Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: PUuP/AzH98zrB0uEsmUKcIYzu99FgmcGl0vkpsAh4/A=
Subject key identifier: 8B:52:29:B8:74:55:48:EF:40:7D:1C:A3:CE:12:EF:A5:A2:F4:10:1B
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 0199FC219D9101F402F25C92DC724DCA3D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 15BE
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: UONlFyP/O/TJ+LvQ/G+c/zNbAAwC3riJQYfqEHIQNl0=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9d:91:01:f4:02:f2:5c:92:dc:72:4d:ca:3d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=8b5229b8745548ef407d1ca3ce12efa5a2f4101b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:ca:cc:c9:92:cb:60:79:20:3e:49:c4:a1:
e2:56:52:c3:85:4b:f6:9d:8c:a8:ef:62:b4:cd:de:
20:a5:74:14:8f:af:c1:81:f5:17:12:4e:4b:41:1b:
2d:2f:f0:29:82:fa:4f:56:fa:83:d7:8e:51:fc:1a:
50:cf:39:c8:7c:df:76:75:ef:17:16:20:4e:66:7c:
3b:71:39:b6:be:94:48:20:a9:b8:92:dd:8e:64:e3:
f6:21:2f:d8:32:c3:f9:dd:ea:3b:0e:02:e4:21:4f:
70:cb:ea:b4:3d:c1:bb:2d:87:e7:e0:53:b1:5b:3f:
bb:b0:09:1d:79:ac:9b:ab:bf:da:27:5e:a1:2c:bb:
ba:c4:73:f6:5b:3d:8b:2f:b0:71:33:58:e9:51:63:
db:8a:2f:d9:da:3b:18:b7:91:6d:55:21:43:68:fc:
1a:45:5b:b3:ea:36:8e:11:1b:2a:37:4a:ea:49:f0:
f7:6c:96:bd:ee:64:c8:6e:57:e9:1d:10:2b:a3:4b:
8e:f7:b0:e4:1e:29:f3:aa:24:2d:87:60:5e:b9:cb:
3d:4b:36:53:6b:5a:ea:09:25:02:d1:6c:31:73:1e:
1d:9b:79:4e:67:70:b4:3e:92:c7:c3:97:c3:ff:90:
95:8f:ca:00:c0:bb:9f:8d:2f:10:2a:ef:d6:f9:4d:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:29:B8:74:55:48:EF:40:7D:1C:A3:CE:12:EF:A5:A2:F4:10:1B
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ba:84:da:e1:97:d6:9d:92:88:90:c9:26:44:b0:48:2d:9f:
ed:0a:73:94:dd:6e:97:39:46:56:3a:f2:9f:28:0b:90:c6:c5:
c9:69:a7:30:30:74:99:3a:dc:3e:e8:c8:00:73:f9:41:a4:1f:
4f:7e:64:86:db:99:e2:9e:af:2b:f9:5f:14:44:4b:6a:4e:a1:
d9:b5:5d:0c:1a:89:28:01:1d:44:15:a2:b4:d6:60:44:58:82:
a6:92:40:13:98:7d:10:00:67:1f:5f:49:2a:18:16:87:ea:21:
c6:15:8b:47:a7:e6:95:11:fd:e1:4f:16:67:31:dc:ee:d3:56:
16:fb:d6:88:17:2f:8c:e4:ad:66:4b:53:58:e4:2a:87:dd:a0:
88:25:93:c1:da:cb:7c:ff:36:76:74:7f:06:9a:63:4a:48:d6:
14:cc:0d:80:11:fa:83:b5:20:6f:12:c7:81:c9:4e:66:01:58:
84:9e:63:bf:1c:a3:44:70:f0:9e:e3:94:ae:79:f2:db:f3:38:
55:b9:00:2c:d3:ea:d6:49:0e:ec:e6:11:8e:77:63:ef:94:53:
e9:b8:6f:5b:e3:80:c5:8c:6c:4c:26:f0:35:ed:71:8d:82:f4:
21:29:ce:a4:11:67:bf:08:77:03:c5:ab:18:cd:d4:3f:a4:72:
38:2b:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:55 2025 by rpki-client