Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier: 8AmmOlbfJSskkQ+zNgZ8YePqYqSZiWf63e7Libb4kZI=
Subject key identifier: DE:59:27:BD:49:F5:12:17:2B:AF:F0:33:97:EC:38:B4:4D:81:A6:15
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 019A2B1E9E06E3041298C00C090F206455F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number: 168D
Signing time: Tue 28 Oct 2025 14:00:17 +0000
Manifest this update: Tue 28 Oct 2025 14:00:17 +0000
Manifest next update: Wed 29 Oct 2025 14:00:17 +0000
Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: BmU220arIAcECOvVamEo+cKq0nECmaq0ngKnz70sKZI=)
2: bxyY92T1b4aJfspeGWuPWUl-Kkw.roa (hash: nKzuSfhFZMZ8pqYL4zAcXBecFHY0kOuZwNpuiZWVnMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:9e:06:e3:04:12:98:c0:0c:09:0f:20:64:55:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Oct 28 14:00:17 2025 GMT
Not After : Oct 29 14:00:17 2025 GMT
Subject: CN=de5927bd49f512172baff03397ec38b44d81a615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:8f:72:e3:4f:ff:ed:bb:fd:87:f9:4c:5b:
91:f8:2f:b5:eb:65:65:6c:97:33:24:5f:c7:52:14:
0d:0e:8b:71:ed:10:13:07:3e:d0:42:77:45:bf:9b:
df:df:89:c9:f6:07:4a:d9:9c:e2:36:09:db:06:b0:
50:9b:ac:ca:89:40:5e:34:bb:a9:d9:b4:a2:e5:28:
aa:85:e9:ae:f0:43:13:94:73:70:b7:71:a5:a0:d7:
42:5f:19:a9:a4:c2:2e:2d:32:42:13:2a:8c:df:49:
88:49:e2:95:a9:30:76:21:cc:86:56:2d:72:80:72:
08:6a:e6:1c:fa:ae:19:14:54:b7:a9:f1:72:29:0c:
04:4f:2d:70:fc:41:46:c2:f1:00:fb:9c:7c:c0:3c:
da:5f:24:9d:85:25:dc:ad:78:b0:2f:84:6a:95:6a:
1c:c7:2a:d4:03:ad:c1:8c:98:40:93:6b:8b:cf:ba:
4e:54:c4:0a:54:a5:2b:14:6b:48:f5:a1:52:cd:d8:
a7:1d:bb:2c:f4:f1:3d:1c:4d:d6:cf:91:58:f1:aa:
08:a1:e1:b2:3a:92:46:c5:eb:de:31:15:38:f5:66:
c8:3c:64:10:df:ed:5e:95:8a:45:52:ca:c7:52:20:
9c:68:ef:c0:1d:dc:f8:30:55:e1:d5:de:15:9a:6b:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:27:BD:49:F5:12:17:2B:AF:F0:33:97:EC:38:B4:4D:81:A6:15
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:ae:85:b5:38:06:18:58:2b:55:f7:ae:05:13:dc:99:f2:
95:78:66:43:98:c9:a0:a0:92:6c:bb:bd:55:4c:e7:b7:95:c7:
9c:b6:f3:69:34:fa:1b:9b:a4:7d:fc:3e:6b:0e:b9:43:ee:1d:
ff:c7:50:29:09:42:77:e7:dd:08:fc:3e:66:1a:34:00:53:f9:
a0:a1:8f:28:02:b0:41:4b:31:9c:81:40:42:54:a9:47:ba:50:
52:64:7d:8d:3e:cb:0d:47:cf:f6:93:f8:b5:ab:22:f7:60:c1:
8a:9c:3b:b7:25:b2:70:9f:ea:34:07:53:3c:17:27:1a:35:23:
f1:84:52:bc:1c:83:34:ed:6b:15:c5:94:49:aa:eb:da:04:d9:
c4:df:9b:5e:27:7d:e0:9b:bb:93:01:d2:33:30:ae:53:f6:3d:
6d:ab:3b:bd:4e:6d:eb:71:99:87:a8:2e:ce:b4:ea:3f:b4:11:
70:9c:15:d6:7e:28:5e:f7:97:39:38:64:76:f8:c4:90:c8:f4:
4e:64:19:b0:a7:51:0e:73:f4:85:27:56:6a:fa:0c:39:2b:14:
94:c2:e1:1a:bc:5c:85:68:24:ec:b6:67:b8:7b:04:38:3e:02:
ba:ca:91:8d:d6:4a:fa:a2:df:76:fb:54:55:51:08:ca:68:9c:
ae:d6:0e:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorHp4G4wQSmMAMCQ8gZFXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3
NGUxNzAwHhcNMjUxMDI4MTQwMDE3WhcNMjUxMDI5MTQwMDE3WjAzMTEwLwYDVQQD
EyhkZTU5MjdiZDQ5ZjUxMjE3MmJhZmYwMzM5N2VjMzhiNDRkODFhNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtryPcuNP/+27/Yf5TFuR+C+162Vl
bJczJF/HUhQNDotx7RATBz7QQndFv5vf34nJ9gdK2ZziNgnbBrBQm6zKiUBeNLup
2bSi5Siqhemu8EMTlHNwt3GloNdCXxmppMIuLTJCEyqM30mISeKVqTB2IcyGVi1y
gHIIauYc+q4ZFFS3qfFyKQwETy1w/EFGwvEA+5x8wDzaXySdhSXcrXiwL4RqlWoc
xyrUA63BjJhAk2uLz7pOVMQKVKUrFGtI9aFSzdinHbss9PE9HE3Wz5FY8aoIoeGy
OpJGxeveMRU49WbIPGQQ3+1elYpFUsrHUiCcaO/AHdz4MFXh1d4Vmmvb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5ZJ71J9RIXK6/wM5fsOLRNgaYVMB8GA1UdIwQY
MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt
MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3
LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIyuhbU4
BhhYK1X3rgUT3JnylXhmQ5jJoKCSbLu9VUznt5XHnLbzaTT6G5ukffw+aw65Q+4d
/8dQKQlCd+fdCPw+Zho0AFP5oKGPKAKwQUsxnIFAQlSpR7pQUmR9jT7LDUfP9pP4
tasi92DBipw7tyWycJ/qNAdTPBcnGjUj8YRSvByDNO1rFcWUSarr2gTZxN+bXid9
4Ju7kwHSMzCuU/Y9bas7vU5t63GZh6guzrTqP7QRcJwV1n4oXveXOThkdvjEkMj0
TmQZsKdRDnP0hSdWavoMOSsUlMLhGrxchWgk7LZnuHsEOD4CusqRjdZK+qLfdvtU
VVEIymicrtYOgQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:23:15 2025 by rpki-client