Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File: AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier: Rmaexp8IbjCa1NX5WWorDi+dfOu0ulq4Bo/dGuIV5bQ=
Subject key identifier: E1:D7:82:E8:C9:93:CB:E4:B7:DB:DD:53:E8:D4:30:3F:0B:46:AC:B5
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 0198D5BC3943B844A998AE4E3480D2089F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number: 069C
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: xv17pl9NAhzUgxWbGN91YaUL9guCgERch+RDhzV4r1M=)
2: jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa (hash: HIn2EZR8FCBtV+D1WmQeFC+W9f4d6g/d5Kn+DYMnwWM=)
3: s9CrfLdwyz1HofYuhgTm-G0XcWY.roa (hash: 5D2dFiucRImYcNfGCDutgF5vRQIcWGUYkXV/9xTSSbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:39:43:b8:44:a9:98:ae:4e:34:80:d2:08:9f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=e1d782e8c993cbe4b7dbdd53e8d4303f0b46acb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:de:58:73:86:e3:ea:ca:1a:74:58:87:63:
59:21:ff:da:f5:89:f4:12:3e:7e:e5:e8:db:69:1c:
78:ba:45:0b:2b:7f:4c:81:ef:46:1d:7a:80:01:13:
e1:40:bc:64:a9:6c:42:9b:e6:05:81:e2:fd:6d:b7:
91:77:a4:b4:de:2b:69:ea:a3:00:ac:df:48:cc:85:
3d:25:41:48:1f:4a:fa:0d:df:cd:6d:1c:d8:fe:ec:
2c:54:0e:35:97:22:67:5c:d8:70:79:3a:0b:64:93:
d2:56:6d:1f:40:a2:95:fa:5a:56:69:50:86:b3:50:
bc:76:72:33:33:3c:c4:c0:14:0d:f9:7d:55:40:8f:
5d:80:be:50:55:c2:52:75:c1:59:2c:4c:cd:6b:bd:
d6:62:6d:40:b1:d1:d1:e9:34:87:75:ac:36:98:ed:
43:ef:81:f6:5e:fe:ad:2d:48:d0:d9:65:da:8c:a8:
8b:66:50:e8:28:d4:0f:53:6a:a8:12:17:fd:42:3c:
cd:f3:1b:ae:b5:31:a1:29:79:f2:8a:a7:22:1c:73:
5a:52:48:27:0e:bb:21:40:0c:45:cc:b2:ba:45:93:
b4:61:75:ed:65:12:1a:06:72:ed:d0:1d:01:11:9d:
5e:e4:06:2a:51:cc:c9:ca:e6:b0:78:94:bb:a0:41:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:82:E8:C9:93:CB:E4:B7:DB:DD:53:E8:D4:30:3F:0B:46:AC:B5
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ad:44:a1:de:99:20:31:d5:1d:e6:10:08:dd:98:93:b5:11:
d7:e8:4c:57:ca:99:7c:88:e0:66:2f:60:59:e4:ec:da:fd:5e:
73:91:87:f8:ca:1f:77:2d:a2:f9:4f:aa:07:ea:fb:18:01:e4:
d5:79:56:a8:55:f3:11:51:e3:ed:5c:97:62:46:ba:7a:3c:d8:
e4:d5:b6:25:ab:3c:f4:4b:fc:ad:6c:b0:a0:d2:4a:88:09:59:
70:2c:03:cb:3f:79:5d:e9:07:45:94:32:b1:14:d3:a3:51:8e:
b5:cb:ff:9f:da:13:bd:82:20:64:eb:6e:88:a5:de:b8:58:f7:
14:4b:52:ff:bf:67:3f:be:dc:18:9f:9a:b0:16:e3:02:1c:5e:
13:d5:d3:cd:39:65:b6:4b:a0:d2:cc:84:91:1b:45:8b:50:48:
67:19:e6:f3:cc:89:06:0a:ef:58:c9:71:cb:da:32:3b:ea:37:
79:7c:ed:47:8e:07:7f:dd:d9:00:d9:be:3b:72:d2:91:56:43:
36:33:8c:6f:76:e8:a7:e2:06:9c:44:67:43:75:b1:e7:2a:ce:
fd:ac:ed:99:a3:a1:87:8d:ae:b4:0d:0d:4a:b5:4b:42:17:f3:
b6:65:52:9a:a7:42:91:1a:ed:c4:7d:86:d6:e2:b6:64:2a:4e:
0a:15:2e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDlDuESpmK5ONIDSCJ+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDUwYjk4MDcxNTBkYTM5NjMyMmI5ZDRkY2ZjMGQyZmIy
YjY1MjAwHhcNMjUwODIzMDcwMjE5WhcNMjUwODI0MDcwMjE5WjAzMTEwLwYDVQQD
EyhlMWQ3ODJlOGM5OTNjYmU0YjdkYmRkNTNlOGQ0MzAzZjBiNDZhY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPHeWHOG4+rKGnRYh2NZIf/a9Yn0
Ej5+5ejbaRx4ukULK39Mge9GHXqAARPhQLxkqWxCm+YFgeL9bbeRd6S03itp6qMA
rN9IzIU9JUFIH0r6Dd/NbRzY/uwsVA41lyJnXNhweToLZJPSVm0fQKKV+lpWaVCG
s1C8dnIzMzzEwBQN+X1VQI9dgL5QVcJSdcFZLEzNa73WYm1AsdHR6TSHdaw2mO1D
74H2Xv6tLUjQ2WXajKiLZlDoKNQPU2qoEhf9QjzN8xuutTGhKXnyiqciHHNaUkgn
DrshQAxFzLK6RZO0YXXtZRIaBnLt0B0BEZ1e5AYqUczJyuaweJS7oEE64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHXgujJk8vkt9vdU+jUMD8LRqy1MB8GA1UdIwQY
MBaAFAHVC5gHFQ2jljIrnU3PwNL7K2UgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRVTG1BY1ZEYU9XTWl1ZFRjX0EwdnNyWlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lYTcxYTAtNjk0MS00Mjc2LTk1ODkt
ODEyNGJkOTQ5YjBlLzEvQWRVTG1BY1ZEYU9XTWl1ZFRjX0EwdnNyWlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lYTcxYTAtNjk0MS00Mjc2LTk1ODktODEyNGJkOTQ5YjBl
LzEvQWRVTG1BY1ZEYU9XTWl1ZFRjX0EwdnNyWlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAta1Eod6Z
IDHVHeYQCN2Yk7UR1+hMV8qZfIjgZi9gWeTs2v1ec5GH+Mofdy2i+U+qB+r7GAHk
1XlWqFXzEVHj7VyXYka6ejzY5NW2Jas89Ev8rWywoNJKiAlZcCwDyz95XekHRZQy
sRTTo1GOtcv/n9oTvYIgZOtuiKXeuFj3FEtS/79nP77cGJ+asBbjAhxeE9XTzTll
tkug0syEkRtFi1BIZxnm88yJBgrvWMlxy9oyO+o3eXztR44Hf93ZANm+O3LSkVZD
NjOMb3bop+IGnERnQ3Wx5yrO/aztmaOhh42utA0NSrVLQhfztmVSmqdCkRrtxH2G
1uK2ZCpOChUuMA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:32 2025 by rpki-client