Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: WPvFqnBlpQnrcLsRyuyZHvpq+BS8MCFg/1NQfUcFCr8=
Subject key identifier: 81:8D:DA:17:2D:CB:66:33:EA:AF:F2:6A:9E:A1:F4:71:80:CC:C1:B5
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 019847ADEDC5236F9C4090EC153BE1F6CF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 0F3F
Signing time: Sat 26 Jul 2025 17:00:37 +0000
Manifest this update: Sat 26 Jul 2025 17:00:37 +0000
Manifest next update: Sun 27 Jul 2025 17:00:37 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: HenmsjaO4DXuGy9CGSlUHkaHAtESIBEzZD5820+AXlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:ed:c5:23:6f:9c:40:90:ec:15:3b:e1:f6:cf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Jul 26 17:00:37 2025 GMT
Not After : Jul 27 17:00:37 2025 GMT
Subject: CN=818dda172dcb6633eaaff26a9ea1f47180ccc1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:96:48:11:26:b8:46:16:df:6c:5a:9b:a6:
8e:da:1f:4c:40:04:96:88:7c:2d:95:59:18:ba:2e:
df:44:ac:36:c6:65:02:b0:b9:e2:54:38:5d:7e:3c:
c2:a0:93:ab:dc:b9:dd:30:fb:59:f9:4f:a9:f4:14:
1c:6f:3f:30:c4:ec:1f:59:dd:52:c9:ed:50:07:27:
8f:fa:5a:30:ed:a2:b8:a8:ee:55:ed:15:5b:77:b2:
04:a2:52:76:07:b7:60:2a:3c:fb:41:65:19:6a:db:
02:69:58:da:0f:ef:cf:40:40:b9:04:8e:9c:5e:0e:
64:46:94:8b:62:64:43:59:6b:a3:78:2d:17:20:56:
b2:6a:9a:6c:48:c4:65:fe:34:d9:47:81:56:66:fb:
f3:bd:f0:28:96:f9:c2:6c:69:e3:dc:a9:d9:59:f9:
5d:d4:ad:b6:c3:df:85:bd:a5:1d:e8:2a:71:76:d8:
e4:14:c5:0f:67:5b:2a:89:c5:2d:01:f0:ec:1d:ed:
99:aa:d5:16:2f:c2:a5:0f:fc:83:59:5a:01:9e:f9:
62:ac:08:b3:9a:e8:a9:be:6a:fb:8c:e5:10:32:02:
12:65:df:76:74:da:d8:85:bc:72:0f:3a:f5:74:92:
2b:ba:f6:85:b6:a0:2d:96:8c:9a:30:d6:a7:5f:a0:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8D:DA:17:2D:CB:66:33:EA:AF:F2:6A:9E:A1:F4:71:80:CC:C1:B5
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d9:2e:39:9e:a6:40:7d:7f:5c:c9:04:e0:11:75:21:b8:ff:
cf:7c:30:1f:53:95:95:c7:e4:77:4e:4d:9c:2e:76:c5:42:29:
a1:0f:a7:c9:01:6c:3a:11:f9:76:b4:f9:52:19:16:d5:19:9a:
51:8e:0f:49:23:74:36:be:d0:48:fb:19:bf:64:85:97:f6:a4:
0d:9c:e9:7c:d4:c8:f7:87:91:43:f7:6b:d2:fe:ff:f9:ab:48:
0b:4e:0d:98:51:ae:56:b7:a0:ae:c9:bd:97:66:7b:35:ba:cc:
81:80:47:93:83:cb:28:cf:79:93:13:c9:24:f0:1a:77:cf:be:
9f:57:1c:ba:d2:a5:37:ce:97:4f:c7:58:9d:8f:f6:2f:b4:a3:
33:c7:a4:4e:3d:b2:07:01:a8:0f:6f:cf:a4:25:25:ae:23:f1:
ec:44:e8:b2:5a:eb:57:58:10:9c:0a:35:8c:32:59:34:a4:0a:
3b:1a:1f:3d:7d:bb:4b:da:f7:60:1f:88:0b:03:ed:8d:44:94:
e3:4c:97:b6:c9:01:78:5f:08:54:a5:0c:27:6e:33:5d:16:f2:
94:b1:81:48:00:29:13:bc:27:3f:79:fa:9a:f3:8a:dd:a4:82:
0a:f3:f0:d9:2f:59:76:7e:6e:5c:64:1a:d1:01:42:1b:5d:62:
37:43:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:26:11 2025 by rpki-client