
ab:7e:66:aa:93:72:a9:ce:00:0b:bd:af:60:e0:1d:
26:cb:3f:73:05:c7:a7:e4:a6:84:02:59:04:03:7e:
95:be:5a:4b:49:49:66:47:51:1a:4d:08:38:33:8d:
7d:9b:15:12:9b:2a:40:6f:db:2a:aa:4d:d7:56:fd:
30:f0:09:8a:ab:1e:75:75:b2:bf:cf:a9:13:99:60:
18:d5:96:a6:4b:07:79:a1:d1:d9:f6:99:ff:9b:44:
52:1b:e9:ba:b5:2b:5a:89:48:16:c9:80:92:d9:0f:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:D9:C0:31:40:19:42:B4:14:DD:65:0B:06:41:84:C5:65:92:05
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:12:af:c5:75:e9:6d:2a:00:9f:bc:23:8f:cb:ec:2c:2a:8c:
dd:97:eb:f4:0c:59:72:be:d6:19:2a:9c:71:f1:a2:89:69:de:
6e:33:c2:fd:48:49:e8:7c:12:98:f9:0a:7e:ee:33:dc:4c:db:
61:a4:52:d6:9a:53:94:5d:45:ab:22:eb:76:75:ad:a3:e1:14:
1c:75:b3:0a:49:d9:1e:05:7a:72:d1:3d:46:9c:98:7b:0c:86:
32:58:8c:97:87:bc:fb:6d:5c:4a:7c:c1:86:df:0d:cc:85:00:
aa:53:e7:10:04:64:de:d7:4f:f4:e1:eb:af:18:94:a9:7d:4c:
89:0b:80:39:3b:ae:3f:a3:13:84:c6:b6:bb:bc:f3:bd:c4:e9:
29:07:b3:be:49:9d:b5:7e:f4:b4:91:3f:e5:7b:fb:35:a2:1f:
af:8f:eb:48:ba:5f:16:9e:aa:0b:62:4a:27:f7:09:65:20:b9:
27:37:5c:cb:01:30:f2:89:ab:b2:6a:71:60:52:66:e2:83:43:
cf:d1:c3:bf:41:0b:bd:1d:7a:64:6d:d1:14:09:45:0e:64:78:
c7:1d:4c:8d:f9:8a:f6:f7:69:38:88:6c:90:ef:5c:80:16:5e:
13:dc:3b:4d:46:a5:9d:cb:a3:21:b2:82:dd:3d:6b:ea:b5:73:
77:fb:d6:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz3a5gwJz3Tr7xUVu9ILnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDE5OTIxNDQwYzJmMmIyMmE3Nzc3ODAyOTNiYzI3ZmE0
N2YzNWEwHhcNMjUwODA0MDIwMDU1WhcNMjUwODA1MDIwMDU1WjAzMTEwLwYDVQQD
EyhhNDY1ZDljMDMxNDAxOTQyYjQxNGRkNjUwYjA2NDE4NGM1NjU5MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXH/SJhDJVcDJmITQVE5zXdkIJDu
CrI+y0IVQITRFdr4PHq6q8UbuY6J5J7WNhWofNBSVQ4C4Gxxi+iz6i2lLA+huyC2
bG3qfhuOSOs19RnFqtudoAtB68jZbc3T3W9DLWsBJgP+RibcJFnlwU/xCkPXC/fN
vb6j/w42cqZ86oXbJCrspd1wqzWP0P2j2qhtbzfvbO6rfmaqk3KpzgALva9g4B0m
yz9zBcen5KaEAlkEA36VvlpLSUlmR1EaTQg4M419mxUSmypAb9sqqk3XVv0w8AmK
qx51dbK/z6kTmWAY1ZamSwd5odHZ9pn/m0RSG+m6tStaiUgWyYCS2Q/HxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRl2cAxQBlCtBTdZQsGQYTFZZIFMB8GA1UdIwQY
MBaAFAHRmSFEDC8rIqd3eAKTvCf6R/NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEt
YWE2ZmQ0MzRlMGVmLzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEtYWE2ZmQ0MzRlMGVm
LzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBKvxXXp
bSoAn7wjj8vsLCqM3Zfr9AxZcr7WGSqccfGiiWnebjPC/UhJ6HwSmPkKfu4z3Ezb
YaRS1ppTlF1FqyLrdnWto+EUHHWzCknZHgV6ctE9RpyYewyGMliMl4e8+21cSnzB
ht8NzIUAqlPnEARk3tdP9OHrrxiUqX1MiQuAOTuuP6MThMa2u7zzvcTpKQezvkmd
tX70tJE/5Xv7NaIfr4/rSLpfFp6qC2JKJ/cJZSC5JzdcywEw8omrsmpxYFJm4oND
z9HDv0ELvR16ZG3RFAlFDmR4xx1MjfmK9vdpOIhskO9cgBZeE9w7TUalncujIbKC
3T1r6rVzd/vWJg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:54 2025 by rpki-client