Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: AsKCGjheGJ2OAtvwYolfeOf7cBpvrtx6rBTwwn3vw+M=
Subject key identifier: 6C:E8:FA:23:20:58:08:E5:01:8A:E4:22:9B:4B:1B:CE:C7:C2:90:47
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 0198D73B7BF156F0031907CC35B610CF6E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:00:56 +0000
Manifest this update: Sat 23 Aug 2025 14:00:56 +0000
Manifest next update: Sun 24 Aug 2025 14:00:56 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: rerjLPX4m+TdVjCKAVctLomt56J/GlzfG1IvfG92Ees=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:7b:f1:56:f0:03:19:07:cc:35:b6:10:cf:6e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Aug 23 14:00:56 2025 GMT
Not After : Aug 24 14:00:56 2025 GMT
Subject: CN=6ce8fa23205808e5018ae4229b4b1bcec7c29047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:89:c6:8d:1d:8a:8f:4e:6b:e6:43:82:f8:
f7:be:1e:c4:2d:82:3f:3d:0d:ad:8c:3a:e9:ce:7f:
26:01:ac:7d:cc:ed:33:7a:e8:95:07:e3:09:91:f5:
d9:06:12:3c:98:ab:b3:10:e4:b6:9a:7a:1d:d7:35:
8c:be:d0:33:aa:4b:7c:15:ec:c8:38:fb:0d:06:6f:
bb:c2:a1:fb:6b:fe:6c:51:03:08:46:0b:bd:57:e8:
27:97:37:eb:45:8c:04:6f:34:ea:4b:bc:e9:ea:7b:
2f:c3:1c:16:d4:0e:37:1f:eb:9e:fe:f6:fc:10:1d:
69:7c:07:50:f7:1e:66:d3:4b:2d:15:63:26:ae:bc:
dd:b5:7a:5c:fe:64:84:f5:1b:e5:20:ae:14:15:7e:
65:a1:ae:88:aa:d0:d6:36:60:0c:15:6e:94:3b:ce:
01:f0:87:02:d5:6d:c4:a4:bd:e0:b5:c2:5e:fb:8e:
2a:86:7e:74:a0:89:e5:8a:62:68:ea:aa:fa:95:e2:
d6:25:f8:21:45:e4:fc:6c:b7:ea:bf:3b:57:3e:89:
63:c4:14:4d:c9:fa:6d:37:bc:a0:5e:13:c0:61:3f:
cf:c4:05:b1:79:61:0a:d5:72:fd:2a:0a:ac:14:c6:
6a:23:9e:8d:e0:31:15:f5:d0:5f:7c:56:4c:4e:52:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:FA:23:20:58:08:E5:01:8A:E4:22:9B:4B:1B:CE:C7:C2:90:47
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:40:35:ee:24:8c:4e:0f:1d:80:fe:e8:93:af:fe:29:70:0c:
6e:ad:63:25:60:f8:bb:f2:50:ca:34:23:25:04:4d:8e:b6:d5:
f9:d6:6d:3c:bc:e1:4e:a2:45:49:df:ca:99:52:9c:ab:36:5e:
44:e6:fd:34:74:53:c6:5f:37:c1:0d:5b:42:91:cd:ac:82:82:
6c:f7:79:fd:2d:31:71:52:24:80:78:f4:72:39:3c:f7:13:d6:
ff:c5:d3:b1:21:d0:27:00:6e:c6:3d:16:f3:26:fc:62:54:39:
de:02:d1:03:7f:39:21:5b:58:40:22:ca:c0:da:4c:2c:9b:d9:
3e:c2:1e:b8:6c:f3:cc:d2:49:ba:ed:4c:2b:f6:dc:d1:df:db:
55:c0:2a:81:c3:07:2f:7e:e7:dc:19:67:e5:bc:5a:2a:00:97:
e4:93:da:4d:ff:ff:38:f9:08:1e:cf:9a:fb:76:8e:5c:26:44:
19:81:48:47:36:61:e1:c1:67:a6:ea:64:11:b0:35:5a:35:34:
90:61:08:13:0f:61:e9:8d:e9:04:ae:a6:a7:d4:04:14:44:5c:
08:30:b6:cf:17:11:2b:31:66:11:64:32:25:51:eb:93:fe:82:
0e:b0:c3:72:c9:d1:99:e7:22:82:c1:57:60:f5:cd:b5:23:fa:
42:e2:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:13 2025 by rpki-client