Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
File: AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json)
Hash identifier: tam8nLsWvIY5XkIVQqOV4SL1mNoWiR3eM5zi7FgRkBI=
Subject key identifier: 1C:F5:55:DD:3E:C1:AA:BB:6E:B5:40:C0:74:60:14:CC:D0:E1:05:6D
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Certificate issuer: /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial: 019A28C2C2665314B383608B1BCF62AB991D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
Manifest number: 0933
Signing time: Tue 28 Oct 2025 03:00:43 +0000
Manifest this update: Tue 28 Oct 2025 03:00:43 +0000
Manifest next update: Wed 29 Oct 2025 03:00:43 +0000
Files and hashes: 1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: OYL170OoY/BytsUhlwOXzlKdlw313BInAgqke2ufUrs=)
2: ZAHBHHaAw7FsCrpLUbPA7Y_af1E.roa (hash: BHI7TthhK/CKdv2M5Vzp/LT9A37tVvweSFfs+BtDAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:c2:66:53:14:b3:83:60:8b:1b:cf:62:ab:99:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
Validity
Not Before: Oct 28 03:00:43 2025 GMT
Not After : Oct 29 03:00:43 2025 GMT
Subject: CN=1cf555dd3ec1aabb6eb540c0746014ccd0e1056d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:97:93:eb:23:96:a9:9d:ec:1f:fe:58:5a:
7f:e5:28:6a:0e:ab:3a:5e:0e:d6:ca:e9:1c:ca:25:
de:82:86:64:c9:6e:76:e6:1b:96:df:27:d5:24:e0:
f0:cd:6a:c6:93:bc:95:1c:92:56:4d:6b:58:31:6a:
b6:91:ac:1a:4b:90:c1:b6:09:d4:98:87:ee:f4:0f:
18:7b:85:a2:d0:04:78:e1:9c:dc:61:15:48:e6:87:
cd:04:54:30:f5:d7:ac:15:be:20:cc:e1:e1:95:3c:
e5:01:5a:fd:74:f5:cc:de:32:b0:ed:18:ce:97:dd:
c3:70:b4:a4:63:20:0e:13:ca:d6:4b:5b:7a:2e:88:
9d:77:98:37:c7:43:8a:12:8b:4c:17:d3:56:a9:5e:
3c:a9:fb:01:29:0c:02:82:fb:8b:50:f0:74:c1:4f:
bd:d7:a9:39:e1:8b:7c:51:91:99:4b:38:71:d7:04:
32:e4:9e:84:4c:a3:da:0e:d2:00:46:5f:cf:77:8d:
69:b7:14:05:f3:27:82:29:7a:19:98:27:e1:fb:a3:
c8:46:1c:1f:23:60:6d:d8:fd:24:74:41:94:80:d7:
3a:9b:29:0a:59:09:23:08:f1:e5:c7:9f:0a:30:2d:
9a:2d:4c:3a:6f:f9:16:83:dd:63:44:25:af:b6:ae:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:55:DD:3E:C1:AA:BB:6E:B5:40:C0:74:60:14:CC:D0:E1:05:6D
X509v3 Authority Key Identifier:
keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b6:a0:e8:14:93:f4:0c:19:5c:9e:dc:35:cb:f6:22:84:ed:
18:16:f7:7f:51:c6:cb:b3:cc:e5:43:5a:22:4f:6a:7d:0d:c4:
fe:3a:58:af:0e:21:34:e2:3e:b6:c3:ea:32:e7:9e:54:9c:16:
4d:ab:db:e5:3a:e8:ff:dd:04:18:56:8a:a9:27:f2:e5:22:9f:
4d:1c:61:20:32:fa:eb:ff:43:04:08:f9:0e:d7:d0:2f:de:56:
cd:bf:c4:4e:56:3a:4b:52:02:47:06:9f:3f:8d:c2:9a:75:eb:
c2:95:96:95:f5:22:be:d2:4a:d2:86:6b:10:c9:bc:38:49:ba:
2a:09:df:ec:a6:71:fb:32:d2:82:38:fe:ce:b3:15:4c:9b:ba:
8e:c9:b6:db:0d:c5:1f:ee:f1:34:0d:4d:18:30:f1:59:7e:36:
48:19:f0:c3:9b:37:c1:aa:75:0c:ac:cc:4c:63:f7:02:92:f8:
68:19:54:b6:1f:55:c4:61:eb:8b:b9:27:21:28:e3:be:e7:51:
25:8b:c1:fa:36:8e:20:21:db:67:45:5d:d5:10:5b:34:50:e3:
de:83:1b:b1:0a:f6:f8:7e:f8:7c:08:99:1e:67:3a:77:88:09:
cd:ec:2a:7e:f4:b8:5f:0d:b2:06:43:68:92:39:06:2d:61:68:
09:45:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:05:15 2025 by rpki-client