Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: gNbJXHdt/lNe5yQ/6QUZf2VIEBX89M656CRrrcDIJro=
Subject key identifier: 77:3A:10:99:E8:02:5E:9D:C9:B8:42:37:0F:F0:34:D5:86:6D:06:6C
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 0199FC582C03BB255800D288FF0732A25818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: h3XMQtCK62XRdAIDFbnDjFntFpOV01OW3TxF1fJatOY=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2c:03:bb:25:58:00:d2:88:ff:07:32:a2:58:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=773a1099e8025e9dc9b842370ff034d5866d066c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:a2:72:54:20:d8:7e:5f:bc:33:fb:38:ec:
8f:48:4a:73:11:86:6c:b5:03:89:58:d4:9a:9d:57:
5c:3c:f4:f9:30:e4:6d:9e:57:4d:c1:4d:02:74:15:
fb:61:ba:ce:0f:e8:14:48:11:f8:04:f0:15:fc:98:
17:26:70:13:06:ea:fe:02:49:c8:f8:09:2c:cf:a7:
6a:60:96:0b:35:31:d0:a0:59:38:ec:aa:24:3f:af:
0c:ee:8e:23:01:20:3c:9a:c2:37:d9:d7:33:1e:38:
d5:34:c7:2f:1d:71:ff:28:5e:49:61:f1:14:94:72:
fa:a6:32:df:7d:34:15:c8:ca:fd:81:dd:40:eb:07:
a2:80:39:24:1d:69:7b:2c:3e:46:b9:2c:eb:ba:de:
b3:cd:ac:25:38:e3:61:c3:ab:46:a8:62:17:cf:9a:
91:8d:9b:89:2c:de:8c:1e:ed:b2:74:51:02:94:df:
e2:05:71:bf:0e:0b:41:b4:76:d1:0e:12:81:a2:79:
23:39:89:e8:31:ee:78:63:d8:54:0f:1f:05:36:3b:
67:b4:6c:2f:78:4d:8a:9c:9b:b7:66:47:f5:a0:b2:
f9:be:fc:8b:3d:a3:0e:24:41:be:e2:ca:7f:9d:02:
06:b4:d1:cf:40:ae:25:08:f1:b5:08:5f:41:9f:9a:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:10:99:E8:02:5E:9D:C9:B8:42:37:0F:F0:34:D5:86:6D:06:6C
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d1:c2:02:6c:91:24:bc:7a:20:bc:76:d9:3c:53:39:55:7f:
66:62:87:f9:fb:5e:9f:cd:8e:fd:07:7e:8c:d7:c2:5c:4b:99:
67:36:b2:09:6b:66:3e:12:79:e9:06:a1:81:03:55:b1:59:24:
5f:fd:f4:98:f9:70:2f:d3:42:85:85:c8:b0:7a:d7:fb:0e:c3:
b9:ba:b6:3f:ea:1f:9a:d3:4b:74:2b:06:d6:fc:5a:73:ac:f1:
22:d3:ed:c1:ce:f9:13:b0:40:99:06:5f:5b:dd:63:fc:68:03:
f0:b7:43:81:6f:99:e2:36:77:2b:8f:3b:6a:01:95:c3:1e:03:
38:96:5b:b5:20:93:09:62:66:53:58:98:0b:95:58:ba:71:0b:
5a:d2:d6:84:b0:07:64:1b:6c:a7:62:f3:65:89:72:c0:17:0d:
ab:58:32:c4:d2:a4:f7:d2:4b:12:95:59:87:1c:e2:74:29:bb:
2d:78:39:53:20:a3:f7:08:dc:1e:f0:96:cc:32:f9:cf:d3:30:
50:49:3b:40:6b:71:10:31:08:54:ad:15:db:0b:67:d6:c4:2a:
fe:f7:8d:5e:28:07:fc:c2:d1:94:a9:7c:50:e3:41:19:46:b4:
8d:22:b5:56:95:b5:22:a5:69:0c:1f:f5:6f:31:47:33:e8:a4:
be:3c:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:16 2025 by rpki-client