Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: J86wrqvfDJG60wv7k3Jx+KDP1pr9keqJaoaBoBF1yaU=
Subject key identifier: 49:8E:4D:2F:43:56:3C:3D:58:2B:37:DF:1D:F5:3C:3A:9F:A7:60:BB
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 0198D4A80D8FB1CB1A71A0B26B3C62492149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 1525
Signing time: Sat 23 Aug 2025 02:00:39 +0000
Manifest this update: Sat 23 Aug 2025 02:00:39 +0000
Manifest next update: Sun 24 Aug 2025 02:00:39 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: GVE//vnVYsx0n/KUDGwUT5KRJ/0p/jc+dkPGtqCRqFY=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0d:8f:b1:cb:1a:71:a0:b2:6b:3c:62:49:21:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Aug 23 02:00:39 2025 GMT
Not After : Aug 24 02:00:39 2025 GMT
Subject: CN=498e4d2f43563c3d582b37df1df53c3a9fa760bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f8:30:7b:28:41:4d:62:a7:3c:e7:e4:a8:3f:
83:61:4a:37:f6:47:a0:42:5a:ed:0f:33:ab:0a:aa:
4a:3e:c9:f9:fb:6f:72:75:0f:56:69:79:61:a3:f8:
04:12:c9:31:0f:56:20:e2:fa:95:9e:99:73:3f:4d:
b3:b4:02:ac:4c:8e:cc:95:3c:e7:61:08:47:05:d8:
da:83:9b:b4:13:37:9e:96:48:5a:58:4a:93:32:07:
cd:15:46:ea:9b:ad:81:e4:cb:18:dd:b1:5f:bf:2c:
33:a1:99:cd:9b:fb:b0:00:62:84:96:02:82:67:21:
d0:fe:70:5e:24:b0:00:80:12:94:ee:81:68:c0:6b:
1a:d3:7d:58:51:c8:b0:41:42:12:0d:4a:fa:f8:3c:
39:3e:fc:2e:55:b5:9f:4d:c7:64:2d:cb:47:e7:d8:
10:9c:26:94:7b:26:87:26:d4:be:dc:c3:43:c0:a0:
c1:cb:8d:60:4c:75:6a:43:f8:f1:3f:a3:39:ac:01:
e2:d1:2d:af:7e:11:10:cd:fd:35:dd:49:9f:d9:ce:
4e:67:ed:96:7a:9b:a0:ec:d3:71:00:1b:51:f8:0f:
ab:ae:c4:34:1a:18:82:6e:bb:6d:02:cf:d6:72:83:
57:e6:63:2e:19:87:dc:7b:b0:11:a6:2e:5c:b5:ce:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8E:4D:2F:43:56:3C:3D:58:2B:37:DF:1D:F5:3C:3A:9F:A7:60:BB
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ba:6f:b9:ba:76:b2:d7:c8:7d:b4:7f:cf:3c:43:b8:75:dd:
93:0e:7d:17:15:a1:99:f5:dc:0b:3b:b1:06:15:54:f4:33:77:
65:86:75:0d:de:b1:b5:ff:f6:16:50:c5:c6:15:4d:05:79:2b:
a5:2d:5d:12:91:7d:45:c0:16:8b:94:d6:a7:89:a6:e2:0b:c9:
bc:c5:fa:e7:f5:6f:f4:c8:c4:33:b1:92:8d:7e:c3:d9:ec:5a:
5f:81:74:38:94:d4:34:2f:6b:1b:2c:a9:eb:61:6e:2a:ac:57:
fd:41:fb:8b:65:36:b8:e9:89:e7:9f:f4:0f:46:9e:73:f9:33:
f4:62:ff:7e:71:7c:54:ee:a2:70:c3:ba:fc:51:f0:17:74:83:
14:ea:00:f0:53:db:e1:1f:b0:1e:0f:1a:af:9e:1a:3e:8f:15:
0d:c9:ea:e8:fb:8e:bd:88:10:53:43:86:ec:71:33:23:6c:12:
b3:6a:a7:76:97:04:ba:8f:a8:a7:ba:7f:d6:0f:21:38:e4:4f:
bb:01:7f:8d:9a:a2:60:3b:ff:4a:5c:03:94:a7:ca:29:5c:82:
1e:bf:5f:3e:6b:cb:a4:49:af:20:d8:3c:12:3b:0e:e7:0a:1f:
8c:65:0a:6e:c0:5e:b4:3a:04:e6:34:8d:90:19:d1:9c:12:ec:
c5:66:70:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqA2PscsacaCyazxiSSFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTAyNmVmMjY5MjA5MDlkOTMxZWE0ZGFjOWQ5MzkwNDg2
YjQxNTMwHhcNMjUwODIzMDIwMDM5WhcNMjUwODI0MDIwMDM5WjAzMTEwLwYDVQQD
Eyg0OThlNGQyZjQzNTYzYzNkNTgyYjM3ZGYxZGY1M2MzYTlmYTc2MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvgweyhBTWKnPOfkqD+DYUo39keg
QlrtDzOrCqpKPsn5+29ydQ9WaXlho/gEEskxD1Yg4vqVnplzP02ztAKsTI7MlTzn
YQhHBdjag5u0EzeelkhaWEqTMgfNFUbqm62B5MsY3bFfvywzoZnNm/uwAGKElgKC
ZyHQ/nBeJLAAgBKU7oFowGsa031YUciwQUISDUr6+Dw5PvwuVbWfTcdkLctH59gQ
nCaUeyaHJtS+3MNDwKDBy41gTHVqQ/jxP6M5rAHi0S2vfhEQzf013Umf2c5OZ+2W
epug7NNxABtR+A+rrsQ0GhiCbrttAs/WcoNX5mMuGYfce7ARpi5ctc7iuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmOTS9DVjw9WCs33x31PDqfp2C7MB8GA1UdIwQY
MBaAFLvgJu8mkgkJ2THqTaydk5BIa0FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUt
MDU5YmFiMDE1Y2MzLzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUtMDU5YmFiMDE1Y2Mz
LzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbpvubp2
stfIfbR/zzxDuHXdkw59FxWhmfXcCzuxBhVU9DN3ZYZ1Dd6xtf/2FlDFxhVNBXkr
pS1dEpF9RcAWi5TWp4mm4gvJvMX65/Vv9MjEM7GSjX7D2exaX4F0OJTUNC9rGyyp
62FuKqxX/UH7i2U2uOmJ55/0D0aec/kz9GL/fnF8VO6icMO6/FHwF3SDFOoA8FPb
4R+wHg8ar54aPo8VDcnq6PuOvYgQU0OG7HEzI2wSs2qndpcEuo+op7p/1g8hOORP
uwF/jZqiYDv/SlwDlKfKKVyCHr9fPmvLpEmvINg8EjsO5wofjGUKbsBetDoE5jSN
kBnRnBLsxWZwzg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:42 2025 by rpki-client