Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier: SkVTgdLXhnIShddLHjqR0KXw//TCUXVL+OAXa61/AeQ=
Subject key identifier: 8F:C2:5E:FA:12:6D:FF:D1:A7:6D:B8:76:77:80:5C:DD:53:6A:DB:51
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 019951C0EC18D769D4951ADFD11AE1C8154D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number: 170A
Signing time: Tue 16 Sep 2025 09:00:21 +0000
Manifest this update: Tue 16 Sep 2025 09:00:21 +0000
Manifest next update: Wed 17 Sep 2025 09:00:21 +0000
Files and hashes: 1: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: woaBEvU0+nZkNV7YtOezh4Sjk6hsbXVlClLC9tv0Dyc=)
2: Qag3TzhF7KhIYH5aibVcZEo78dU.roa (hash: LGNFeenPDMIIHhq8fjkVK3bg4N97KxBcN+ypQDigoxM=)
3: a2opnLjAdetXY_1JtX6e5k1djAk.roa (hash: JHmWYExOHBSKedqf+sSdese/XJZ0oxQzlwRK0J1GOlU=)
4: iUQqy6L6aDZjvtuJxQqMCFgGkBI.roa (hash: 2s0toD9du/uNKvxO9wvANUSYpPI3MyFsTUVNofTuzE8=)
5: pGRf_UUtjRt-_g2C1JVet-aTzvE.roa (hash: FTLP858yB7qWwsssBb1qn2lRhr6UD4obl8X6eHrvZsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:c0:ec:18:d7:69:d4:95:1a:df:d1:1a:e1:c8:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Sep 16 09:00:21 2025 GMT
Not After : Sep 17 09:00:21 2025 GMT
Subject: CN=8fc25efa126dffd1a76db87677805cdd536adb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:21:3c:ed:62:b3:58:13:ad:5b:f6:d8:14:
48:4f:fd:47:a8:a1:22:e5:48:95:06:18:60:26:c6:
91:f4:3b:f9:21:0c:fe:27:8d:6d:05:13:51:00:6d:
be:53:0d:b1:c4:6e:58:0d:9f:26:64:f6:57:06:dd:
a6:d6:ac:ea:99:d7:98:4e:71:ad:75:06:71:59:95:
a9:f8:f3:32:25:4a:2e:00:1a:3f:a2:52:f2:50:56:
88:5e:20:d6:4f:5b:4b:44:a1:f6:52:a2:2a:18:2c:
27:32:93:cf:3b:53:0d:95:1e:22:0e:49:30:3d:51:
d5:01:5c:72:31:be:6e:45:68:ee:7c:4b:c1:06:14:
f4:bc:80:16:80:24:6f:0a:7f:14:65:28:85:cf:44:
49:40:a1:56:37:9c:c2:4e:ee:07:16:53:01:bf:22:
0d:51:98:8f:4b:2d:3f:a3:bd:3f:c6:1b:45:9c:5d:
ec:0e:45:fd:47:d2:27:bd:47:5a:6d:30:d8:ca:f3:
43:06:08:4a:3b:cc:0c:a2:41:4d:21:f9:f7:e8:15:
63:83:f3:16:d6:0d:db:75:f9:30:01:4b:79:87:21:
49:20:db:26:d4:ed:b3:89:7e:56:08:4d:9e:d6:b0:
e0:f2:13:ec:b4:91:59:95:60:d4:8c:15:95:07:4a:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:5E:FA:12:6D:FF:D1:A7:6D:B8:76:77:80:5C:DD:53:6A:DB:51
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:38:5c:47:1e:1c:0b:d4:a6:33:14:8b:29:79:64:c3:6c:44:
3a:a3:8c:ec:fc:9a:c2:80:d3:18:89:b3:c6:31:67:3e:fb:19:
08:ea:6d:bf:46:48:c1:c0:1b:f0:18:e2:16:20:a7:3c:26:73:
be:fc:e8:4a:44:64:81:52:ad:0c:ef:90:91:22:8d:11:7c:37:
b6:e0:bd:9e:a6:5c:b7:6a:b7:7b:d6:91:7b:bc:0c:e9:3f:39:
ea:d8:cf:51:37:1c:2b:e8:84:51:e3:f1:66:cf:2b:96:8e:dd:
1f:38:a2:c4:10:9d:c4:22:f8:0e:4e:00:c3:16:03:be:c0:1d:
22:e6:5b:ed:06:ba:47:e9:7c:cc:6f:3a:1e:f8:24:e8:9b:82:
02:3a:d0:e7:88:1e:1f:b6:bd:47:1a:ed:94:de:31:7f:57:c1:
ef:a9:9c:0a:88:71:69:03:ed:0e:d7:24:ad:27:77:22:e3:da:
98:f4:1d:24:ea:b6:8e:21:be:52:a7:a4:66:fc:f0:ec:4e:f0:
fd:4b:d4:43:2e:44:3e:e7:a7:a3:ea:38:90:2c:8f:ed:21:35:
e1:73:5e:86:3d:49:ed:b4:f3:50:07:52:de:c5:0e:02:06:18:
6c:32:97:1d:e7:b7:e5:db:5b:cf:c1:cd:1f:17:4f:19:dc:3c:
59:47:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:20:43 2025 by rpki-client