Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: zfY2kkHjrUIb2jx6jGCQ0VnRaJFrsGhYMPlIWyR8LqI=
Subject key identifier: 1F:87:26:8D:97:B1:BE:E7:C0:8C:E0:44:24:A0:CC:39:08:23:90:EE
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019A011130D7D31B1311E20659B6791668FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 16ED
Signing time: Mon 20 Oct 2025 10:01:35 +0000
Manifest this update: Mon 20 Oct 2025 10:01:35 +0000
Manifest next update: Tue 21 Oct 2025 10:01:35 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: kHp0x+BFz/6Gi0jQodN7oqGj5lRtbUMUaNGPLQbht8k=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:30:d7:d3:1b:13:11:e2:06:59:b6:79:16:68:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Oct 20 10:01:35 2025 GMT
Not After : Oct 21 10:01:35 2025 GMT
Subject: CN=1f87268d97b1bee7c08ce04424a0cc39082390ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:8e:d0:c3:21:0c:02:d3:6a:9f:5c:a1:95:
2e:c1:51:06:03:b1:5c:90:08:cc:66:51:32:ad:4c:
fb:66:26:ad:e0:db:e2:58:b3:a3:77:ae:2e:9e:d9:
01:02:e8:08:a4:2f:10:7b:e8:c1:ac:0f:02:3d:0b:
a9:3d:0c:dc:ae:bf:1c:e7:f9:5e:90:87:16:84:93:
0f:a0:72:07:43:f9:f5:56:db:10:53:95:82:df:6c:
17:41:bb:e8:23:c2:6e:7d:6e:79:19:69:a5:05:dd:
96:39:2a:06:06:c4:e4:6d:29:6a:03:9b:54:b2:73:
4a:15:2d:1e:8c:77:0d:19:ac:cc:88:bc:16:a4:15:
1a:0e:36:fd:19:3a:4a:33:fa:88:12:6f:1c:80:26:
d2:e8:28:7c:92:19:b1:09:eb:d1:a0:ea:9b:49:9b:
08:5d:73:e4:95:3d:f8:0a:8d:6a:42:0c:53:a6:96:
75:8a:60:e5:7d:19:52:5a:92:b4:5e:19:ab:c8:75:
49:0c:95:2e:b7:9c:ff:87:cf:c1:18:5c:64:ec:5f:
8f:4d:7d:5a:54:0e:d8:2c:e1:48:4b:4a:ff:9f:ef:
57:81:97:6b:5f:fe:a2:dc:c6:77:ad:88:b2:94:ab:
44:55:87:55:ab:10:a9:29:e9:13:2e:d2:db:68:2c:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:26:8D:97:B1:BE:E7:C0:8C:E0:44:24:A0:CC:39:08:23:90:EE
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:03:28:55:3b:2e:1f:aa:09:c3:cf:38:f1:b7:8e:65:81:4a:
12:6e:91:25:26:72:ac:4e:dd:e8:94:2c:9d:89:16:34:30:02:
b6:13:c9:30:38:fb:2d:93:e0:6a:14:e2:03:7a:76:6c:95:19:
24:2b:62:89:71:1e:5b:57:17:31:b8:9a:fb:23:1f:ed:d0:61:
8c:4b:c5:a3:c5:44:10:18:39:59:26:ca:e8:c8:f5:5d:5d:66:
e1:17:2b:5b:b7:ee:58:ec:c9:ee:2c:df:80:e0:0c:a7:06:0d:
91:34:a2:8c:07:3d:64:27:d2:71:6d:4b:8c:c0:6a:72:92:1b:
b5:6d:bb:a2:fc:e8:ea:7a:3c:17:48:06:d6:fb:97:12:bc:ba:
96:77:8a:2d:59:96:9a:06:77:73:0f:03:fc:4b:f9:4b:b7:f4:
5a:ff:8c:8e:88:a1:77:78:9a:ee:32:7b:dc:8d:12:1b:02:87:
bd:84:06:f6:39:fc:29:b7:af:03:69:9f:d7:1e:97:98:ff:06:
69:ee:00:7b:10:ca:54:d6:c2:f3:57:17:4c:47:c0:46:7f:85:
e7:e0:9e:7c:d3:f8:16:a7:bc:b1:69:3d:6f:71:0e:9b:db:8f:
03:3a:c5:b0:cf:38:33:fb:c6:2b:9b:27:85:fc:7c:f9:a0:48:
ba:81:5d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:52 2025 by rpki-client