Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: IP64m8EbiPqgCFDFGuEJ1WOgNtGd18L0idReMnDuqxU=
Subject key identifier: 16:74:70:0E:F3:47:E8:0C:37:9A:77:DB:EF:B7:0D:E9:F8:D1:2F:18
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 0197B7EA92CA0098E90AF09BAEB229D07E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: 7ErPvojMkTCIB6oEW4NIgAokjpTadR4exBIeM+PxX14=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:92:ca:00:98:e9:0a:f0:9b:ae:b2:29:d0:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=1674700ef347e80c379a77dbefb70de9f8d12f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:11:63:f4:44:a4:c8:b7:13:df:c6:82:8b:
67:4c:e7:a5:ce:7d:be:1e:ec:de:3e:f0:36:34:dc:
25:5f:bf:e7:1d:82:5e:b7:1f:81:20:89:f2:f1:d5:
f6:39:a6:51:c8:ec:fd:ca:62:b0:5c:2a:ed:44:b8:
1b:ec:87:97:c5:19:77:5d:95:31:49:d2:d2:a6:37:
ac:61:82:ce:69:71:8b:ee:fe:58:52:1c:94:bb:40:
0f:9b:c9:fc:88:ad:b2:76:5d:2c:bc:59:26:51:79:
dc:0a:cc:78:d9:43:d0:50:3c:19:50:8d:1f:08:4c:
ea:ee:60:e9:39:b6:9c:1c:d3:1c:a2:20:40:19:7e:
b5:50:c7:fc:7e:f1:62:ee:e9:03:91:e7:96:c3:d6:
5e:c1:e4:3a:60:48:f8:72:47:c5:53:97:51:11:07:
58:f5:09:64:45:30:a3:49:16:72:7e:92:fc:81:8b:
2a:0d:f2:59:a5:bb:9a:27:50:de:4e:6f:f9:8a:b2:
36:ee:47:61:8e:63:ea:1a:72:bc:a6:6b:6e:2a:45:
78:de:f7:6d:a9:43:b6:25:30:b7:d9:6d:9e:eb:b9:
83:9b:cc:22:d6:16:5d:43:5c:c9:be:5c:7d:47:9e:
47:93:2e:33:99:80:5e:c0:d3:1d:1c:ba:2d:96:50:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:74:70:0E:F3:47:E8:0C:37:9A:77:DB:EF:B7:0D:E9:F8:D1:2F:18
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b1:36:38:41:6c:26:de:de:af:c9:48:0b:9b:13:be:83:06:
33:91:e3:7f:35:8a:97:02:4b:9f:36:f2:00:60:1d:06:e7:64:
f0:f1:a3:25:3d:c9:6f:f9:99:21:49:bf:34:c2:54:4d:49:c5:
83:a4:91:db:f2:da:b9:51:18:e1:4c:9a:2b:0e:68:4f:3c:4c:
35:d7:e3:3a:25:eb:18:a6:dd:7b:58:e7:73:6b:81:47:f1:4d:
44:b2:2e:f6:cc:b3:7c:7f:c1:a8:fb:04:ce:6d:c8:2b:dd:0e:
67:24:42:c6:69:9a:86:93:0b:2a:2d:21:39:e2:8d:bc:d7:d3:
ca:a6:80:12:47:a6:a7:c2:30:a7:f4:40:0a:00:e3:fb:71:8c:
13:4c:1a:89:07:eb:74:83:9b:6c:6b:de:d8:a1:ae:e7:ab:d6:
70:aa:35:cd:c6:ac:92:03:12:63:5a:c5:b0:b4:55:66:71:a2:
84:c6:dd:e7:da:a5:9c:81:c5:9e:0c:7d:b6:c4:0a:d6:76:90:
3c:bc:71:fe:2f:98:dd:f3:90:3a:f1:0e:c7:57:90:17:dd:22:
f3:61:2f:17:b3:dc:e5:a5:29:c8:7f:17:fe:4d:9e:f2:a3:53:
98:4b:2a:ef:dd:a8:da:e9:b6:f0:cf:54:98:d1:6d:0c:10:73:
40:81:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:17 2025 by rpki-client