Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier: Ytkxf2SvDyIlbeqIctRPIE4H8kwQ29y3eLjaOECW3Vs=
Subject key identifier: DA:8A:4A:74:65:EB:0A:F6:10:D0:2E:63:32:DF:3B:AF:A6:A3:6C:CF
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 019A4DE18E41A2FB1AFCB95F750B4E154003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: zqvA+oaSsqylLM3P4kL+YAA2SrRb31ptYDCLc87EIWs=)
2: bxyY92T1b4aJfspeGWuPWUl-Kkw.roa (hash: nKzuSfhFZMZ8pqYL4zAcXBecFHY0kOuZwNpuiZWVnMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8e:41:a2:fb:1a:fc:b9:5f:75:0b:4e:15:40:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=da8a4a7465eb0af610d02e6332df3bafa6a36ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:5a:3e:4e:ed:2d:fc:12:06:fc:43:30:42:
94:36:50:bf:22:e8:19:75:59:5e:e1:c1:7c:b7:68:
78:50:60:4d:06:f7:d6:cc:fb:52:f6:a4:dc:fc:4d:
c8:a1:98:f6:37:51:c7:2e:b0:7b:f7:96:6e:14:49:
31:cc:f2:56:1c:6f:0f:9d:31:65:5a:7e:1a:cc:10:
f7:50:9d:b6:85:e3:43:cd:09:9c:2a:9a:b8:15:b5:
74:8b:ff:6e:9e:07:32:b9:f2:bd:e1:52:66:e2:1c:
af:8f:42:70:d0:cc:59:b0:73:ce:8f:03:c3:85:ba:
61:a8:29:c6:e2:57:04:86:19:26:b4:60:35:94:fe:
e1:10:b5:ec:e9:43:f9:5b:67:88:52:15:5b:89:81:
de:f2:8d:be:a2:ae:9a:e9:34:a9:e2:64:6b:a4:fd:
20:7d:9b:a4:9f:d3:84:b4:45:9c:94:c5:57:5c:d6:
21:76:fd:4b:7a:fd:73:9b:b8:76:79:aa:cf:10:81:
f3:85:5f:9a:65:56:8c:c0:83:45:1a:0b:83:7c:e2:
15:4f:47:78:3f:46:c3:29:6f:c9:3d:f1:e2:ee:66:
c8:a8:3f:c5:e7:d6:9f:1f:d7:17:41:6a:68:89:29:
d8:81:75:1d:36:b0:d3:32:be:38:06:60:93:44:7f:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:4A:74:65:EB:0A:F6:10:D0:2E:63:32:DF:3B:AF:A6:A3:6C:CF
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:09:05:dc:ec:d0:b7:a2:91:19:a5:83:0a:e8:a2:20:13:
d3:92:12:cc:9b:ac:81:0a:88:86:1a:7e:bb:8a:32:d5:6f:f7:
82:ad:1e:d5:ba:18:82:3c:44:04:c8:9c:b1:01:b8:5a:5e:ef:
41:3c:b0:17:d8:1d:ec:52:14:d4:56:ea:79:ec:d7:3e:15:1c:
dd:dc:c1:7c:a3:13:5a:dc:bb:f6:1d:08:de:a6:ba:cc:22:02:
32:fa:86:78:a1:bb:cc:d1:68:99:62:c5:f8:27:c6:d7:dc:c2:
c5:02:b9:a6:2d:5b:18:d6:59:8b:68:2f:30:96:ec:df:16:90:
ae:59:64:e3:62:75:a5:7b:b1:35:c6:79:69:dd:c3:de:16:99:
a6:4e:05:82:e2:0a:22:83:5e:30:ef:d3:9d:c9:09:8f:16:13:
ed:3d:ed:a1:80:4e:fd:5a:76:17:1a:3d:c9:1f:0c:e9:d2:8c:
ab:76:54:49:52:f0:a6:c9:39:5f:eb:2f:c5:34:1d:06:0b:68:
8b:cb:99:12:08:26:fd:97:2c:ca:ba:47:c9:c6:30:83:87:9b:
b7:32:cc:bf:14:ab:44:91:60:7b:40:53:ab:c1:ed:4e:f3:09:
d6:4c:70:e2:db:2f:6f:5f:64:95:16:e3:b8:de:8a:e8:a4:f6:
c1:33:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:13 2025 by rpki-client