Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: tCreNAbKQyhnCwOX8DKwwPvIENICBobwkJSR0kKh19w=
Subject key identifier: 61:58:86:73:47:1D:A3:9A:E4:7F:23:FD:74:8E:8F:E0:94:21:85:16
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 019A4FCFC5EFC01D4EDC543890123D0BF80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 17:00:07 +0000
Manifest this update: Tue 04 Nov 2025 17:00:07 +0000
Manifest next update: Wed 05 Nov 2025 17:00:07 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: h15tkxqzrbPvGGr0OB5vJJYVuYZLI5Ki3nt/hUSXnK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:c5:ef:c0:1d:4e:dc:54:38:90:12:3d:0b:f8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Nov 4 17:00:07 2025 GMT
Not After : Nov 5 17:00:07 2025 GMT
Subject: CN=61588673471da39ae47f23fd748e8fe094218516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:59:a1:64:c9:ee:57:00:22:d4:b9:47:81:
44:c8:ba:5b:bf:a1:44:37:8c:de:8d:19:ee:a3:23:
4a:a8:5f:23:28:5c:04:ee:92:5b:a4:29:8d:ee:9b:
96:cf:a6:51:2b:38:f9:fb:3e:ae:9f:b3:27:cb:26:
b7:f4:5c:5d:66:61:0f:a3:91:01:5c:f9:bc:35:7b:
56:8d:d4:eb:7d:94:21:27:d8:9a:c3:ec:45:f6:59:
ea:30:56:28:46:17:ee:52:0e:13:e2:68:8e:79:4a:
88:72:bc:5a:c7:d7:52:a2:e9:eb:57:e3:9e:63:17:
e7:7b:21:ff:0d:88:a9:1d:1b:67:5a:f2:72:ec:05:
00:2d:fc:d0:57:a3:09:eb:dc:e1:50:cb:8e:00:4a:
76:43:f7:78:99:8c:53:bf:5f:b0:52:cb:bf:8c:d2:
02:9f:44:84:6a:f8:2c:e0:0c:e4:8a:b8:51:c9:11:
99:54:9e:5a:b9:7a:c7:78:04:a7:9c:b1:1c:82:1c:
20:22:2e:86:76:a3:a3:0b:c2:06:0f:c3:90:28:84:
2f:cf:1b:77:d2:11:8f:2a:44:94:b9:f4:f9:ff:53:
18:09:6f:35:7d:4b:45:ad:94:19:47:ac:c2:25:3d:
73:f2:9c:ae:fa:45:11:d5:c4:09:26:64:df:97:5d:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:86:73:47:1D:A3:9A:E4:7F:23:FD:74:8E:8F:E0:94:21:85:16
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:09:f4:d8:77:a2:2e:53:74:74:e3:2e:94:82:62:d6:e1:e7:
91:90:97:89:ff:c3:24:3e:db:22:93:86:1d:3f:83:68:4c:99:
cf:89:3d:e6:59:ed:ae:bb:89:0a:3d:5b:f9:8b:82:ab:d9:3b:
13:d8:e7:71:bd:02:a5:3d:05:86:95:00:e0:85:44:88:0a:54:
1c:84:b5:51:ef:f5:b3:ea:c4:ad:b3:5d:e9:05:91:f5:b6:c4:
dc:20:00:86:27:70:45:40:01:96:32:b3:ae:db:f9:1b:f6:e0:
ab:4d:0e:c3:13:8b:22:d9:12:39:47:41:a1:2c:4e:ce:f4:cd:
6e:c8:13:cc:7e:7b:9c:f6:6b:71:07:d7:3d:2d:ba:03:f4:b4:
21:86:56:d0:b2:70:93:91:12:70:d3:f1:03:3e:e4:a1:cc:7c:
e0:07:43:2d:26:97:3e:98:7b:26:3b:27:50:d9:d6:2a:fd:27:
e7:41:e8:49:56:6a:cd:2e:bc:60:b3:76:d1:41:cd:3a:f5:b3:
14:ff:02:fe:b1:b0:6d:92:2e:c7:29:c2:b3:c9:b5:7a:fd:02:
97:1b:ec:52:9d:c0:6f:1c:14:56:d4:97:a9:b3:48:26:d2:bd:
57:22:46:90:81:d4:89:40:3d:a3:08:de:88:7e:80:d9:a2:14:
90:82:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:56 2025 by rpki-client