Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: 2Gm7JaGxo3hptMdx2sKu2ZtoR4iTPvPenEO1w+L8BlQ=
Subject key identifier: 7D:D4:E1:9D:BA:33:F6:99:20:7F:4E:CC:E3:91:25:F7:0F:13:8C:C5
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 0199FBEAFA582FBFA32C15F284423A555CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 0A45
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: JiwlxZp2kLHqK4P60gZMoNXzUNoBxKPoxn+5R2w205g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fa:58:2f:bf:a3:2c:15:f2:84:42:3a:55:5c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=7dd4e19dba33f699207f4ecce39125f70f138cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:de:d3:2b:34:af:bc:0a:ed:80:3c:97:54:
ae:cb:2b:be:6e:30:1d:28:63:ae:7a:a6:98:20:07:
f2:94:b5:c1:ec:bf:b2:e9:ac:35:75:2a:77:3d:12:
33:be:a9:5f:0e:03:b6:23:17:65:db:78:75:29:db:
96:4b:bf:1a:fa:11:e8:c5:dd:19:39:19:76:c6:6e:
4d:43:b8:ab:33:47:02:73:4d:40:66:aa:fa:1d:3c:
72:d1:1c:b1:63:12:6a:f6:47:69:d6:d6:4b:ba:69:
81:3e:34:c1:bd:95:6d:a1:dc:c9:e3:ab:52:78:9b:
ca:fb:d3:a5:e0:9a:de:10:5d:a1:aa:4a:0e:3f:d0:
30:52:05:55:bc:40:0b:12:8b:91:5d:25:15:b6:a8:
c9:be:64:47:60:f4:1f:26:5a:9c:36:e8:4e:71:73:
0b:d0:0d:65:ac:b3:9c:55:0f:ab:12:19:c1:23:0d:
a3:ea:3d:df:1e:62:f6:22:7d:06:5b:db:70:77:e6:
eb:4a:56:a4:ee:0a:3b:1f:fc:6f:8d:ff:55:16:4f:
b3:b5:e7:a7:8b:35:1a:e1:af:21:8c:58:8a:ea:a4:
0e:dd:7b:f2:bb:27:fd:3b:36:3c:f6:2f:82:48:4f:
f2:93:12:42:99:2a:5f:82:5e:23:a0:8c:c3:ee:4f:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:E1:9D:BA:33:F6:99:20:7F:4E:CC:E3:91:25:F7:0F:13:8C:C5
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bd:60:14:57:73:dc:e6:8a:3f:4a:9e:cb:da:fe:53:50:3a:
8f:31:28:f0:bc:a3:b8:a6:ff:e0:64:43:97:74:fc:e0:32:5a:
d7:c0:15:69:ef:a1:09:35:4b:cd:56:b6:1f:40:de:5f:83:cf:
c2:10:53:6b:7f:dc:ca:6e:e4:19:a0:11:b2:4b:f9:03:81:be:
ff:90:8d:f0:1e:c2:7c:65:81:b9:f6:ae:30:9a:d7:aa:a4:04:
88:2b:18:0c:b0:1f:be:78:33:f2:28:4f:39:28:f4:45:67:46:
a0:13:4c:ec:05:57:d3:06:82:0f:c5:d4:59:8c:d7:cb:2b:21:
04:e8:d2:44:1a:00:e1:17:53:42:4f:27:96:46:41:b3:75:2c:
64:02:11:f3:67:32:33:8a:4f:5b:64:35:99:28:00:a8:e1:ab:
36:f7:c5:5f:de:75:fa:b0:b2:0d:d5:33:29:b0:55:39:c5:fb:
4a:39:d0:49:04:9f:59:a5:ae:c9:66:18:b7:57:6d:e0:c0:aa:
8e:1f:e4:13:0a:a1:19:d7:00:eb:11:f1:a7:37:0e:06:87:4a:
dd:2e:ac:7d:ea:5a:eb:d9:16:39:20:d8:68:20:5c:8e:46:76:
4d:cb:b7:e8:74:71:f7:85:89:8b:cc:ac:b7:5d:9f:17:22:52:
83:fb:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:08 2025 by rpki-client