Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
File: Adm2sACkY7CVvgtY_HIaT6nApGY.mft (raw, json)
Hash identifier: lIqtobYl3mZ44fjdBUeh2Tvug0reAk2PjBu+o1jPAc4=
Subject key identifier: 39:0A:AB:0A:34:AE:14:56:7F:FE:FD:50:FA:85:96:48:34:46:93:FB
Authority key identifier: 01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66
Certificate issuer: /CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
Certificate serial: 019A725D0267363B117C1A99A88AF53B8D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
Manifest number: 07CE
Signing time: Tue 11 Nov 2025 10:01:29 +0000
Manifest this update: Tue 11 Nov 2025 10:01:29 +0000
Manifest next update: Wed 12 Nov 2025 10:01:29 +0000
Files and hashes: 1: Adm2sACkY7CVvgtY_HIaT6nApGY.crl (hash: xg0MqxzKrZKUBU0u51wo2RR2HrOdQpJtFrmRuJMS/as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5d:02:67:36:3b:11:7c:1a:99:a8:8a:f5:3b:8d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466
Validity
Not Before: Nov 11 10:01:29 2025 GMT
Not After : Nov 12 10:01:29 2025 GMT
Subject: CN=390aab0a34ae14567ffefd50fa859648344693fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:bd:1b:f0:82:f2:65:06:5e:26:92:78:69:
6e:5f:5e:e5:7a:34:80:2f:89:19:43:44:89:96:97:
f3:d1:82:21:8e:58:a0:1d:d8:ad:6c:28:98:aa:32:
4d:17:b6:e4:5b:83:1f:30:c3:e2:d0:7c:2f:dd:3d:
13:cf:e4:22:b3:60:a8:d7:92:b5:3c:b9:1c:f9:42:
62:b1:f1:7f:26:3f:ae:85:7a:f7:f6:4a:de:f4:ac:
1c:ea:46:23:ef:0e:66:b3:ae:0b:dc:ba:0f:92:9a:
47:53:fb:7c:4e:0c:bd:40:b9:87:70:5a:c5:0f:1c:
2c:69:c5:38:ba:01:eb:a0:65:f8:ab:9b:1c:30:9c:
60:65:66:47:da:df:b4:ca:45:91:ea:82:2a:ba:8a:
bf:7c:e8:20:ab:ae:01:99:00:7c:25:2e:d7:f8:4b:
50:8e:87:1c:23:3e:3a:4d:26:9d:72:be:d5:97:9f:
57:7e:85:ed:e6:84:f6:c0:88:b3:90:73:9f:40:bb:
3d:d3:3f:f7:a7:46:d4:65:aa:a6:11:00:c0:3d:49:
6d:ae:ab:f6:73:50:9f:ad:05:07:fc:42:be:a9:e2:
59:29:ba:ef:b7:3c:44:10:93:3a:0a:e0:61:e6:b8:
d6:72:35:8d:48:38:cb:f5:0c:12:e8:50:dc:4d:16:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0A:AB:0A:34:AE:14:56:7F:FE:FD:50:FA:85:96:48:34:46:93:FB
X509v3 Authority Key Identifier:
keyid:01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:11:49:39:38:7f:33:6c:55:01:27:71:0c:9d:cd:20:7f:dd:
a5:64:7f:88:d1:2e:a7:79:f5:7b:8a:8a:a6:33:dd:18:0a:f9:
59:6e:11:0b:b3:5e:ad:f7:6f:6e:21:f7:bd:bb:fe:bd:3f:c5:
ab:a1:b4:a9:61:76:5f:29:d1:7f:f5:89:16:9e:21:b1:09:ba:
dc:47:b2:cc:5f:ab:58:ea:e1:5f:65:9b:d6:e8:b1:70:6d:94:
96:4d:ce:45:b8:27:db:20:35:a4:0a:b8:66:e4:9a:fb:b9:d2:
15:9b:fc:4f:f2:1a:94:b8:94:32:6e:a0:38:cb:ef:a9:1b:1b:
37:34:0f:3c:c4:76:f8:2e:21:10:06:ed:2c:c4:a0:78:e1:10:
f4:96:b3:6b:36:6f:fd:da:62:fd:51:36:09:56:5d:24:97:9b:
d2:f2:08:dd:68:64:1b:6f:2e:fa:ae:76:b9:56:57:39:13:db:
98:6d:04:0c:f3:61:a3:39:08:b4:67:b7:1e:04:96:40:70:d5:
d2:0d:88:84:c2:cc:45:29:53:4e:04:8a:a4:dc:49:4c:1f:68:
53:8c:4c:d4:9c:cf:bd:67:47:fa:c6:33:1f:80:56:ed:d4:f8:
d6:46:c7:e0:17:93:19:a7:88:19:f5:39:e0:1f:1a:43:e9:79:
52:09:86:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXQJnNjsRfBqZqIr1O42EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDliNmIwMDBhNDYzYjA5NWJlMGI1OGZjNzIxYTRmYTlj
MGE0NjYwHhcNMjUxMTExMTAwMTI5WhcNMjUxMTEyMTAwMTI5WjAzMTEwLwYDVQQD
EygzOTBhYWIwYTM0YWUxNDU2N2ZmZWZkNTBmYTg1OTY0ODM0NDY5M2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ym9G/CC8mUGXiaSeGluX17lejSA
L4kZQ0SJlpfz0YIhjligHditbCiYqjJNF7bkW4MfMMPi0Hwv3T0Tz+Qis2Co15K1
PLkc+UJisfF/Jj+uhXr39kre9Kwc6kYj7w5ms64L3LoPkppHU/t8Tgy9QLmHcFrF
DxwsacU4ugHroGX4q5scMJxgZWZH2t+0ykWR6oIquoq/fOggq64BmQB8JS7X+EtQ
joccIz46TSadcr7Vl59XfoXt5oT2wIizkHOfQLs90z/3p0bUZaqmEQDAPUltrqv2
c1CfrQUH/EK+qeJZKbrvtzxEEJM6CuBh5rjWcjWNSDjL9QwS6FDcTRbusQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkKqwo0rhRWf/79UPqFlkg0RpP7MB8GA1UdIwQY
MBaAFAHZtrAApGOwlb4LWPxyGk+pwKRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRtMnNBQ2tZN0NWdmd0WV9ISWFUNm5BcEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83YzA0Y2MtYzllYy00ZDM3LTljZDMt
ZDY2NWVhOGQzMTk0LzEvQWRtMnNBQ2tZN0NWdmd0WV9ISWFUNm5BcEdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83YzA0Y2MtYzllYy00ZDM3LTljZDMtZDY2NWVhOGQzMTk0
LzEvQWRtMnNBQ2tZN0NWdmd0WV9ISWFUNm5BcEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhFJOTh/
M2xVASdxDJ3NIH/dpWR/iNEup3n1e4qKpjPdGAr5WW4RC7NerfdvbiH3vbv+vT/F
q6G0qWF2XynRf/WJFp4hsQm63EeyzF+rWOrhX2Wb1uixcG2Ulk3ORbgn2yA1pAq4
ZuSa+7nSFZv8T/IalLiUMm6gOMvvqRsbNzQPPMR2+C4hEAbtLMSgeOEQ9JazazZv
/dpi/VE2CVZdJJeb0vII3WhkG28u+q52uVZXORPbmG0EDPNhozkItGe3HgSWQHDV
0g2IhMLMRSlTTgSKpNxJTB9oU4xM1JzPvWdH+sYzH4BW7dT41kbH4BeTGaeIGfU5
4B8aQ+l5UgmGjw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:57 2025 by rpki-client