Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: kOBnHZ1w5u+tTj2XWWnwAjel1ZHk8vAjAD1lY0HaLA8=
Subject key identifier: 28:76:72:D9:FA:83:4C:5F:09:11:FA:0E:37:F6:75:B2:FF:98:CF:34
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 019A70A4C7354467068C2F9F9CF3F215D60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:00:38 +0000
Manifest this update: Tue 11 Nov 2025 02:00:38 +0000
Manifest next update: Wed 12 Nov 2025 02:00:38 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: dOLaf841kF1EV2IYZgFNL5+fRfUUOs2CgTyGaEEquDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:c7:35:44:67:06:8c:2f:9f:9c:f3:f2:15:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Nov 11 02:00:38 2025 GMT
Not After : Nov 12 02:00:38 2025 GMT
Subject: CN=287672d9fa834c5f0911fa0e37f675b2ff98cf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:76:6f:b7:6d:5d:9f:b3:22:18:85:91:15:
29:09:54:e8:a1:01:79:ef:78:26:8e:be:c2:d8:d1:
bf:3c:63:36:c0:fe:1b:7f:72:3e:0e:bf:89:19:00:
61:20:6d:81:0e:38:9d:62:8c:0d:50:18:7c:1f:15:
52:f1:d4:55:c2:82:54:be:b3:9e:5b:10:41:11:cd:
4c:2f:c4:f0:21:c8:9e:74:c0:3b:2f:ca:d8:2d:f4:
85:c3:3f:5d:b0:51:90:cc:91:46:f4:5d:04:23:48:
2c:c9:26:f0:d2:71:70:01:5b:67:88:33:76:d1:d9:
e2:5e:56:5b:c1:8b:37:50:b5:03:6d:ae:59:ae:11:
a3:30:2b:4f:5d:a0:1d:75:e3:f4:44:cd:17:2d:16:
15:85:88:a0:f6:46:ac:86:5a:2b:9c:2b:3f:dd:0a:
ae:52:f3:2c:22:eb:4a:15:9f:21:00:ec:8e:95:8d:
7e:9c:5e:85:12:40:70:79:31:20:36:3b:67:5d:b4:
cb:47:b5:48:7e:2c:91:58:b6:1b:af:66:99:69:b0:
b5:0f:4e:2d:1e:33:a1:d5:8a:f1:ef:5f:41:18:36:
85:18:c9:f1:5f:b1:f4:b7:ac:1f:1a:f4:13:20:8d:
3a:7d:bf:85:4a:56:df:62:d1:fd:00:80:59:e5:89:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:76:72:D9:FA:83:4C:5F:09:11:FA:0E:37:F6:75:B2:FF:98:CF:34
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a7:01:98:1c:be:b6:d5:72:ee:9d:72:d4:73:0b:48:3b:f3:
3b:9a:c5:d5:b3:4c:f1:3a:ba:dc:70:d3:4f:65:74:e0:b6:a6:
1a:78:44:0d:13:be:8e:b9:58:a4:e0:bc:d2:c7:5d:b2:7f:50:
76:2a:ab:30:e8:84:c2:55:28:03:65:77:49:fb:92:3b:9f:69:
15:f1:c5:c6:7b:67:ec:0f:a1:25:59:72:75:d1:0f:a0:d3:ad:
f6:cd:c5:1a:1c:d7:46:0f:7c:4f:92:58:cd:d2:5b:18:ce:aa:
aa:21:a5:98:d8:6e:7a:a1:c9:d1:bf:2d:48:a4:63:c8:f3:b2:
d7:a1:3e:08:45:80:ab:68:86:3a:e0:5d:09:a2:ef:43:4d:94:
ec:df:68:5d:28:e5:16:3c:6e:99:93:90:9c:e5:34:c3:32:57:
1b:95:36:9f:a6:8d:e6:9a:29:61:bb:33:65:90:41:21:dc:75:
88:b4:1d:4f:61:b6:82:0d:73:50:62:c7:ae:4d:65:a4:81:f5:
cc:1d:5f:d5:61:5a:7c:9c:cc:5d:59:05:19:ab:90:f2:34:73:
60:34:c0:f2:bb:b5:e2:f5:65:ad:fc:02:ed:6f:6d:b7:ee:f9:
8b:27:e6:04:18:a1:84:2b:9d:d1:bf:c1:e8:14:6d:af:e8:5e:
ad:89:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client