Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
File: adcx-k3SksDAUy7qaWfOwHkHRao.mft (raw, json)
Hash identifier: CdrnIfE6Nx53W1Xk7OXLX/Y221z+Fwp8xhdidn6ruaM=
Subject key identifier: D1:82:08:B1:43:63:6A:93:D3:9F:3F:9A:DE:87:D9:96:12:94:55:21
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial: 0198D65FD533443D0B693EB4CDD03B272DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
Manifest number: 064C
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: SWEdM65l-EYRwVqCTPoCOjy6GaM.roa (hash: Tv3EVv3dATD+Wzt7v7ZrOSKmfA3WJr20DMhoDuNr2kk=)
2: ZOAIGzltyHMXQU6ltllGlFexC3s.roa (hash: qgz3cg0yrRtsx1xhQCihERkPJV1q3/wNQ4j8DRBe274=)
3: adcx-k3SksDAUy7qaWfOwHkHRao.crl (hash: NbFnlIlwrpvfk2cNFOrRckkJGWOi4auz5fPUkPQFUKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d5:33:44:3d:0b:69:3e:b4:cd:d0:3b:27:2d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=d18208b143636a93d39f3f9ade87d99612945521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:90:1c:6f:f3:ca:fc:1a:4e:72:97:20:c4:
f4:35:b9:eb:1f:e4:ff:36:0c:55:71:13:63:69:e8:
85:c1:f2:a4:a0:fd:37:08:84:64:90:f8:77:f3:b9:
a1:d4:82:bd:48:13:05:fa:1c:7d:44:b2:74:76:45:
f0:2c:45:43:2c:c0:56:06:bd:17:de:41:d0:9c:88:
53:90:dc:ff:f8:c4:8c:ec:ca:d0:94:d9:5d:9c:82:
96:1d:56:64:0e:4b:65:98:1d:09:32:0a:58:c1:16:
c6:a8:85:a9:8d:76:e2:f5:00:2a:ae:6b:b6:c3:43:
e5:ab:e4:82:2b:7d:78:f9:31:a4:fe:c1:36:0d:9b:
8f:d6:f1:6b:e2:fb:a0:46:ef:0b:1d:d0:89:1d:d3:
db:62:2b:e7:f3:6c:ef:82:95:b1:84:67:c0:3b:57:
0c:aa:ae:aa:02:ae:15:89:2e:3d:98:50:b8:7b:c9:
00:95:42:6f:cc:4c:72:f5:68:2a:e4:ec:4b:4b:0b:
53:d5:d4:6f:12:a8:c6:b3:a4:a7:3c:a4:4f:4b:2a:
2d:c8:98:38:31:91:3d:d4:14:de:eb:56:a2:42:4f:
88:bd:1b:86:b3:dd:24:2d:2e:c3:3e:3c:68:9e:7a:
d7:9d:c3:b7:ec:f8:14:e2:ff:54:d7:f6:03:52:88:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:82:08:B1:43:63:6A:93:D3:9F:3F:9A:DE:87:D9:96:12:94:55:21
X509v3 Authority Key Identifier:
keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:02:9a:2d:0c:6f:76:e7:71:89:e9:7f:bc:4e:01:79:21:19:
41:7e:a2:1f:33:ff:0d:8b:b6:37:2b:9b:17:69:29:6f:ab:d9:
0b:26:63:4d:8a:1e:3b:c3:06:3a:41:36:63:b7:4b:a9:cf:ae:
c5:36:b1:1e:03:c4:f0:9f:12:9c:62:2d:85:62:bd:82:70:ac:
2a:f6:63:2a:6a:aa:7f:62:c1:f0:f2:e1:00:eb:3a:0a:88:d5:
47:85:92:e2:90:87:41:ee:cf:1d:7e:2e:d2:16:1c:44:8b:1d:
74:fe:4f:9b:98:f1:ab:ae:c9:2e:18:35:ae:d9:47:65:ea:0a:
f2:27:c1:02:78:7a:b5:5a:09:16:94:d0:a9:76:b0:97:eb:ad:
3e:d6:8f:b8:0e:18:c4:b0:c9:f9:fb:36:00:1a:80:d3:54:12:
d5:b7:3a:20:1d:63:65:14:f6:98:fa:67:d6:58:b5:ff:16:56:
a9:fa:99:29:25:68:d2:a6:76:c7:d1:00:5f:a6:b3:9d:b6:b9:
51:db:69:70:67:46:1e:d9:7a:4e:d6:13:42:39:11:7d:ce:18:
d7:c9:53:dc:e7:e2:48:b6:9b:18:20:21:43:c2:31:16:a3:24:
51:4d:34:6f:71:12:d8:e3:bb:92:59:7f:4a:10:da:2e:27:8a:
91:10:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:37 2025 by rpki-client