Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier: N3wQsj/jJST2O6SFu/3MB/HM/Q7CVBpOD9mORNLZmLs=
Subject key identifier: D6:B1:47:04:B4:43:04:9F:48:0F:F4:B9:43:9C:8B:C0:F7:E3:4D:A2
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 01974D0E20BE2C2DC0B0D62E0AB5BAD1BDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 01:01:00 +0000
Manifest this update: Sun 08 Jun 2025 01:01:00 +0000
Manifest next update: Mon 09 Jun 2025 01:01:00 +0000
Files and hashes: 1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=)
2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: P3I0FFhssJAo3ggEJ+9lLrmRr0IG5k5EZxSFO/NfUco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:20:be:2c:2d:c0:b0:d6:2e:0a:b5:ba:d1:bd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Jun 8 01:01:00 2025 GMT
Not After : Jun 9 01:01:00 2025 GMT
Subject: CN=d6b14704b443049f480ff4b9439c8bc0f7e34da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:b3:3b:97:cc:04:1f:b9:cc:74:b5:4f:dc:
82:a4:7f:b8:57:4b:fe:22:4d:e7:84:ef:dd:6f:fe:
38:bc:54:37:79:78:14:91:41:8e:7a:61:96:6d:3d:
1a:0d:3c:92:61:a2:ac:e7:73:71:a7:08:5e:3c:b8:
e2:fd:90:d6:12:b4:3b:49:76:94:cb:ec:5e:48:cd:
d1:ed:7a:8d:e4:41:b2:f3:e3:48:07:19:10:ad:c9:
07:b4:d7:5d:6a:74:1b:b3:44:f0:d1:41:46:b9:47:
33:21:4c:77:a5:63:c3:2c:c4:17:b0:0f:45:62:d5:
ca:1d:79:f6:ed:33:4d:f0:62:41:4f:d7:93:45:c8:
91:a2:d9:d4:d8:02:36:d2:fe:6e:0a:28:44:c7:81:
a1:88:09:b6:0a:20:fe:de:20:f3:20:c6:04:c7:58:
fd:7a:ea:14:19:5f:78:2e:16:8d:c9:18:cb:ab:4d:
ef:af:d4:b8:61:0b:a7:0a:0c:48:04:6d:5a:13:09:
69:22:86:30:06:08:d7:31:86:c2:49:55:04:c1:eb:
1e:cd:9a:ca:24:91:49:68:94:c8:69:fe:49:84:fc:
7b:2c:52:f5:af:f5:d4:fd:e9:06:a3:85:43:fd:41:
ce:5f:f6:83:26:fe:87:f1:1e:87:7c:50:8d:41:49:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:47:04:B4:43:04:9F:48:0F:F4:B9:43:9C:8B:C0:F7:E3:4D:A2
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d7:78:62:dc:cb:f8:bc:f2:9c:e9:35:ed:f2:43:07:3a:2d:
66:12:66:21:a5:b2:74:bb:70:ab:23:8a:c9:32:29:d7:8c:76:
a2:96:4a:01:ac:a2:28:56:b5:2f:0a:4b:09:84:a9:ba:2b:4a:
de:66:67:99:28:2a:a9:22:2e:da:38:e5:2e:bc:fc:88:ea:c9:
f9:eb:62:9c:b2:50:54:9a:b6:6d:09:ca:30:b8:81:4c:2a:23:
2a:4f:37:20:bf:2d:bd:4e:5b:c3:a3:dd:21:8c:38:2f:cd:71:
73:16:6d:74:77:96:de:88:e9:48:61:2f:57:fb:64:79:7c:cd:
0b:6d:d7:bf:30:d2:33:0c:ed:11:1c:a6:99:ab:ab:19:58:c1:
8f:d0:25:62:70:c9:20:5d:65:24:58:ee:8e:3f:cb:d4:13:c6:
1e:eb:e6:4e:4f:14:6e:2e:1b:c6:72:bb:6f:d6:70:19:ac:9b:
b8:27:d7:64:e5:e3:eb:13:42:99:ad:55:c6:df:c0:a6:9d:c1:
47:a7:25:76:d5:1b:94:7d:64:96:fa:b3:05:14:67:66:5b:13:
e6:82:08:68:a1:8e:34:c7:6c:3a:2d:53:a9:a9:5e:d9:97:53:
3a:62:5d:79:ab:09:58:e6:11:1c:a0:d7:3a:12:c2:72:ea:97:
ea:8f:cf:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDiC+LC3AsNYuCrW60b3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDVkNDUyYThlZDUzNTI4N2ZlYjM2NTE0YmM4N2MwMjIz
NTVhNDMwHhcNMjUwNjA4MDEwMTAwWhcNMjUwNjA5MDEwMTAwWjAzMTEwLwYDVQQD
EyhkNmIxNDcwNGI0NDMwNDlmNDgwZmY0Yjk0MzljOGJjMGY3ZTM0ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqWzO5fMBB+5zHS1T9yCpH+4V0v+
Ik3nhO/db/44vFQ3eXgUkUGOemGWbT0aDTySYaKs53NxpwhePLji/ZDWErQ7SXaU
y+xeSM3R7XqN5EGy8+NIBxkQrckHtNddanQbs0Tw0UFGuUczIUx3pWPDLMQXsA9F
YtXKHXn27TNN8GJBT9eTRciRotnU2AI20v5uCihEx4GhiAm2CiD+3iDzIMYEx1j9
euoUGV94LhaNyRjLq03vr9S4YQunCgxIBG1aEwlpIoYwBgjXMYbCSVUEwesezZrK
JJFJaJTIaf5JhPx7LFL1r/XU/ekGo4VD/UHOX/aDJv6H8R6HfFCNQUmmxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaxRwS0QwSfSA/0uUOci8D3402iMB8GA1UdIwQY
MBaAFGnV1FKo7VNSh/6zZRS8h8AiNVpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2Yt
ZGQ5NDQzNTc5ZWQ1LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2YtZGQ5NDQzNTc5ZWQ1
LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9d4YtzL
+LzynOk17fJDBzotZhJmIaWydLtwqyOKyTIp14x2opZKAayiKFa1LwpLCYSpuitK
3mZnmSgqqSIu2jjlLrz8iOrJ+etinLJQVJq2bQnKMLiBTCojKk83IL8tvU5bw6Pd
IYw4L81xcxZtdHeW3ojpSGEvV/tkeXzNC23XvzDSMwztERymmaurGVjBj9AlYnDJ
IF1lJFjujj/L1BPGHuvmTk8Ubi4bxnK7b9ZwGaybuCfXZOXj6xNCma1Vxt/App3B
R6cldtUblH1klvqzBRRnZlsT5oIIaKGONMdsOi1Tqale2ZdTOmJdeasJWOYRHKDX
OhLCcuqX6o/Pww==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:45 2025 by rpki-client