Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
File: adcx-k3SksDAUy7qaWfOwHkHRao.mft (raw, json)
Hash identifier: 8BRMtLf51HFShHU00iPMwW1Xb8bQPveECxZ0j+Rl2Gg=
Subject key identifier: 62:F5:71:50:D0:75:78:CC:06:C3:71:81:DD:FC:63:90:BC:71:09:47
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial: 019A0B5D192B7E881C47E6BDE4F1A63524F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
Manifest number: 06EC
Signing time: Wed 22 Oct 2025 10:00:41 +0000
Manifest this update: Wed 22 Oct 2025 10:00:41 +0000
Manifest next update: Thu 23 Oct 2025 10:00:41 +0000
Files and hashes: 1: SWEdM65l-EYRwVqCTPoCOjy6GaM.roa (hash: Tv3EVv3dATD+Wzt7v7ZrOSKmfA3WJr20DMhoDuNr2kk=)
2: ZOAIGzltyHMXQU6ltllGlFexC3s.roa (hash: qgz3cg0yrRtsx1xhQCihERkPJV1q3/wNQ4j8DRBe274=)
3: adcx-k3SksDAUy7qaWfOwHkHRao.crl (hash: sesyjClz/KZfVBbnTipoPbk1VeALEmPCJRzYVhun3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:19:2b:7e:88:1c:47:e6:bd:e4:f1:a6:35:24:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Validity
Not Before: Oct 22 10:00:41 2025 GMT
Not After : Oct 23 10:00:41 2025 GMT
Subject: CN=62f57150d07578cc06c37181ddfc6390bc710947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:d1:e2:3e:36:df:50:9f:11:be:d6:ce:b6:
53:d6:0b:5b:3d:7a:fa:c9:94:d9:2b:ec:78:07:0f:
0a:ed:2b:f4:e0:cc:47:97:ed:0e:6f:64:14:f6:cc:
fa:c9:79:32:9a:db:c2:37:e9:1f:f5:88:dd:2b:20:
be:77:d0:56:e5:01:96:a9:d2:53:47:f7:5c:ca:49:
6c:cf:d1:6d:60:e8:0a:54:fb:38:f7:79:07:f8:b6:
1d:46:0c:2b:37:c7:a2:9b:14:19:a0:3f:ab:85:57:
aa:c8:ed:cf:32:40:4a:0b:ef:b4:09:40:c0:da:42:
12:78:22:d7:99:17:02:1c:a9:03:78:cf:91:a8:e5:
c0:6e:6e:8a:b4:74:4b:22:ed:5a:19:56:f4:38:99:
df:33:0f:65:57:0c:fc:9e:af:ca:ef:a5:b3:6f:44:
9c:7b:bf:56:c2:8b:46:b1:a1:97:c3:f7:bc:7b:57:
31:ac:d0:cb:56:76:ee:f2:a9:94:fb:ba:2c:6c:16:
90:29:73:ea:80:90:fd:60:1e:1a:61:21:ea:18:d6:
92:f3:c0:81:9c:f1:44:ed:17:6b:9d:82:04:45:5b:
a7:d0:e3:c6:b5:4d:09:7d:39:47:d7:9f:3f:a9:d4:
30:54:3f:b4:1c:a4:c9:5c:66:f9:18:ab:f7:8e:39:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:71:50:D0:75:78:CC:06:C3:71:81:DD:FC:63:90:BC:71:09:47
X509v3 Authority Key Identifier:
keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cf:3a:30:6c:51:a6:e6:08:3c:43:30:33:c3:d6:c9:dd:ca:
ac:3a:9c:f1:c5:78:b8:39:21:7d:c3:88:bf:23:5f:bd:f4:a8:
af:33:93:ab:83:1a:2e:3d:4b:0c:d0:d3:dd:90:fc:78:71:b7:
99:77:e0:cc:62:26:39:3e:8b:45:a9:73:11:97:6f:2b:35:33:
3d:7e:79:b0:ae:f8:96:01:1d:82:fe:b8:e5:e9:f3:43:49:5e:
ad:e4:9d:1a:73:99:4c:b2:1b:3f:7c:60:ad:c0:4e:ad:00:82:
df:da:63:7e:55:35:e9:ec:4d:5d:65:1c:aa:97:1a:99:2e:75:
7d:eb:d1:a5:d8:01:8c:a8:38:5f:a1:75:b9:cf:98:b6:1f:c9:
69:14:94:fe:b4:1f:e5:6b:a3:3f:72:63:4f:97:b0:3d:57:a2:
14:08:23:0a:b3:90:aa:48:12:12:16:f3:02:2c:a5:84:41:34:
f1:d4:89:71:36:73:1d:6f:92:aa:6c:ba:df:95:c6:66:1d:60:
9e:01:9a:ed:67:be:98:58:a7:7a:1d:cb:57:a8:d8:5a:ba:27:
54:7d:57:0e:e4:ea:25:b5:08:21:72:28:e9:91:e0:91:be:15:
c6:e6:85:74:7d:d3:15:5d:52:85:c6:61:c6:b8:3d:52:31:17:
aa:6a:0f:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLXRkrfogcR+a95PGmNST4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDczMWZhNGRkMjkyYzBjMDUzMmVlYTY5NjdjZWMwNzkw
NzQ1YWEwHhcNMjUxMDIyMTAwMDQxWhcNMjUxMDIzMTAwMDQxWjAzMTEwLwYDVQQD
Eyg2MmY1NzE1MGQwNzU3OGNjMDZjMzcxODFkZGZjNjM5MGJjNzEwOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM/R4j4231CfEb7WzrZT1gtbPXr6
yZTZK+x4Bw8K7Sv04MxHl+0Ob2QU9sz6yXkymtvCN+kf9YjdKyC+d9BW5QGWqdJT
R/dcyklsz9FtYOgKVPs493kH+LYdRgwrN8eimxQZoD+rhVeqyO3PMkBKC++0CUDA
2kISeCLXmRcCHKkDeM+RqOXAbm6KtHRLIu1aGVb0OJnfMw9lVwz8nq/K76Wzb0Sc
e79WwotGsaGXw/e8e1cxrNDLVnbu8qmU+7osbBaQKXPqgJD9YB4aYSHqGNaS88CB
nPFE7RdrnYIERVun0OPGtU0JfTlH158/qdQwVD+0HKTJXGb5GKv3jjmRSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGL1cVDQdXjMBsNxgd38Y5C8cQlHMB8GA1UdIwQY
MBaAFGnXMfpN0pLAwFMu6mlnzsB5B0WqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt
MzQzNjI0MTUxODJhLzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh
LzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUM86MGxR
puYIPEMwM8PWyd3KrDqc8cV4uDkhfcOIvyNfvfSorzOTq4MaLj1LDNDT3ZD8eHG3
mXfgzGImOT6LRalzEZdvKzUzPX55sK74lgEdgv645enzQ0lereSdGnOZTLIbP3xg
rcBOrQCC39pjflU16exNXWUcqpcamS51fevRpdgBjKg4X6F1uc+Yth/JaRSU/rQf
5WujP3JjT5ewPVeiFAgjCrOQqkgSEhbzAiylhEE08dSJcTZzHW+Sqmy635XGZh1g
ngGa7We+mFineh3LV6jYWronVH1XDuTqJbUIIXIo6ZHgkb4VxuaFdH3TFV1ShcZh
xrg9UjEXqmoPgw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 18:38:07 2025 by rpki-client