Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
File: Ami5ML7spR-_NUP-efmxk0XPE9U.mft (raw, json)
Hash identifier: cQc+rO17hPHt8ISoGExvUL0SH6X7wkE058mnopo6tFE=
Subject key identifier: F8:86:21:8C:CD:CA:BF:A5:A4:F4:26:9C:61:C6:93:15:62:9B:9C:1D
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 0199FD6B64BF0F51F8FB8B7627C939655E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
Manifest number: 0CAD
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: 7ocFAoRHk3yJWF4ccbCKPsPczz0.roa (hash: 3rzZftACx3aNRwkNijs0bb/ATBefsoIo/62WXVgzLj8=)
2: Ami5ML7spR-_NUP-efmxk0XPE9U.crl (hash: t241zllBZacgwPRfhm5VaB7ccDPWbZfadwfmNCDJ55I=)
3: KQ2gfKjDTAqDCIF8rg6ctK4u8jw.roa (hash: SW1oNVSy3V9mCkDE3DhSyTP3T2L66HAY6yybOJ8XTqM=)
4: z58icxsnW3D1G-Tg8oJfAEu4K30.roa (hash: 2xl+ZWAT8+7LeSxTlZeMXeVfz1ij8cub6sBtbC4Yv/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:64:bf:0f:51:f8:fb:8b:76:27:c9:39:65:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=f886218ccdcabfa5a4f4269c61c69315629b9c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:60:4c:ca:04:a1:24:07:a6:44:ae:85:1c:
08:33:9e:f0:9a:e2:99:af:d6:a9:2d:3a:80:23:50:
97:c1:37:ff:92:01:c0:d7:4f:2f:c9:f9:df:3a:e3:
34:d2:b7:c1:4f:07:d8:fa:7c:58:12:b7:0a:79:aa:
f4:50:96:50:fd:18:53:a3:4d:ed:2a:57:a3:1d:85:
cb:3d:94:bd:7e:77:83:69:a8:88:5c:39:3c:0c:7f:
fa:2b:1e:5d:cb:e8:52:08:e8:d3:5a:e0:65:de:c8:
0f:f8:f8:62:8a:dd:75:75:4a:22:19:03:f5:c6:fb:
43:b9:1f:6d:fe:b4:1b:2c:d3:7d:c8:96:67:12:7c:
f7:7e:b9:3d:34:f7:ec:c5:e0:02:85:1f:00:be:16:
fb:a3:10:5c:8f:77:7e:2c:8c:a5:e0:34:32:58:10:
59:b1:3d:65:d2:11:b6:80:95:85:a0:3b:e5:5c:fc:
1b:3e:b2:c2:33:b0:fe:ef:cc:19:cf:02:ea:02:66:
30:d1:d5:93:f5:90:1a:7c:c1:5e:b1:87:8f:55:56:
d3:38:22:5d:96:fd:3c:3c:fa:e7:ca:8f:28:f7:d4:
5e:7f:84:1e:14:76:40:4b:ff:0a:d0:e1:fa:a5:bb:
b2:c4:85:fe:44:83:bc:a3:f4:6d:5e:25:18:fb:90:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:21:8C:CD:CA:BF:A5:A4:F4:26:9C:61:C6:93:15:62:9B:9C:1D
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:7e:01:72:44:78:e7:a9:ab:59:87:c0:bd:3b:d4:aa:ee:
1a:3e:0a:c6:8c:54:74:15:ca:8d:aa:21:75:3e:6b:5e:4d:30:
2e:58:8b:50:71:85:7c:4a:e7:91:b4:76:0c:7c:2f:5f:c4:e5:
e3:6c:7e:a4:dc:be:d4:1e:e9:47:55:97:bb:98:8d:03:ed:4f:
36:83:6d:4a:44:3c:c2:b5:9d:5a:35:8a:96:f2:0f:cc:00:77:
6f:f5:83:14:e4:4c:c3:fc:56:cc:e7:32:15:da:70:d1:be:06:
03:f7:d6:d2:ff:f0:e9:cc:81:96:df:fa:b8:cd:8c:6e:d0:c8:
d9:4b:79:f1:31:e9:4c:72:94:ac:52:e9:04:48:ea:46:13:64:
59:7c:35:00:47:0a:5d:a9:47:0f:d9:bf:8e:e1:71:22:b7:52:
44:42:1e:3d:77:85:bb:58:e8:3a:8e:36:6b:5f:00:c6:38:df:
90:ff:3a:4f:31:8f:81:f9:74:1a:3d:34:1c:49:7a:6c:aa:0b:
41:9a:4e:87:26:e3:ba:45:8a:3c:cd:f8:94:1d:11:f1:ec:3f:
48:91:ca:17:47:8b:1d:1d:78:bb:ed:90:b0:e4:b1:dd:b0:32:
d2:6f:24:24:df:d2:f2:64:cc:5b:4a:b1:ec:8f:59:22:89:6c:
85:3c:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:27 2025 by rpki-client