Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier: vOlt8b5PwHIGkBdn7M7+pUGQnequ6t+jLixLa2wUcsA=
Subject key identifier: 50:0D:D7:FA:72:92:FA:24:4C:86:32:E8:D4:F0:02:E9:90:3B:A8:A8
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 0199FEB4BDDFCF480026A4210301DF9B5583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 23:01:21 +0000
Manifest this update: Sun 19 Oct 2025 23:01:21 +0000
Manifest next update: Mon 20 Oct 2025 23:01:21 +0000
Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: eGyMYf7UQPPvs9a5InETbbUxVyXPgp3owuaYIhiSl/M=)
2: bxyY92T1b4aJfspeGWuPWUl-Kkw.roa (hash: nKzuSfhFZMZ8pqYL4zAcXBecFHY0kOuZwNpuiZWVnMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:bd:df:cf:48:00:26:a4:21:03:01:df:9b:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Oct 19 23:01:21 2025 GMT
Not After : Oct 20 23:01:21 2025 GMT
Subject: CN=500dd7fa7292fa244c8632e8d4f002e9903ba8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:8d:f7:1a:ae:86:fa:f7:37:d8:1a:3e:b0:
e6:f7:42:ef:53:47:66:d4:fa:28:d8:c7:a8:be:61:
e6:4a:bc:3f:24:25:bb:21:97:03:8f:ce:33:98:d6:
73:74:6a:7b:25:6b:64:42:72:b9:34:c4:15:a8:4b:
c5:52:a4:a4:c8:bc:9f:3d:f6:de:b1:9c:c1:3c:e5:
26:e0:7c:81:02:6c:93:9e:c9:93:c7:8d:6b:30:a5:
3c:7c:84:3a:2a:49:32:e0:bb:bd:62:9b:13:ef:72:
af:d4:2e:5c:5f:4a:88:27:fe:c5:66:5a:97:b5:cb:
fd:1e:4f:ee:79:16:1f:9d:82:f4:53:18:ff:cc:56:
2f:db:e8:36:c0:7d:93:3a:27:bf:c9:be:30:64:ed:
c8:e4:55:c5:b1:05:45:ed:7b:8d:02:c3:5b:49:f4:
02:ff:d9:14:11:72:39:b8:cd:c4:86:a7:2b:b8:2f:
55:b5:f5:05:90:2a:db:b2:48:6b:64:f3:0d:43:7d:
b0:bf:32:63:e4:d4:63:68:72:e1:18:9e:d6:7b:b8:
5e:a2:79:5f:15:74:61:7f:f5:f0:3f:52:d0:77:b0:
48:96:d5:56:71:9f:67:73:a3:4e:cc:f1:ad:9b:46:
ed:7a:74:ab:d1:ce:fa:cb:46:a9:2b:b8:bc:55:d0:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:D7:FA:72:92:FA:24:4C:86:32:E8:D4:F0:02:E9:90:3B:A8:A8
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fc:72:18:5d:0b:43:a9:62:5c:29:98:7a:7d:f4:e0:b5:c8:
7b:74:03:99:8d:08:20:a8:44:6e:b3:87:1c:c2:9b:7f:e4:74:
07:85:8d:56:71:08:c5:69:36:3a:9b:5b:26:5d:80:ff:65:cc:
78:4a:f5:75:c6:96:fc:6a:36:a8:52:99:58:87:8b:d2:70:9c:
00:5c:e1:bc:91:2c:96:38:8a:05:6b:2e:e9:85:b0:0c:e7:a0:
6d:b1:5c:68:66:7e:53:96:37:87:75:95:bb:88:8f:43:3b:8f:
29:3a:e6:7d:06:53:ec:84:e4:51:7e:9e:69:70:e7:d8:06:0f:
68:ed:ac:3c:ec:e7:9d:b0:6b:c5:5b:cd:ba:1c:3a:25:9c:e7:
6e:10:01:3d:a1:55:9b:51:72:67:0e:4b:6f:de:7c:4d:4a:df:
84:fd:6d:60:ef:bd:71:2e:7b:50:0d:a7:17:b4:28:17:84:a3:
65:17:d1:36:f0:48:ce:ad:c6:b7:c2:f3:6b:d4:17:fc:01:23:
8c:9c:31:e4:f0:64:2d:b9:c0:10:56:b1:20:47:b9:81:46:4f:
a6:57:ea:6a:1a:b3:aa:f0:b5:cf:96:77:a2:ab:b0:70:62:df:
6b:8d:70:4b:35:17:e9:af:4d:6f:6a:5a:3c:b6:7f:c9:da:69:
d3:6e:57:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tL3fz0gAJqQhAwHfm1WDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3
NGUxNzAwHhcNMjUxMDE5MjMwMTIxWhcNMjUxMDIwMjMwMTIxWjAzMTEwLwYDVQQD
Eyg1MDBkZDdmYTcyOTJmYTI0NGM4NjMyZThkNGYwMDJlOTkwM2JhOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3qN9xquhvr3N9gaPrDm90LvU0dm
1Poo2MeovmHmSrw/JCW7IZcDj84zmNZzdGp7JWtkQnK5NMQVqEvFUqSkyLyfPfbe
sZzBPOUm4HyBAmyTnsmTx41rMKU8fIQ6Kkky4Lu9YpsT73Kv1C5cX0qIJ/7FZlqX
tcv9Hk/ueRYfnYL0Uxj/zFYv2+g2wH2TOie/yb4wZO3I5FXFsQVF7XuNAsNbSfQC
/9kUEXI5uM3EhqcruC9VtfUFkCrbskhrZPMNQ32wvzJj5NRjaHLhGJ7We7heonlf
FXRhf/XwP1LQd7BIltVWcZ9nc6NOzPGtm0btenSr0c76y0apK7i8VdD7owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAN1/pykvokTIYy6NTwAumQO6ioMB8GA1UdIwQY
MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt
MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3
LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefxyGF0L
Q6liXCmYen304LXIe3QDmY0IIKhEbrOHHMKbf+R0B4WNVnEIxWk2OptbJl2A/2XM
eEr1dcaW/Go2qFKZWIeL0nCcAFzhvJEsljiKBWsu6YWwDOegbbFcaGZ+U5Y3h3WV
u4iPQzuPKTrmfQZT7ITkUX6eaXDn2AYPaO2sPOznnbBrxVvNuhw6JZznbhABPaFV
m1FyZw5Lb958TUrfhP1tYO+9cS57UA2nF7QoF4SjZRfRNvBIzq3Gt8Lza9QX/AEj
jJwx5PBkLbnAEFaxIEe5gUZPplfqahqzqvC1z5Z3oquwcGLfa41wSzUX6a9Nb2pa
PLZ/ydpp025XqA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:03 2025 by rpki-client