Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: wE3HUbLsQHz9Xt6ab1mxgNhITRJ7h85xVy3DncRSVWk=
Subject key identifier: 8F:2D:2F:23:1A:75:E9:2F:E9:3D:85:C7:AA:FA:21:BB:D3:43:78:63
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 0199FBEAA54F55638953250CCF101E170045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 035A
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: oDax/2f6PovTMFSMjOwXFQYp4M4kvTXS6/eILL7KxSg=)
2: PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (hash: pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=)
3: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (hash: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a5:4f:55:63:89:53:25:0c:cf:10:1e:17:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=8f2d2f231a75e92fe93d85c7aafa21bbd3437863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:a0:5b:15:59:7d:6e:61:30:de:cb:d2:2c:
44:16:df:0e:5f:45:1d:d2:d2:3c:9e:b2:20:d8:6e:
af:50:97:01:e5:d1:fd:8d:20:e1:be:c3:7b:91:50:
5b:b6:37:d7:21:9f:7f:2f:4c:9d:58:6e:be:8f:26:
27:fd:0c:5b:a5:cb:c0:37:0d:32:70:c4:70:9a:45:
03:84:23:72:fa:07:ad:71:03:7f:0e:64:3a:22:74:
9d:74:47:5e:a2:a3:5b:24:7d:9e:b1:1a:73:3d:a7:
a1:a4:d3:a4:e6:85:de:ad:86:32:b2:70:0e:52:49:
dc:28:3e:b6:9d:bb:97:7d:b0:4d:94:f4:48:c2:f9:
a2:4a:d3:ae:34:12:07:33:a0:ef:14:c2:ab:fe:e8:
70:20:96:aa:cb:ea:ac:94:b0:d1:92:18:82:25:7d:
b3:9f:3c:df:49:83:d4:45:5d:ce:79:b1:0e:b0:35:
05:ef:99:25:15:aa:99:5c:76:1c:54:ec:dd:9f:38:
b0:a0:69:e1:b5:4e:51:fb:c0:19:6f:c3:84:2c:83:
b8:3a:d4:d7:c3:af:73:cb:18:32:8d:4e:b8:fb:fe:
6b:1d:30:a2:c2:0b:83:4b:0b:57:93:26:c9:60:c6:
00:e0:bc:c4:ed:12:5c:10:6b:ed:7d:af:09:e3:ee:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2D:2F:23:1A:75:E9:2F:E9:3D:85:C7:AA:FA:21:BB:D3:43:78:63
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a3:44:83:ee:9d:11:66:a9:17:f6:c7:ae:05:e7:8a:51:61:
72:40:65:de:c1:77:8f:91:e7:1e:0b:bb:cb:7b:25:33:cc:f9:
52:5b:16:4f:90:b3:4b:36:f0:aa:49:87:69:c6:29:9d:6a:a5:
38:c8:03:8b:fb:2c:cb:c5:08:83:0f:46:a0:91:56:af:b8:e7:
05:52:39:65:ee:1c:62:9e:6e:e2:e5:e2:81:b4:86:ea:74:5e:
e0:be:96:2f:38:07:cb:45:f7:da:41:48:71:63:74:1b:5d:7f:
ea:e6:e1:96:14:64:2b:41:c3:2b:f3:a5:c3:74:f1:65:92:9f:
71:08:e4:49:6f:56:ed:b0:38:90:94:38:a0:5c:da:7a:76:2f:
67:40:a4:7c:1a:d1:97:43:ae:04:53:bc:23:eb:59:3e:7d:cd:
9f:27:14:27:47:b0:87:d8:5a:b8:fa:b1:14:29:cb:bd:a6:7c:
54:c2:d6:5f:e5:6e:f9:99:56:7d:a4:f2:14:40:04:14:b8:59:
86:77:e7:28:32:4c:d5:9d:f1:91:a3:a5:31:81:3e:ae:e1:60:
73:39:ed:78:6e:dd:ac:0d:d8:55:50:81:10:12:af:31:46:69:
9f:6d:66:be:7c:5f:32:cf:20:48:03:89:b0:f2:c1:cc:1a:12:
db:d8:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:30 2025 by rpki-client