Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: r02AUZqSVbJwsYWB7n8kcpmSjk/VvQhjhVZj6iPTBuo=
Subject key identifier: 3B:08:A5:73:9C:F4:F4:3D:F2:12:65:C1:53:A6:75:31:1F:81:DF:AE
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019A7112BC9FA475E16F138D5C754081C32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: EXcgXgEb/QQ8R2a8yv9oR0nWeE8xoMd1EOG06cu3kCY=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bc:9f:a4:75:e1:6f:13:8d:5c:75:40:81:c3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=3b08a5739cf4f43df21265c153a675311f81dfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:b8:9d:6f:d3:61:ec:2e:fd:a9:9a:36:f7:
a0:42:a4:0e:7c:10:e9:03:2f:bc:a6:ce:e4:5f:9b:
82:42:65:b3:6f:c8:18:10:db:de:9f:e1:98:cd:87:
05:b2:5e:03:94:58:38:7f:4f:d3:13:c6:14:a8:29:
ea:70:b3:26:43:98:67:2c:40:2f:b0:1b:d5:df:83:
8b:6c:0c:4b:3f:2f:29:66:8d:42:83:51:dd:66:c0:
42:73:30:fb:e0:9d:f8:91:e1:cb:e3:be:72:b4:27:
25:a3:50:14:5f:ae:51:2a:9c:3a:8f:84:2d:8e:5b:
63:44:2e:77:b6:83:6c:d7:0f:c7:6a:0e:b0:15:e2:
c8:1c:68:38:62:27:aa:09:ca:04:88:7a:f8:16:a5:
fe:3f:e7:d6:f5:15:b1:74:49:b9:6e:6b:ae:a0:9a:
3a:de:46:4a:1d:99:75:71:9b:3f:36:94:4b:22:0e:
29:14:bb:10:1c:77:c4:df:36:26:ae:3b:f5:89:3f:
91:05:d6:56:61:7f:9e:6a:1a:63:03:3e:e7:13:aa:
59:11:06:27:9e:3c:88:90:b4:01:b2:09:dd:ac:58:
16:a3:48:aa:3b:ad:9d:3e:f3:8a:04:64:de:3f:de:
9b:87:87:46:d6:1d:e0:7f:27:a3:a1:d0:68:94:76:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:A5:73:9C:F4:F4:3D:F2:12:65:C1:53:A6:75:31:1F:81:DF:AE
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fa:b1:75:ac:d9:e5:a9:09:2c:4b:71:91:12:92:00:ea:48:
2c:ab:a6:22:97:33:2e:c5:94:07:4e:bf:4c:59:64:f7:c1:2f:
84:d1:ca:8b:da:3a:32:07:52:95:0b:6d:9f:3d:83:29:3a:51:
bf:dd:3e:4e:aa:eb:92:48:61:e1:37:e1:46:89:6e:54:58:38:
1c:22:21:f6:54:48:be:59:20:e2:ed:95:06:f1:11:66:47:35:
45:c0:2f:43:b6:32:4f:f9:a8:d7:1c:ee:b5:b7:e4:c9:c4:22:
3a:92:71:f3:b0:1b:aa:08:6c:6a:bf:b6:77:75:ad:24:85:5a:
53:61:4d:78:38:78:ec:c3:45:3b:00:dc:6d:12:59:45:f8:d2:
02:b8:6c:3e:fd:2e:14:37:7d:24:d2:8d:62:f1:fc:90:ce:9f:
09:b5:5f:a0:05:0d:d6:39:7d:17:19:93:34:a2:c9:34:66:b0:
68:a9:09:48:b2:4e:d3:47:a5:2e:87:40:f1:60:35:7e:91:8a:
cb:eb:12:e1:c7:ce:61:fb:f0:8e:0d:68:a3:8a:21:0d:e4:0b:
3b:06:78:e3:6a:29:cc:94:d4:34:df:10:d5:61:55:21:08:cb:
80:09:4b:2c:0b:91:fc:7c:93:01:20:d2:74:c4:a2:1c:cf:0f:
91:5d:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:02 2025 by rpki-client