Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: f7HpLvVGSF7R6alozg0N9GaOqLXKo+ttie7nmVV7fKE=
Subject key identifier: E4:3A:1E:F3:D6:50:67:ED:F9:8D:76:D7:D1:4F:1D:88:45:4F:C8:7D
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 0199FFC8C3C92160F00DCEB134A4A84D4D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 04:02:51 +0000
Manifest this update: Mon 20 Oct 2025 04:02:51 +0000
Manifest next update: Tue 21 Oct 2025 04:02:51 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: dGTNznY7G8g279+pj/T7Cs/eKk599O63CncgqareV+0=)
2: ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa (hash: A+6pCmvRh21bff+k990m7MW26aQWM6C7J37zdRTRafw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c3:c9:21:60:f0:0d:ce:b1:34:a4:a8:4d:4d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Oct 20 04:02:51 2025 GMT
Not After : Oct 21 04:02:51 2025 GMT
Subject: CN=e43a1ef3d65067edf98d76d7d14f1d88454fc87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:e0:e3:12:e7:7a:b0:20:80:20:0f:68:ed:
e4:23:74:41:05:98:25:b9:0d:4f:ac:94:87:ff:1e:
f2:c0:46:91:54:2f:5f:a1:71:51:13:43:e1:56:ad:
b8:2c:7c:20:19:1e:dd:85:e2:b6:04:fd:89:ee:18:
b1:29:4f:99:ca:f7:71:2a:7c:2b:5a:6f:76:a8:04:
c4:39:38:04:c7:5b:7e:3e:2a:a0:8d:f5:0e:a0:44:
f1:bd:fa:91:fd:9d:90:5e:6b:3d:bf:e5:3f:3a:97:
bf:6b:2e:00:2b:3c:6a:03:97:41:69:89:c9:e1:00:
94:4f:6e:ea:ab:78:aa:92:5b:33:16:15:6a:55:e7:
38:45:51:10:a6:68:fb:13:88:3c:43:fb:89:67:86:
3a:af:80:1e:e4:5a:22:95:3b:f1:0d:a6:20:07:01:
8b:ab:71:45:94:d2:6c:de:34:dc:2d:a0:4e:70:eb:
29:82:03:77:b9:e3:55:22:6b:b2:dc:7a:4b:14:3e:
ec:e7:e3:bd:57:91:66:5c:d7:da:78:15:58:78:3b:
3f:a7:6a:a3:08:a4:d3:4b:46:c0:cc:40:ac:60:a7:
3b:ec:76:1b:71:a4:1a:85:2f:83:8e:7f:0a:cb:ba:
57:61:5e:d7:28:14:08:ee:36:6a:31:07:d5:39:b5:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3A:1E:F3:D6:50:67:ED:F9:8D:76:D7:D1:4F:1D:88:45:4F:C8:7D
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bd:8b:86:ce:26:7c:cd:b6:90:a8:c9:21:eb:58:a8:4f:b3:
fc:f1:ec:01:2f:e5:65:ae:9c:4d:7c:78:1a:26:14:d3:28:39:
33:4d:08:4f:0d:c0:66:3a:38:67:1b:c5:0d:27:f6:80:f4:6e:
5f:46:1b:bc:1a:24:fd:28:1a:e4:74:93:e5:78:3f:78:7e:35:
41:28:02:90:70:fb:ec:5b:c7:3a:b5:db:7f:d4:82:ae:27:05:
77:32:98:38:3e:0a:c8:a3:85:6a:77:66:2c:13:ad:78:56:46:
08:7b:f7:0c:a9:e7:dd:21:94:92:ba:66:b3:e2:88:50:99:91:
31:cc:42:1b:ca:f2:7f:8e:38:fa:d8:c9:57:cc:58:35:ca:1c:
88:52:04:2a:6e:95:d1:05:f4:79:c1:76:11:59:f5:2a:7c:e8:
4c:fe:7d:0c:b6:c3:57:ef:40:2a:29:b6:a8:f1:b2:86:9d:fb:
ab:36:36:8d:89:b9:68:68:63:89:b1:5f:2c:28:d6:b4:70:d3:
4f:f8:01:25:cf:ba:e8:b6:d9:7b:5a:f4:f3:a2:12:e9:99:b8:
9f:d6:03:4c:d0:25:94:f4:fd:ff:5f:59:8d:4c:b8:6a:81:a3:
7f:48:ed:74:e9:a1:6e:08:fe:ab:95:a4:3d:b9:31:c7:cc:bf:
47:74:22:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yMPJIWDwDc6xNKSoTU0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjExYjRlYWEyZTBiMzdmNzJjYzA4YWM5Mjk2MTk4MWVh
YmIyMWYwHhcNMjUxMDIwMDQwMjUxWhcNMjUxMDIxMDQwMjUxWjAzMTEwLwYDVQQD
EyhlNDNhMWVmM2Q2NTA2N2VkZjk4ZDc2ZDdkMTRmMWQ4ODQ1NGZjODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDLg4xLnerAggCAPaO3kI3RBBZgl
uQ1PrJSH/x7ywEaRVC9foXFRE0PhVq24LHwgGR7dheK2BP2J7hixKU+ZyvdxKnwr
Wm92qATEOTgEx1t+PiqgjfUOoETxvfqR/Z2QXms9v+U/Ope/ay4AKzxqA5dBaYnJ
4QCUT27qq3iqklszFhVqVec4RVEQpmj7E4g8Q/uJZ4Y6r4Ae5FoilTvxDaYgBwGL
q3FFlNJs3jTcLaBOcOspggN3ueNVImuy3HpLFD7s5+O9V5FmXNfaeBVYeDs/p2qj
CKTTS0bAzECsYKc77HYbcaQahS+Djn8Ky7pXYV7XKBQI7jZqMQfVObUJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ6HvPWUGft+Y1219FPHYhFT8h9MB8GA1UdIwQY
MBaAFAJhG06qLgs39yzAiskpYZgeq7IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2Qt
MTJjNGJkODA1OGFhLzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2QtMTJjNGJkODA1OGFh
LzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApr2Lhs4m
fM22kKjJIetYqE+z/PHsAS/lZa6cTXx4GiYU0yg5M00ITw3AZjo4ZxvFDSf2gPRu
X0YbvBok/Sga5HST5Xg/eH41QSgCkHD77FvHOrXbf9SCricFdzKYOD4KyKOFandm
LBOteFZGCHv3DKnn3SGUkrpms+KIUJmRMcxCG8ryf444+tjJV8xYNcociFIEKm6V
0QX0ecF2EVn1KnzoTP59DLbDV+9AKim2qPGyhp37qzY2jYm5aGhjibFfLCjWtHDT
T/gBJc+66LbZe1r086IS6Zm4n9YDTNAllPT9/19ZjUy4aoGjf0jtdOmhbgj+q5Wk
Pbkxx8y/R3QisQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:06 2025 by rpki-client