Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File: AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier: ESCN9cv0+/vunrpdq1x7RfxXzdr4ccwUgpYWAF9wF78=
Subject key identifier: 7E:CD:4A:58:11:3D:54:2E:56:86:DE:54:B2:67:D4:9C:8F:E8:A8:0D
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 019917644A1AF11E1091659D09A47516B95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number: 06BE
Signing time: Fri 05 Sep 2025 01:01:12 +0000
Manifest this update: Fri 05 Sep 2025 01:01:12 +0000
Manifest next update: Sat 06 Sep 2025 01:01:12 +0000
Files and hashes: 1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: 7Dd04szzZNgJMkZpjIASvE1Ftwv5Jf6mKLHGIVuHzIE=)
2: jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa (hash: HIn2EZR8FCBtV+D1WmQeFC+W9f4d6g/d5Kn+DYMnwWM=)
3: s9CrfLdwyz1HofYuhgTm-G0XcWY.roa (hash: 5D2dFiucRImYcNfGCDutgF5vRQIcWGUYkXV/9xTSSbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:4a:1a:f1:1e:10:91:65:9d:09:a4:75:16:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Sep 5 01:01:12 2025 GMT
Not After : Sep 6 01:01:12 2025 GMT
Subject: CN=7ecd4a58113d542e5686de54b267d49c8fe8a80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:df:f8:24:ce:56:dc:40:42:e7:c4:d3:83:
60:05:f9:f7:b9:dc:bb:91:fa:76:db:d5:b9:01:f6:
df:eb:c8:7c:5e:3e:a9:d5:d6:9b:4c:20:9b:1b:bd:
bc:76:a0:9b:6a:42:95:76:cb:10:6d:8a:79:9d:71:
fb:13:eb:af:c3:0f:58:5f:2b:d4:29:e9:b8:0b:b6:
9b:a5:f4:b7:38:16:1c:4c:89:ca:0c:e0:fd:81:22:
c5:e4:b5:25:5d:47:f5:c5:55:60:30:c9:56:b2:9c:
cb:db:bf:9f:2f:95:a7:31:67:73:4b:ed:0e:8f:66:
26:bd:b2:a4:40:1b:44:73:8a:2b:81:6b:56:b7:cd:
77:20:40:76:a1:a6:b7:86:d2:fb:a5:ba:4a:36:59:
7e:9b:a8:4c:d9:b5:f3:70:30:a6:04:33:a6:8a:c0:
7a:63:07:8b:5b:f1:bc:3b:40:25:60:1c:47:66:ef:
09:08:02:87:d0:25:13:55:17:ce:89:10:db:8a:f4:
c6:55:41:7b:9b:24:92:d7:31:49:ed:c0:79:59:41:
a9:a8:64:95:e7:ba:96:ff:85:0b:3e:93:c6:cb:b3:
a9:85:21:13:97:87:d9:79:b6:ae:bc:fd:55:cd:d3:
b9:81:16:20:38:aa:8e:a4:d5:e9:c2:66:e4:aa:ff:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:4A:58:11:3D:54:2E:56:86:DE:54:B2:67:D4:9C:8F:E8:A8:0D
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d7:a6:aa:ce:b5:04:8e:9c:76:ba:23:0e:aa:dd:06:9b:e9:
3a:a5:e5:a4:6f:87:dc:61:be:48:de:af:4d:9e:22:52:01:2e:
9c:b8:39:93:6a:5b:96:64:c0:1a:cd:96:4c:22:83:ec:e7:19:
ef:ee:6e:28:3d:9e:00:c1:a0:d7:b6:98:f1:0d:1c:56:fb:e3:
8b:47:5f:a3:e1:12:d6:41:3e:a7:7f:dd:61:af:62:77:2f:5f:
41:b8:79:97:3e:7b:4c:c9:80:35:07:3a:61:ce:fb:25:6c:4e:
f9:56:3f:5c:c7:b2:5f:b6:e3:b0:b7:a8:42:f6:89:71:48:ef:
67:6b:37:10:96:a7:d6:10:0d:98:5a:b4:bd:23:eb:e8:cd:3d:
7d:04:3d:c5:69:28:26:6c:62:94:9f:9b:0f:00:b5:c0:1f:bd:
34:4d:ad:d0:aa:3e:8f:7a:92:33:a7:63:37:e6:50:da:c4:44:
b0:82:a3:34:17:7b:50:0d:51:85:20:2f:b4:15:fa:43:c6:62:
fd:7a:c0:6c:47:7c:d5:2e:92:02:d9:9c:a9:35:a5:9f:ee:a6:
61:cb:44:9b:63:7e:e0:9b:e3:df:c1:68:4b:6c:01:69:3d:cd:
53:e3:99:83:a0:02:01:76:ad:0b:01:6c:ce:2c:ab:c9:fb:e0:
b2:c7:c0:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXZEoa8R4QkWWdCaR1FrlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDUwYjk4MDcxNTBkYTM5NjMyMmI5ZDRkY2ZjMGQyZmIy
YjY1MjAwHhcNMjUwOTA1MDEwMTEyWhcNMjUwOTA2MDEwMTEyWjAzMTEwLwYDVQQD
Eyg3ZWNkNGE1ODExM2Q1NDJlNTY4NmRlNTRiMjY3ZDQ5YzhmZThhODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYjf+CTOVtxAQufE04NgBfn3udy7
kfp229W5Afbf68h8Xj6p1dabTCCbG728dqCbakKVdssQbYp5nXH7E+uvww9YXyvU
Kem4C7abpfS3OBYcTInKDOD9gSLF5LUlXUf1xVVgMMlWspzL27+fL5WnMWdzS+0O
j2YmvbKkQBtEc4orgWtWt813IEB2oaa3htL7pbpKNll+m6hM2bXzcDCmBDOmisB6
YweLW/G8O0AlYBxHZu8JCAKH0CUTVRfOiRDbivTGVUF7mySS1zFJ7cB5WUGpqGSV
57qW/4ULPpPGy7OphSETl4fZebauvP1VzdO5gRYgOKqOpNXpwmbkqv+dUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7NSlgRPVQuVobeVLJn1JyP6KgNMB8GA1UdIwQY
MBaAFAHVC5gHFQ2jljIrnU3PwNL7K2UgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRVTG1BY1ZEYU9XTWl1ZFRjX0EwdnNyWlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lYTcxYTAtNjk0MS00Mjc2LTk1ODkt
ODEyNGJkOTQ5YjBlLzEvQWRVTG1BY1ZEYU9XTWl1ZFRjX0EwdnNyWlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lYTcxYTAtNjk0MS00Mjc2LTk1ODktODEyNGJkOTQ5YjBl
LzEvQWRVTG1BY1ZEYU9XTWl1ZFRjX0EwdnNyWlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2demqs61
BI6cdrojDqrdBpvpOqXlpG+H3GG+SN6vTZ4iUgEunLg5k2pblmTAGs2WTCKD7OcZ
7+5uKD2eAMGg17aY8Q0cVvvji0dfo+ES1kE+p3/dYa9idy9fQbh5lz57TMmANQc6
Yc77JWxO+VY/XMeyX7bjsLeoQvaJcUjvZ2s3EJan1hANmFq0vSPr6M09fQQ9xWko
JmxilJ+bDwC1wB+9NE2t0Ko+j3qSM6djN+ZQ2sREsIKjNBd7UA1RhSAvtBX6Q8Zi
/XrAbEd81S6SAtmcqTWln+6mYctEm2N+4Jvj38FoS2wBaT3NU+OZg6ACAXatCwFs
ziyryfvgssfAJQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:52:48 2025 by rpki-client