Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier: EmmE9JA7WEIKeE+VINJMf7mogqQ3R4wEfaJHpJYayWM=
Subject key identifier: 20:C2:3B:27:B5:0A:00:AE:F4:C1:26:0E:0B:FA:B2:2A:23:5A:20:58
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 019A71B78787ADBD5027E36DC8F933C358AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number: 17A1
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: wblULEv8L8mp0uhk9g6dUwMdQhoVmfHM8q6YxRItTw8=)
2: Qag3TzhF7KhIYH5aibVcZEo78dU.roa (hash: LGNFeenPDMIIHhq8fjkVK3bg4N97KxBcN+ypQDigoxM=)
3: RgaWFiRFDAayyVG_Z9AIPT1MMZo.roa (hash: YH48TeYg9Yf1bfvyMBSVb5xUh3j6na8VomUspmp0pss=)
4: iUQqy6L6aDZjvtuJxQqMCFgGkBI.roa (hash: 2s0toD9du/uNKvxO9wvANUSYpPI3MyFsTUVNofTuzE8=)
5: vux6kFwpBUkuJvt9MGI0-OndmYQ.roa (hash: SsewcomJRN+4b8wQ2MGVZVNLvCQFuWU8SrIutsyFvJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:87:87:ad:bd:50:27:e3:6d:c8:f9:33:c3:58:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=20c23b27b50a00aef4c1260e0bfab22a235a2058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b7:23:0b:b0:e1:a7:fd:0f:8c:f3:5d:44:95:
79:07:c7:c4:1e:7e:2d:a3:e3:56:3b:2f:0b:4d:b7:
24:25:c7:71:d9:4d:59:6a:46:35:b6:94:3d:2f:4d:
e7:5c:97:b7:6b:4d:6c:1d:6f:72:cf:fb:af:ca:19:
d9:81:43:6f:ce:1d:0f:7a:0b:63:e9:01:ea:0d:5e:
36:8e:a7:78:8c:3e:18:41:44:68:63:73:1f:b1:d3:
1c:50:0f:33:df:16:1f:64:35:59:d6:50:ee:a1:4f:
bd:cf:76:24:e3:78:7f:03:16:cb:03:32:8d:72:8a:
d8:55:84:7e:ce:19:e0:f4:1c:aa:03:2e:08:b1:eb:
90:61:0d:ab:64:db:6f:4b:e0:12:b4:26:5c:32:24:
33:a3:44:d6:0b:18:38:3d:a0:36:26:73:96:5d:ee:
4d:a8:c1:26:b9:44:a4:4a:c9:a2:95:ba:63:91:a5:
02:06:a9:1b:d9:6b:9b:b1:58:fa:2e:32:dd:6b:26:
d3:52:3e:e7:8c:a2:e7:47:ca:66:69:1d:d9:fd:32:
79:6d:43:aa:7d:05:8f:4f:07:14:71:af:e7:36:73:
5d:01:11:75:4b:c6:8d:04:6a:e2:8e:49:91:c5:62:
a9:92:93:a7:35:37:42:42:63:bf:76:c0:72:9a:7d:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C2:3B:27:B5:0A:00:AE:F4:C1:26:0E:0B:FA:B2:2A:23:5A:20:58
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:ee:26:b9:eb:64:5e:31:6d:49:be:1b:a8:08:72:7a:b2:
d8:27:58:99:a7:9e:b4:e8:9e:0a:53:de:77:00:1c:26:ff:09:
50:b7:b7:1e:3a:d4:8a:91:0c:37:e9:88:fc:77:ff:cb:a9:23:
3d:f0:1a:24:ea:3d:18:96:0c:ab:46:a1:44:ba:9d:89:73:95:
8f:9c:aa:89:a3:9c:af:26:66:32:4d:7a:81:da:e6:6a:2b:4e:
a4:95:ad:5a:56:86:ca:37:a0:ff:82:c7:84:c4:26:2a:e1:1f:
08:04:a6:5a:16:b7:49:ac:ed:df:1e:42:3c:f3:b0:e9:ba:dd:
0a:57:07:67:7d:01:56:5c:07:8b:aa:18:96:f1:c9:85:44:d0:
d4:52:4b:6a:b3:79:83:8b:09:51:0a:aa:45:39:cd:f5:d7:96:
b7:1c:6c:08:f0:8d:0d:69:a0:95:e8:37:16:63:b9:1b:8c:cc:
c5:0b:64:07:5b:5f:44:2b:6c:b5:66:79:b1:6a:28:1d:61:7c:
b6:71:2e:35:3a:60:ba:01:30:cd:19:e9:6d:9b:99:59:51:e1:
a0:1a:b8:aa:cd:f1:31:59:c9:d5:3b:ec:57:a9:90:2a:5f:c2:
f8:f7:c0:de:3b:d1:c8:1b:d3:7c:f4:b9:0e:9d:37:0e:2c:71:
bb:b5:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:05 2025 by rpki-client