Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: ak97kAO+iXpmYkcogW/LO9M+MLTQ8NKcqUMtOAVrwlg=
Subject key identifier: 3F:1C:DF:75:A4:73:02:6B:F3:5C:05:8C:40:05:D9:A3:50:8B:58:8F
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 0199FE7E18C45E914ED303F50BF06777B2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 0186
Signing time: Sun 19 Oct 2025 22:01:40 +0000
Manifest this update: Sun 19 Oct 2025 22:01:40 +0000
Manifest next update: Mon 20 Oct 2025 22:01:40 +0000
Files and hashes: 1: iwQbkJtBuAm_xcfzDuJT6i57BjY.roa (hash: RmTZJ40kwHa9kbSdBRPYJl4skgdfEXdZGrx35wy6Kio=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: ZYEyoD6JO8M+jtonMcW4Q2jS0MKJZTR4MwzkT6RNusE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:18:c4:5e:91:4e:d3:03:f5:0b:f0:67:77:b2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Oct 19 22:01:40 2025 GMT
Not After : Oct 20 22:01:40 2025 GMT
Subject: CN=3f1cdf75a473026bf35c058c4005d9a3508b588f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:79:8b:d9:d6:9f:fe:67:0a:a3:ee:7a:ae:
37:23:79:da:3d:8c:43:7c:3a:a4:f5:08:d6:83:e8:
ce:11:71:ff:db:27:eb:38:08:a9:1c:77:20:7c:d6:
65:fa:80:09:87:51:70:5d:e0:83:92:3e:af:a8:a1:
73:aa:58:1b:d3:a5:59:42:7c:b3:76:d6:d1:46:51:
df:06:bd:38:08:29:23:bb:8f:ad:7c:d6:cd:2e:df:
7e:7d:38:72:58:af:3a:89:69:04:59:ed:ea:bd:d8:
2c:b0:7b:56:3a:44:f0:f1:9b:d3:51:ce:32:e3:b5:
f0:1e:ce:6f:8e:94:61:a8:86:2a:6d:c5:4f:0b:77:
51:5a:c6:8b:0e:8c:7b:9c:40:d9:85:4b:79:e2:73:
1b:2b:ef:17:15:a1:b6:73:b8:4d:ac:d2:2f:78:3a:
16:5c:d6:1f:09:e8:37:ce:dd:a0:71:92:20:4d:8a:
da:a2:d2:e1:d1:19:17:4a:12:d6:69:4e:55:c5:8f:
1e:7e:a9:68:67:b6:f5:79:ce:3f:9f:64:b5:f2:77:
87:3e:ea:44:ea:0a:12:f3:30:93:42:73:72:30:b1:
38:06:9b:95:ec:54:de:d1:48:77:0f:69:9c:ba:2a:
a1:37:82:97:e3:f8:65:54:95:12:95:b8:ae:d7:6f:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:DF:75:A4:73:02:6B:F3:5C:05:8C:40:05:D9:A3:50:8B:58:8F
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:47:d2:b5:8c:81:b2:9c:44:af:57:f0:09:0a:df:e5:9e:
af:ca:34:62:33:5e:7b:3b:9f:6f:40:08:61:4f:d7:59:c1:a4:
b8:e5:05:77:e0:06:84:9d:0e:57:8b:be:9d:b0:42:d7:f5:34:
fa:21:fa:84:df:5e:dd:e6:78:55:0e:30:46:9a:9d:34:52:e9:
11:28:72:99:eb:5e:1c:de:65:f1:60:ae:fc:58:1f:29:4d:1a:
57:a6:15:77:44:d4:83:b7:2c:88:5e:13:51:99:63:11:29:33:
30:26:b6:37:f2:59:7d:59:60:c5:e6:d9:ee:9b:ad:4d:33:e1:
10:e1:71:df:e8:64:81:c3:4a:92:52:a2:a3:47:fe:c8:8a:c6:
95:b8:9b:30:5a:7d:40:89:25:7f:38:01:16:c3:9c:eb:b1:bc:
53:a2:f7:39:4e:2c:9b:3b:15:6f:c9:72:ae:9c:87:c0:1d:ef:
64:a9:f7:b1:cb:e7:6d:7d:7a:f4:b7:79:d1:27:3f:d8:ce:af:
28:d4:24:0b:fc:18:83:ef:c1:65:63:4f:a8:f1:67:48:0e:00:
9f:df:e2:40:d6:f2:52:4d:2b:6b:d9:a7:22:3d:4c:5f:8c:74:
8e:f9:44:9d:59:bc:1d:67:7c:8e:d5:57:0e:eb:9e:35:5a:76:
fd:9b:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:45:11 2025 by rpki-client