Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: 5kiegzewNwaYNTLzWCeJKzmAs0cf6glx+VesHawZw9w=
Subject key identifier: 0D:A8:46:5B:D7:17:9A:92:98:3E:70:00:A3:DF:D3:74:5E:DF:60:66
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 0197B8FD02BABDC15909AF23D29D77D441C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 00:01:18 +0000
Manifest this update: Sun 29 Jun 2025 00:01:18 +0000
Manifest next update: Mon 30 Jun 2025 00:01:18 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: wTwriYOArnJLqz0eKsIsEly+gsrVqReAV7Uw9rznrxQ=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:02:ba:bd:c1:59:09:af:23:d2:9d:77:d4:41:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Jun 29 00:01:18 2025 GMT
Not After : Jun 30 00:01:18 2025 GMT
Subject: CN=0da8465bd7179a92983e7000a3dfd3745edf6066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:ef:95:bf:9f:89:aa:a7:be:99:f4:0b:62:
92:ec:09:30:59:51:51:34:36:c9:c4:f8:a8:c8:95:
34:34:26:9d:7d:25:71:b4:d8:89:6b:fa:55:58:e7:
75:cf:d6:43:28:ed:b5:f5:e0:fa:9c:d8:46:49:97:
6e:36:a7:d6:96:51:9e:47:7d:5d:3d:73:4e:bc:a5:
ee:06:20:a2:b0:d0:e7:16:1e:3c:b5:54:57:9e:67:
a9:92:3b:50:9e:c6:98:6d:1b:4d:b5:37:36:0f:af:
bc:9c:ba:a9:eb:3f:96:3b:67:3a:db:fc:2c:6b:7d:
64:c6:9b:a6:cc:ee:e1:bf:88:d7:01:a9:0a:54:2a:
1c:96:97:c7:67:f8:7b:90:f0:40:76:87:12:8b:37:
d3:bb:08:45:74:7f:3b:17:bc:f2:49:1e:c8:76:97:
0c:45:c9:c7:ba:16:7b:2e:55:85:b0:2e:16:52:77:
ec:41:c9:76:e8:54:ae:f0:81:c6:da:b7:62:05:78:
9e:a2:66:7a:a4:ed:68:cf:80:94:e1:f3:bd:c2:d5:
e2:22:7f:92:d0:ef:9e:e0:f0:48:8b:ee:70:8a:51:
c8:06:71:95:c2:9f:6a:9e:0c:40:71:55:8d:62:c2:
57:91:1a:45:98:3a:0e:32:54:8c:e4:d2:ed:4a:98:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A8:46:5B:D7:17:9A:92:98:3E:70:00:A3:DF:D3:74:5E:DF:60:66
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:1e:c2:db:cc:67:6a:c3:2a:15:6d:11:30:92:93:74:fe:
37:03:7b:10:58:10:87:cf:35:b3:81:36:60:da:0a:63:9d:ba:
b6:f2:47:43:20:c5:d3:1a:59:7e:e3:ee:32:c0:f6:59:bb:9b:
b0:16:08:b7:14:a5:d6:70:e0:98:d7:e4:df:e3:86:89:5b:ce:
37:07:24:06:f1:20:91:9a:a4:a1:38:93:4b:5c:0d:a8:e5:4e:
db:31:ba:3c:9d:67:ce:39:89:28:d7:5a:36:95:50:93:56:bc:
ea:d3:45:81:75:68:83:6c:2a:5d:cf:08:04:b0:c6:a1:e8:30:
24:3e:df:c4:67:03:96:cf:f5:22:cd:86:df:b9:34:64:fd:a3:
22:79:bc:7a:00:a5:13:42:50:d4:3a:ea:9e:ea:41:4a:a6:90:
58:bd:5f:a8:7b:da:e6:74:37:e6:47:a4:eb:3d:86:ac:dc:87:
f4:63:24:a7:0b:cd:eb:56:95:cb:7d:30:82:80:00:9c:35:e4:
3f:72:ff:a9:e1:e3:f1:f8:04:09:7a:ba:d1:a8:68:a4:06:22:
88:41:91:43:0c:6a:69:cf:66:8f:cc:69:c3:07:65:e6:f3:1c:
07:19:d3:59:5c:0b:3d:30:8c:b1:bd:70:d1:4c:2d:a3:6b:5f:
de:92:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:59:43 2025 by rpki-client