Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: 05Y/6+d1q0RlNJgWinD0A2IwRhxFPDTp3SQgid/AbQE=
Subject key identifier: 07:34:C4:BE:13:40:77:3E:0A:4B:59:86:C7:F3:91:D1:62:21:43:38
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 0198D66110342A7176B5D02E87CBFE25C106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 09AD
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: GgXyhDwoRhodwkfLypId185LMcuwO+LSr3ud/jvUHFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:10:34:2a:71:76:b5:d0:2e:87:cb:fe:25:c1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=0734c4be1340773e0a4b5986c7f391d162214338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:6f:e0:fa:cf:7a:84:05:9a:f6:f7:ce:53:
05:0c:b0:63:02:f1:f6:6a:c6:3e:6c:50:28:1e:8d:
08:d2:66:4e:09:c1:05:17:2d:f4:54:7a:c8:fe:d5:
e2:42:7e:a6:48:5b:39:26:67:50:bf:15:77:fe:94:
d5:d4:07:69:0c:c2:25:83:17:4a:32:c4:c9:8f:64:
f6:05:da:a8:13:35:b5:5b:40:f4:24:62:f5:7e:ef:
1b:12:e0:01:d9:06:e8:52:57:7f:2a:a8:ba:5e:10:
b9:81:52:b8:8c:8b:04:05:5f:76:48:f4:b1:dd:7d:
8f:d2:93:87:ca:1a:f2:7a:ad:63:87:90:8c:40:ce:
46:6c:52:2d:0a:50:06:ae:2a:61:2a:b4:9a:3a:fb:
e2:82:2c:a4:af:b8:cc:99:39:aa:8a:19:ed:4c:0a:
b2:a2:08:02:f3:00:7f:b9:2a:97:33:50:12:92:5f:
3a:35:b6:80:ee:db:20:00:be:ce:be:a6:f9:eb:86:
14:c4:3b:30:72:a4:06:4f:c1:c2:16:f2:01:5f:db:
09:ab:55:3c:80:fa:ca:54:40:bf:6b:8b:ea:95:26:
a8:33:6a:8f:2f:bb:41:c0:6c:9f:50:21:cc:ca:58:
d5:84:ca:10:3e:75:d7:2e:88:d4:65:25:16:c2:ba:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:C4:BE:13:40:77:3E:0A:4B:59:86:C7:F3:91:D1:62:21:43:38
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4f:0a:f4:0d:f3:a2:f4:52:50:ce:c6:7f:1c:ed:a0:a9:67:
1a:37:80:7e:26:e3:67:7c:c5:d8:47:f2:3d:78:9e:d8:85:d0:
aa:f6:0f:2d:ae:2b:99:31:ad:4b:e8:b6:c1:18:55:49:14:57:
90:33:ce:af:68:83:8d:11:76:4d:28:28:c3:5b:54:7b:b9:1e:
79:81:37:90:dd:d7:cb:83:ef:09:36:8e:a0:7b:fc:c5:dc:b1:
35:92:2d:a3:7f:51:85:b9:28:3d:bf:bc:2f:3f:a9:4c:f9:85:
b7:fc:40:55:2e:1f:6d:5f:23:a5:a4:91:26:27:5c:3d:61:ae:
9b:e9:e4:b6:75:57:7a:30:f2:25:1d:b6:69:ab:ef:be:c7:a2:
43:e5:3b:5f:73:57:55:cf:64:06:fa:1a:0f:bd:c2:57:36:5c:
50:67:58:8d:a0:f1:ea:8e:a3:07:dc:c7:5e:a9:33:f3:99:5c:
31:2f:af:a6:07:fd:7e:90:22:04:21:df:06:14:c6:2c:75:89:
c3:7c:e1:73:6e:51:a4:4f:72:9a:5d:c0:d2:04:ff:f9:58:f4:
84:20:eb:24:cc:bb:52:f8:f9:c0:c8:7a:cb:0c:d6:01:b8:54:
58:05:2d:1c:31:60:19:20:d7:8c:4e:ce:a0:d7:c0:a6:77:c0:
11:6f:b1:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYRA0KnF2tdAuh8v+JcEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNmZkZDJmZDQyZmFiZjg3MjcyMDk1MjQ2OGQyOTYzNGM2
OGM5ZGMwHhcNMjUwODIzMTAwMjIyWhcNMjUwODI0MTAwMjIyWjAzMTEwLwYDVQQD
EygwNzM0YzRiZTEzNDA3NzNlMGE0YjU5ODZjN2YzOTFkMTYyMjE0MzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9hv4PrPeoQFmvb3zlMFDLBjAvH2
asY+bFAoHo0I0mZOCcEFFy30VHrI/tXiQn6mSFs5JmdQvxV3/pTV1AdpDMIlgxdK
MsTJj2T2BdqoEzW1W0D0JGL1fu8bEuAB2QboUld/Kqi6XhC5gVK4jIsEBV92SPSx
3X2P0pOHyhryeq1jh5CMQM5GbFItClAGriphKrSaOvvigiykr7jMmTmqihntTAqy
oggC8wB/uSqXM1ASkl86NbaA7tsgAL7Ovqb564YUxDswcqQGT8HCFvIBX9sJq1U8
gPrKVEC/a4vqlSaoM2qPL7tBwGyfUCHMyljVhMoQPnXXLojUZSUWwroPCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc0xL4TQHc+CktZhsfzkdFiIUM4MB8GA1UdIwQY
MBaAFGpv3S/UL6v4cnIJUkaNKWNMaMncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNWNjNGEtZDI2Ni00MGU2LTg4Zjkt
ZDkxNDg0ZWIwYzM4LzEvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNWNjNGEtZDI2Ni00MGU2LTg4ZjktZDkxNDg0ZWIwYzM4
LzEvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASU8K9A3z
ovRSUM7GfxztoKlnGjeAfibjZ3zF2EfyPXie2IXQqvYPLa4rmTGtS+i2wRhVSRRX
kDPOr2iDjRF2TSgow1tUe7keeYE3kN3Xy4PvCTaOoHv8xdyxNZIto39RhbkoPb+8
Lz+pTPmFt/xAVS4fbV8jpaSRJidcPWGum+nktnVXejDyJR22aavvvseiQ+U7X3NX
Vc9kBvoaD73CVzZcUGdYjaDx6o6jB9zHXqkz85lcMS+vpgf9fpAiBCHfBhTGLHWJ
w3zhc25RpE9yml3A0gT/+Vj0hCDrJMy7Uvj5wMh6ywzWAbhUWAUtHDFgGSDXjE7O
oNfApnfAEW+xYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:12 2025 by rpki-client