Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File: AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier: 0QNm2u04/s29wzlh3r41P5Sv0TLfLgDDA/UbAD+4e18=
Subject key identifier: B4:39:94:DB:A0:E1:91:54:AB:CE:8A:28:03:F1:0C:7B:40:28:58:57
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer: /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial: 019A4FD0140DA9E5D809FF45D50B917F2404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number: 144B
Signing time: Tue 04 Nov 2025 17:00:27 +0000
Manifest this update: Tue 04 Nov 2025 17:00:27 +0000
Manifest next update: Wed 05 Nov 2025 17:00:27 +0000
Files and hashes: 1: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: LBCp0wCGjAXF7gltDducqaPl6KCdv8Mj/Q2cANGLiyU=)
2: uZb6h7TLe1-lJihPhirYKpDZ4mY.roa (hash: aDykphD+aoMx3Jh78ZAzXroKL36r82PVvsKm3+s85wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:14:0d:a9:e5:d8:09:ff:45:d5:0b:91:7f:24:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Validity
Not Before: Nov 4 17:00:27 2025 GMT
Not After : Nov 5 17:00:27 2025 GMT
Subject: CN=b43994dba0e19154abce8a2803f10c7b40285857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:28:db:64:de:96:4b:ea:98:dc:13:b0:67:
5e:2e:60:72:4d:e7:04:59:8b:cd:54:38:a3:34:f6:
b8:e0:7d:85:a4:09:7f:05:b5:dd:b3:cb:6e:9c:a4:
a5:b3:ac:6f:43:42:be:d8:11:e1:27:82:8d:11:83:
60:d0:38:7e:fd:80:2f:af:5b:da:4e:a9:c6:26:54:
70:c5:56:8b:33:87:53:58:4b:16:7b:69:eb:5b:5a:
31:36:c9:14:a0:2c:bd:8c:0c:79:40:1e:e3:fc:63:
3b:dd:b4:1b:3a:4c:7d:4b:8c:a4:4f:53:be:ec:85:
53:67:91:ef:da:85:69:3b:9f:86:9d:f3:86:57:99:
13:16:63:25:11:b1:dc:d4:7d:17:6d:93:ee:18:12:
b5:da:04:54:30:71:90:ec:e6:df:61:86:83:46:41:
ba:2e:95:8d:59:6c:e7:4f:23:fa:5d:fb:3a:6b:da:
3b:90:10:af:18:9f:e9:77:bc:e6:1b:ea:57:3f:35:
c1:f3:f7:99:1d:6e:f8:5e:b9:6d:0e:a0:46:15:db:
2f:20:04:2b:f5:0e:f3:57:2f:4c:9b:ca:2d:77:1c:
f8:62:c8:c3:e3:01:9a:78:34:ac:51:96:36:a1:78:
33:9f:2c:75:ab:41:79:ca:ba:64:9b:99:ed:5c:e3:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:94:DB:A0:E1:91:54:AB:CE:8A:28:03:F1:0C:7B:40:28:58:57
X509v3 Authority Key Identifier:
keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:5d:a9:6f:21:14:20:52:f4:83:51:22:82:80:06:8c:73:
f4:b2:e4:77:c8:1f:bd:90:94:98:ea:56:28:f7:6d:3d:ed:6b:
7e:a0:91:f7:00:92:c7:2c:72:c1:94:b0:96:fb:0c:8f:1f:5b:
58:b4:67:0a:93:1e:fc:cd:48:4c:9a:59:e7:82:cc:d2:33:42:
c8:ed:d4:ec:ae:ab:02:a0:f4:5e:e2:a1:27:4f:91:27:5f:cb:
9e:b6:3a:35:2f:09:c1:af:c3:9a:77:53:90:ee:b2:83:ca:9e:
ee:4d:7c:ae:fa:80:19:c3:15:20:ce:5a:70:70:16:e2:61:d4:
52:b5:1b:05:58:0f:84:af:77:43:31:77:b9:d5:ab:56:b1:d3:
26:df:a3:09:dd:f9:9f:3d:ee:8e:db:12:a9:d3:a4:ea:5e:92:
64:91:de:41:d3:6f:4e:31:02:19:32:00:5e:11:86:e0:cd:ca:
dd:71:d0:94:76:b6:fa:48:d9:e9:a7:03:a0:12:90:49:4f:74:
6a:40:82:47:20:10:68:01:17:df:92:1f:d5:eb:50:33:d0:03:
01:1b:24:07:30:87:5b:8d:d5:88:b5:d0:fd:59:a5:4a:80:4d:
ea:60:9e:45:bc:6f:c7:e9:da:89:6d:fe:ec:15:a1:4e:63:07:
b2:67:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:12 2025 by rpki-client