Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
File: AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json)
Hash identifier: 3DopgD4sNNFGUvYW0WDWU53KjkZgJTQec+T3AdZmmWQ=
Subject key identifier: F4:82:76:A4:DA:3F:2A:B6:16:55:3D:0E:84:75:AA:9D:09:CC:3B:B3
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Certificate issuer: /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial: 019A4D746DD7EA99FAAD962C75ED44309C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
Manifest number: 0946
Signing time: Tue 04 Nov 2025 06:01:06 +0000
Manifest this update: Tue 04 Nov 2025 06:01:06 +0000
Manifest next update: Wed 05 Nov 2025 06:01:06 +0000
Files and hashes: 1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: ai9oNn2SG1LcDE/nzbeXJEVOKQhzjVy/38d5PwFTpOM=)
2: ZAHBHHaAw7FsCrpLUbPA7Y_af1E.roa (hash: BHI7TthhK/CKdv2M5Vzp/LT9A37tVvweSFfs+BtDAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6d:d7:ea:99:fa:ad:96:2c:75:ed:44:30:9c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
Validity
Not Before: Nov 4 06:01:06 2025 GMT
Not After : Nov 5 06:01:06 2025 GMT
Subject: CN=f48276a4da3f2ab616553d0e8475aa9d09cc3bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:02:67:73:83:bc:04:38:10:40:af:e6:0a:
30:1c:a6:32:7f:e6:15:d9:55:b9:50:24:14:11:d5:
f2:f5:d6:39:bc:e1:eb:0d:bc:14:7d:61:41:30:74:
93:15:84:66:b1:10:a7:86:1d:08:66:45:93:49:9b:
01:42:1c:85:56:17:56:6d:e7:0a:b0:6f:56:ff:47:
79:c7:4f:26:4b:98:e5:d4:2d:1d:40:92:01:8d:82:
c8:5c:bf:d1:49:1e:4c:2f:7e:53:c6:ac:0d:91:b3:
88:71:4d:18:fd:55:28:e0:66:f0:4f:84:b9:f8:26:
1a:28:7b:41:38:ed:a8:46:55:4c:48:c0:b6:6e:5c:
fd:ca:8e:87:39:10:a7:e2:6b:84:fa:ba:f4:66:41:
65:70:3d:6a:2f:27:9d:ef:58:82:b0:f8:3c:00:9c:
32:d7:dc:52:e8:b4:f7:e1:94:70:2b:95:bd:fc:e4:
24:16:18:02:cc:d5:4f:0b:f2:14:a4:e4:33:96:0c:
75:e2:1d:23:de:0f:cf:f1:fc:ed:b5:a1:06:b9:9c:
22:2d:f6:5f:a2:63:d1:a7:43:00:c4:dd:03:1c:92:
cd:de:ac:fd:fe:9c:98:e3:cc:ab:66:95:5c:90:ff:
4e:a4:8e:1e:fd:39:03:ba:4c:ac:61:82:c8:8f:08:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:76:A4:DA:3F:2A:B6:16:55:3D:0E:84:75:AA:9D:09:CC:3B:B3
X509v3 Authority Key Identifier:
keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c6:77:f5:da:11:6d:5f:bc:58:20:47:06:75:12:ee:2f:78:
1d:18:3b:fd:cb:32:6b:09:cd:e6:78:78:65:d7:6f:ed:fc:30:
df:06:3a:5b:32:3d:49:71:95:de:f5:29:ad:f4:43:c9:12:5d:
a3:8f:2a:17:91:71:31:63:bb:f1:f1:3d:a6:02:63:a1:af:83:
58:bd:5c:c6:f8:8c:ff:37:91:6e:e6:05:ea:2e:26:8c:8e:c3:
fb:d4:d2:2c:a3:ad:ef:d5:f6:c7:5f:e7:51:ab:bc:ca:62:93:
53:7a:6a:a8:e6:55:04:1e:c0:7f:bd:84:48:12:d4:31:e4:d2:
09:86:25:b9:6b:b4:3f:58:c7:f6:e1:42:f3:c9:e8:dd:95:1c:
6b:82:9d:4f:01:b0:a8:0c:af:ba:b9:14:84:dc:29:55:07:d7:
62:48:bb:79:c3:f5:e1:99:a1:38:5b:ff:da:c2:d6:7f:36:a0:
c9:11:84:d1:c9:ac:27:01:b8:82:37:63:f1:86:f8:5f:ba:79:
86:87:ad:6e:d2:bd:94:c9:f9:70:18:e3:81:90:8a:db:62:24:
27:13:d6:e9:ba:5d:2a:f4:4f:6e:d2:a4:cd:2a:0b:71:07:a9:
4a:85:2b:56:7b:e2:d2:90:fa:51:b7:b1:7e:f7:9a:7c:36:a2:
98:b0:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:42 2025 by rpki-client