Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: 4LMuEYra0Fv1T9MjGu6G6Z7GhLoHtqTbOGv3bA/a1rI=
Subject key identifier: EA:D6:75:33:77:8B:21:E8:9F:E7:5F:51:24:E1:A8:F6:BD:1D:D9:96
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 0198D5BB77BEE432C5565E0AAD06CA3708E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: fziMlBzSe0QRrOFk6suqlfAhQJqidTWyRbf8oQTVA6o=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:77:be:e4:32:c5:56:5e:0a:ad:06:ca:37:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=ead67533778b21e89fe75f5124e1a8f6bd1dd996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c0:f2:6c:d0:1a:37:05:97:30:a8:3b:70:f9:
96:dd:7c:ea:67:cf:b6:0f:27:17:d6:ed:63:72:8a:
fb:42:63:a2:7e:dc:87:cf:c4:d5:ca:aa:76:33:d9:
91:1a:e5:76:85:38:e5:c5:a4:ea:06:4f:57:5d:a3:
3d:0a:dc:3b:a1:1b:31:93:21:c1:5e:a8:8c:2a:44:
b8:9b:0c:4c:23:a0:6c:43:e7:4e:33:00:a8:04:36:
7c:c5:c5:ff:e1:d2:13:97:4f:4c:9f:0f:a8:4c:0e:
1d:9a:d0:f6:43:d0:af:d1:75:11:55:c8:8d:fb:a0:
e8:13:eb:be:f5:83:b2:57:bd:e8:af:1e:04:63:2d:
d8:1a:8c:7c:56:62:5a:da:fe:6a:9e:a9:b6:21:02:
3a:c4:51:a7:9e:c1:92:87:7a:5c:5b:fa:3b:d5:89:
a1:af:27:e2:57:82:64:54:9b:f7:43:17:67:ae:ba:
df:47:7d:90:32:c0:9e:92:d6:ea:72:f4:a7:fa:69:
f9:02:25:b7:ba:77:86:c3:f3:fd:73:6f:78:8f:fa:
15:21:1e:ae:ee:96:3b:b6:e6:4a:fa:62:03:28:d2:
25:c1:ed:50:57:07:74:8f:db:de:98:27:9f:bc:9c:
8d:f1:21:28:c2:b1:40:e5:fd:30:70:19:03:d7:35:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:75:33:77:8B:21:E8:9F:E7:5F:51:24:E1:A8:F6:BD:1D:D9:96
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ad:54:a0:ab:63:04:e7:78:5e:65:4b:2a:c7:a7:e1:7a:0f:
96:46:aa:91:3c:d6:21:d5:72:c1:63:52:d8:68:50:81:a2:e8:
ae:03:df:a4:49:6a:a3:92:b1:4a:b5:ac:fc:32:92:d0:5d:97:
1b:6e:78:d0:57:a9:b5:7f:16:d1:df:e3:f5:51:c1:4e:a1:8f:
76:e6:1f:10:8c:c6:70:fc:19:48:4f:47:59:bc:e2:61:c4:8f:
31:10:ff:1b:8e:aa:c1:ff:a7:b4:a1:64:4c:1c:fe:32:ca:4e:
bd:c8:1e:2f:6b:fc:12:17:a2:ef:e0:ab:e0:61:0a:67:41:fc:
99:6a:0b:56:f6:77:e3:48:70:15:36:0e:1d:54:a2:09:08:e8:
c7:5e:e9:f7:76:9b:c0:ef:f1:6f:27:11:eb:5f:f6:57:8a:5d:
a3:1d:50:11:79:ad:cd:5b:67:fd:ed:2c:dc:47:81:0d:6a:89:
f5:7b:e9:87:a9:32:4a:de:a9:af:c5:bb:a9:a1:79:e8:a0:ad:
f1:be:14:66:af:5c:1e:b5:a1:ee:63:b4:d8:06:4f:ff:e9:85:
4c:de:8e:99:1d:45:0f:be:22:2c:51:cf:fa:e8:85:77:4a:73:
d6:b6:70:03:db:2c:eb:27:4b:ba:0c:39:a2:f0:ad:37:ee:2c:
57:f4:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:29 2025 by rpki-client