Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: oFuLugTbRfdl5pQTryMtQ4uTyvE3XCid1yYkT1cGW4M=
Subject key identifier: A0:CC:60:FD:2D:98:E3:52:EE:49:52:E2:7E:17:16:BC:90:DD:79:D3
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 0198D4DFCD7496E33EBD9145A3250F8EDEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: miyt6G6CDbfOtz3KPdi7qosX9V8uGyd+8R5vZP0kf+s=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cd:74:96:e3:3e:bd:91:45:a3:25:0f:8e:de:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=a0cc60fd2d98e352ee4952e27e1716bc90dd79d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:23:70:15:23:a8:9e:dd:cc:8b:17:04:cc:
2b:7f:15:e4:29:5c:a2:cf:e9:6b:c0:04:9b:8b:2e:
fa:9e:3e:1e:0d:ba:fb:0e:0a:34:2a:02:a2:25:30:
39:1e:f0:bb:5e:b5:73:0d:3d:9b:ac:14:34:bb:d0:
05:6f:8f:81:b5:fd:e3:79:eb:6d:82:ed:fe:d6:57:
16:3c:18:e9:55:11:98:dd:78:1f:30:2a:da:1e:f3:
cb:af:f4:e5:1b:be:0a:c6:97:dc:1b:1f:98:b7:04:
89:60:b2:60:f4:d4:14:c4:48:82:d2:88:4d:5e:2e:
84:6d:68:e7:a4:78:3d:36:c4:b2:03:a6:42:37:51:
2a:bd:4c:b4:90:96:00:3c:07:58:83:19:de:5d:dc:
64:1c:74:03:89:56:0f:c9:1c:81:c2:19:02:1e:95:
ad:22:fd:43:92:5b:07:26:ca:1a:57:fa:6e:e1:ff:
05:2d:34:68:2e:28:03:5c:ea:55:3c:54:69:28:fc:
4e:ca:6e:dd:5c:0e:9c:19:99:39:d8:7d:21:03:6f:
e7:e1:ba:79:f2:dc:fd:c3:df:a1:cf:81:4a:fb:ca:
8b:8c:09:db:3c:ea:d0:55:ab:44:a2:1e:9a:21:f9:
06:c0:16:64:a6:bc:4f:25:8e:b0:f7:36:4e:78:6e:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CC:60:FD:2D:98:E3:52:EE:49:52:E2:7E:17:16:BC:90:DD:79:D3
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b0:75:c4:c9:ff:58:08:c4:97:2d:38:d6:c6:c2:01:85:08:
92:2e:28:b1:11:40:6e:08:32:cc:31:31:53:c4:7e:df:84:9e:
6d:67:0a:b9:07:04:24:8f:47:f9:a6:88:10:bb:cf:69:46:8a:
ad:6f:3c:c2:1d:1c:f3:c1:77:a1:88:f2:49:54:da:ee:d0:73:
31:71:d7:63:b0:d7:54:96:69:b9:c2:87:10:d0:bc:cf:4e:f5:
e7:d8:d2:bc:53:9e:8c:bf:5b:2f:5d:61:74:09:c7:26:7e:b8:
4e:e7:8d:34:de:1b:48:ac:96:84:f1:7e:fd:2c:71:75:44:89:
22:8a:13:79:30:79:e8:8a:14:c9:b0:3c:29:f7:52:7b:c8:9a:
36:e5:f0:4b:99:81:d1:e9:79:43:8a:99:35:2e:89:f1:d7:23:
44:f6:d0:9a:20:ab:7b:fa:6e:ee:09:e3:e0:aa:ee:c1:65:79:
c6:b8:3a:e2:32:e7:33:b4:d0:ac:c2:c1:8f:7b:74:f5:d3:99:
8f:ff:0d:0f:dd:68:7d:ed:62:19:74:3d:d1:01:e3:82:7b:43:
37:ee:18:2f:76:25:e2:af:3f:79:29:10:0c:1c:62:71:91:8a:
60:b8:52:8b:89:be:73:ce:e3:41:ba:bd:19:f5:b7:4e:15:f7:
38:75:08:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3810luM+vZFFoyUPjt7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDk4NDUwMTA4NGE0NzIyMGM1Y2NjZjU0NzhiODk3YzI4
MjJjN2YwHhcNMjUwODIzMDMwMTMzWhcNMjUwODI0MDMwMTMzWjAzMTEwLwYDVQQD
EyhhMGNjNjBmZDJkOThlMzUyZWU0OTUyZTI3ZTE3MTZiYzkwZGQ3OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHgjcBUjqJ7dzIsXBMwrfxXkKVyi
z+lrwASbiy76nj4eDbr7Dgo0KgKiJTA5HvC7XrVzDT2brBQ0u9AFb4+Btf3jeett
gu3+1lcWPBjpVRGY3XgfMCraHvPLr/TlG74KxpfcGx+YtwSJYLJg9NQUxEiC0ohN
Xi6EbWjnpHg9NsSyA6ZCN1EqvUy0kJYAPAdYgxneXdxkHHQDiVYPyRyBwhkCHpWt
Iv1DklsHJsoaV/pu4f8FLTRoLigDXOpVPFRpKPxOym7dXA6cGZk52H0hA2/n4bp5
8tz9w9+hz4FK+8qLjAnbPOrQVatEoh6aIfkGwBZkprxPJY6w9zZOeG7pQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDMYP0tmONS7klS4n4XFryQ3XnTMB8GA1UdIwQY
MBaAFKwJhFAQhKRyIMXMz1R4uJfCgix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgt
NGJjNzAzNGYyOGQ4LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgtNGJjNzAzNGYyOGQ4
LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLB1xMn/
WAjEly041sbCAYUIki4osRFAbggyzDExU8R+34SebWcKuQcEJI9H+aaIELvPaUaK
rW88wh0c88F3oYjySVTa7tBzMXHXY7DXVJZpucKHENC8z07159jSvFOejL9bL11h
dAnHJn64TueNNN4bSKyWhPF+/SxxdUSJIooTeTB56IoUybA8KfdSe8iaNuXwS5mB
0el5Q4qZNS6J8dcjRPbQmiCre/pu7gnj4KruwWV5xrg64jLnM7TQrMLBj3t09dOZ
j/8ND91ofe1iGXQ90QHjgntDN+4YL3Yl4q8/eSkQDBxicZGKYLhSi4m+c87jQbq9
GfW3ThX3OHUIcw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:59 2025 by rpki-client