Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
File: adcx-k3SksDAUy7qaWfOwHkHRao.mft (raw, json)
Hash identifier: zT1epJhiDAwW8NfCT50tqBeNfBB6jCwQ2KUZFNuN9Rg=
Subject key identifier: 1F:81:F2:A8:84:EC:26:E0:43:73:F2:03:8B:4C:B3:04:85:A5:18:51
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial: 0197B6A08371A42A745094F1075AFEAD5EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
Manifest number: 05B7
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: SWEdM65l-EYRwVqCTPoCOjy6GaM.roa (hash: Tv3EVv3dATD+Wzt7v7ZrOSKmfA3WJr20DMhoDuNr2kk=)
2: ZOAIGzltyHMXQU6ltllGlFexC3s.roa (hash: qgz3cg0yrRtsx1xhQCihERkPJV1q3/wNQ4j8DRBe274=)
3: adcx-k3SksDAUy7qaWfOwHkHRao.crl (hash: 4yiL81tKq1NGOyaBscatrhcf+cMl6T1+0re4rWps/xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:83:71:a4:2a:74:50:94:f1:07:5a:fe:ad:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=1f81f2a884ec26e04373f2038b4cb30485a51851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:21:3a:bf:4a:58:f7:d5:70:9f:fa:06:8a:
8b:dc:c3:5a:1e:c7:ee:80:32:ca:97:c3:ad:2a:b6:
14:7e:41:ec:a4:46:5e:5d:b1:6a:ca:89:a4:a2:d1:
dc:7b:77:ad:d0:53:ea:5b:c4:ee:91:66:7e:f2:63:
e7:48:82:fa:68:53:84:fd:4b:85:d1:9d:5a:81:39:
c1:76:02:cd:d9:c9:c8:93:37:f3:ff:57:45:41:2b:
ba:45:a7:ce:cd:33:83:4f:82:68:50:b9:45:be:5c:
f5:74:dc:d4:3c:7e:21:70:b7:64:f6:54:c7:20:5a:
c4:82:8c:14:ae:02:5c:d8:92:cc:ac:7c:41:2f:ec:
60:c8:2c:cf:ea:74:77:88:93:0a:62:3b:30:ad:00:
00:cf:6f:43:83:2a:23:b0:78:36:d3:5d:b3:f4:9c:
1f:cb:2f:12:53:d2:c2:25:41:bd:e7:1d:b8:96:5d:
33:e9:10:44:6d:64:d7:ce:46:fd:4d:f3:ca:d3:f5:
09:4b:74:af:af:a0:07:c3:84:03:d0:07:77:c8:20:
ae:c7:82:e4:0b:a4:2f:e0:87:53:64:ea:46:8a:80:
92:cd:fd:33:65:bc:9a:95:9c:b1:a6:d3:97:1d:d1:
04:d7:a9:d5:7a:de:d8:06:a6:66:3a:c8:87:9c:89:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:F2:A8:84:EC:26:E0:43:73:F2:03:8B:4C:B3:04:85:A5:18:51
X509v3 Authority Key Identifier:
keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:78:36:73:17:0d:b0:e0:0c:7c:2c:15:f7:c0:93:63:9b:a7:
71:de:7b:94:7e:7a:b6:23:6e:3d:95:c3:4c:00:53:97:fc:2e:
1b:c5:55:83:5a:d2:7b:62:f8:b7:04:b0:8c:7b:f2:b9:6f:9a:
ec:68:8f:db:4e:b5:34:5f:51:eb:06:48:c8:39:1a:b6:6f:66:
31:22:9a:d3:d1:d9:6e:56:b5:55:55:d4:53:e0:72:98:65:c9:
6c:32:0a:25:14:6d:28:9d:04:fa:1c:d6:80:9f:3c:2d:1b:61:
0f:fe:e2:eb:dd:83:8c:9b:ea:5a:56:40:e7:87:58:6b:13:87:
5a:73:9d:fe:3f:f5:d6:29:ad:bb:c7:43:ac:aa:c4:f3:ef:26:
42:1e:45:67:e6:b5:a2:9d:94:89:58:57:f0:20:f8:b5:72:e6:
c5:8b:ee:d9:24:ca:82:cf:9b:3b:55:b2:48:67:29:83:30:ba:
25:cc:19:ae:1d:fd:b8:d3:b6:5d:0d:44:aa:4c:3e:40:45:f1:
b2:da:67:f3:ff:be:3f:65:70:04:8a:23:62:9e:39:dd:c9:d7:
f3:3d:34:16:75:89:04:b0:08:66:29:51:c8:7d:50:3a:ab:ce:
e1:ab:4d:4f:68:78:a8:39:b6:1b:a8:56:6c:3b:ce:56:60:ed:
43:2c:ac:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oINxpCp0UJTxB1r+rV77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDczMWZhNGRkMjkyYzBjMDUzMmVlYTY5NjdjZWMwNzkw
NzQ1YWEwHhcNMjUwNjI4MTMwMTAxWhcNMjUwNjI5MTMwMTAxWjAzMTEwLwYDVQQD
EygxZjgxZjJhODg0ZWMyNmUwNDM3M2YyMDM4YjRjYjMwNDg1YTUxODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoghOr9KWPfVcJ/6BoqL3MNaHsfu
gDLKl8OtKrYUfkHspEZeXbFqyomkotHce3et0FPqW8TukWZ+8mPnSIL6aFOE/UuF
0Z1agTnBdgLN2cnIkzfz/1dFQSu6RafOzTODT4JoULlFvlz1dNzUPH4hcLdk9lTH
IFrEgowUrgJc2JLMrHxBL+xgyCzP6nR3iJMKYjswrQAAz29DgyojsHg2012z9Jwf
yy8SU9LCJUG95x24ll0z6RBEbWTXzkb9TfPK0/UJS3Svr6AHw4QD0Ad3yCCux4Lk
C6Qv4IdTZOpGioCSzf0zZbyalZyxptOXHdEE16nVet7YBqZmOsiHnInQbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+B8qiE7CbgQ3PyA4tMswSFpRhRMB8GA1UdIwQY
MBaAFGnXMfpN0pLAwFMu6mlnzsB5B0WqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt
MzQzNjI0MTUxODJhLzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh
LzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeng2cxcN
sOAMfCwV98CTY5uncd57lH56tiNuPZXDTABTl/wuG8VVg1rSe2L4twSwjHvyuW+a
7GiP2061NF9R6wZIyDkatm9mMSKa09HZbla1VVXUU+BymGXJbDIKJRRtKJ0E+hzW
gJ88LRthD/7i692DjJvqWlZA54dYaxOHWnOd/j/11imtu8dDrKrE8+8mQh5FZ+a1
op2UiVhX8CD4tXLmxYvu2STKgs+bO1WySGcpgzC6JcwZrh39uNO2XQ1Eqkw+QEXx
stpn8/++P2VwBIojYp453cnX8z00FnWJBLAIZilRyH1QOqvO4atNT2h4qDm2G6hW
bDvOVmDtQyyspA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:44 2025 by rpki-client