Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: mNBUJTCZpMlhc4HPQianKUgLMERZ7QkaP1wyb7iWmo0=
Subject key identifier: 84:71:E7:73:2D:64:A9:A8:E9:F0:F6:3B:4C:3D:79:B6:25:8D:19:54
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 019A71B778F89F2D38F4D3715DF3C50A8CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 1719
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: gSGeOIMjyWj+2RSYy6L6U466Yd6WH7P3sSOpmc9iHM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:78:f8:9f:2d:38:f4:d3:71:5d:f3:c5:0a:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=8471e7732d64a9a8e9f0f63b4c3d79b6258d1954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:ce:44:99:05:2c:ce:16:01:39:8a:27:51:
0b:b8:1b:53:f6:7f:dd:e5:ac:88:63:b8:57:2d:16:
36:29:9a:b8:4f:22:81:0e:a3:c4:51:cb:88:50:45:
ec:7b:1c:e8:23:40:0f:fc:0d:8a:3d:f8:76:f2:d6:
a8:da:13:fd:57:87:a9:fc:26:53:d4:ec:1d:71:fb:
ff:2a:25:f0:25:20:60:bc:4f:16:d0:6e:26:91:a6:
c7:b4:4c:6d:91:39:fb:c5:84:97:1f:48:03:44:24:
d1:0c:e9:56:7d:7d:81:0b:50:14:33:cc:53:13:96:
ff:5b:3b:6d:8e:b2:b2:ee:17:aa:a4:14:c2:3e:5b:
63:29:98:bc:04:fe:83:33:b6:3b:65:8f:8e:39:35:
d2:b8:a0:73:62:39:53:d2:33:53:c7:59:ff:5a:b9:
69:96:96:7e:4b:aa:44:60:21:c4:f6:1e:9b:98:ad:
f1:b0:eb:fa:c5:29:8e:c6:4b:42:e0:c8:20:e3:f6:
d2:9e:fb:ca:e9:51:4e:3c:5b:1d:ae:7f:02:e6:dc:
38:61:17:4c:6f:0d:81:c5:38:b5:98:80:a4:c5:69:
35:1c:13:77:c3:34:43:7c:51:f7:81:02:e2:96:5a:
1e:db:0c:4c:44:d5:62:da:09:43:09:61:86:36:3d:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:E7:73:2D:64:A9:A8:E9:F0:F6:3B:4C:3D:79:B6:25:8D:19:54
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:61:06:dc:1c:77:13:45:17:a2:e6:59:4f:9d:16:95:5d:
23:b6:85:a0:88:e3:a3:2e:a6:8c:6b:48:d7:82:6a:06:21:93:
3a:74:af:44:d2:42:94:46:e8:dd:d8:69:e3:55:c3:0e:36:5b:
02:69:77:d1:4d:e3:8e:84:6c:7a:27:ad:21:b5:0c:2f:27:33:
86:cc:6e:b3:f0:05:dd:3e:9b:9b:be:66:94:95:d7:ad:ed:db:
37:7a:1f:ff:ee:6c:a3:c9:87:97:c3:aa:f1:f0:d3:f1:b6:fc:
ad:5c:bc:e2:35:98:3a:e2:fd:84:b9:c2:6d:68:82:b2:07:54:
4e:46:d9:74:51:72:28:ee:6d:c5:a8:41:24:0c:74:e7:4c:6a:
f8:1f:9d:c0:bc:0b:ea:5b:50:c6:c4:36:c3:e6:cc:a4:25:5b:
95:fd:87:40:da:e5:35:e8:78:e9:4e:cc:4a:77:be:50:ba:75:
09:39:ab:1c:65:87:53:df:c4:3b:08:5b:25:94:1b:b4:e1:77:
3d:74:93:74:07:50:df:f5:74:f6:7f:7b:6e:82:f1:c2:2e:b9:
77:2d:69:b7:e7:c5:a0:bb:3c:dd:1d:77:54:74:68:32:28:8c:
a1:c7:0f:59:01:66:b3:d9:42:65:94:24:92:2d:da:80:16:7a:
b7:48:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:20 2025 by rpki-client