Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: u78wymcrXYBgttGajKKw/54Tq/Y/AYoMmAj7Y5pqfDw=
Subject key identifier: F1:A1:62:3C:9F:E6:68:7C:4B:4E:97:6E:88:E8:FC:88:80:C5:25:81
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 0197B77C5E9A5BE7D6B518A3B35038D4B7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: RYk8ge/oBdwvSRT9UNb2INmBNjxAofubO7qS5vNbmo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5e:9a:5b:e7:d6:b5:18:a3:b3:50:38:d4:b7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=f1a1623c9fe6687c4b4e976e88e8fc8880c52581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:ed:dc:f1:a4:98:c5:11:74:2c:cd:28:00:
b4:0a:a2:1b:9e:70:f7:95:e9:71:74:b7:9a:1c:02:
88:e1:60:74:3f:4f:35:85:aa:94:69:2d:15:72:ba:
dc:a7:b7:9e:05:43:0a:1d:95:eb:0a:88:78:5e:d2:
bf:bc:39:3d:29:7e:f8:44:99:5f:f0:13:4f:ba:ff:
c8:ad:be:d2:fa:df:cf:ca:c2:73:05:91:f0:08:fe:
f6:7b:93:eb:b2:ff:c4:f3:0d:b4:b9:e6:26:b9:6f:
45:66:e3:61:55:ef:b3:94:b4:93:3d:88:44:e7:7d:
fa:19:0d:bb:9d:04:5d:13:65:13:46:10:9a:2c:d2:
04:38:61:a3:ba:a3:8d:88:dc:3c:0f:49:eb:dc:4f:
b2:aa:fb:7e:13:94:3a:8b:a5:4c:ad:1a:ba:4d:12:
70:61:68:0d:df:ac:e4:2e:05:e2:01:87:05:d3:d4:
42:b2:6e:e9:ec:3f:74:ca:48:f1:02:4c:87:a1:d4:
a9:ea:da:dc:79:82:c9:8c:43:15:f1:c1:79:cd:4b:
93:3b:e9:d6:59:6c:fc:b3:f6:14:f2:31:fd:80:95:
d2:c4:da:4d:99:c7:02:31:8c:40:99:d9:2f:68:6a:
80:fb:80:e6:eb:69:2a:93:f2:c7:24:b3:e6:e6:ca:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:62:3C:9F:E6:68:7C:4B:4E:97:6E:88:E8:FC:88:80:C5:25:81
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4f:b9:e4:d3:a5:75:2d:a5:16:79:5c:ec:71:78:98:3d:9e:
26:d2:b8:a7:4c:3c:73:29:f9:31:f5:ba:28:86:41:5b:66:0f:
f3:36:7f:bf:45:41:13:27:08:ad:d0:dc:a4:33:be:b3:ba:cb:
74:87:6c:5a:b4:fb:d1:b1:a7:73:ee:fb:8a:f4:72:32:40:8d:
38:49:39:ea:ba:6b:c2:96:71:76:03:22:8d:04:09:1b:92:c1:
0a:e3:a3:2d:98:65:08:ab:68:2e:a2:b0:c5:67:f1:7d:5a:18:
26:c5:b0:03:b2:d5:da:00:00:70:30:4a:0b:dd:af:5f:6f:fb:
49:91:dc:80:5a:f2:26:1c:e7:0e:20:e2:74:80:55:26:a0:d7:
3f:6c:35:94:96:6a:ae:32:12:94:8e:dd:d4:ce:4d:34:6d:84:
c9:1b:38:83:8e:9b:3b:e3:22:09:2a:df:a9:38:57:ea:52:67:
0e:ee:90:a3:e1:a0:43:f3:e4:7c:63:e3:d6:38:a5:5d:b4:b9:
17:22:07:90:34:f0:6a:99:bf:61:9e:6a:78:02:2b:03:bc:da:
12:92:12:a9:1e:30:a8:99:24:dd:a6:d3:0c:5e:1c:27:32:ce:
e1:fe:97:af:b2:3e:81:a5:95:07:8b:26:39:9d:f0:82:3a:25:
07:cd:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:23 2025 by rpki-client