Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: Lh8tUEtCpVNKkJ6Zmd1JUEgE1m8zK3IqCKpGSDAZYoc=
Subject key identifier: 28:AE:29:E8:5C:5D:1E:D1:87:2C:CB:6C:B6:D6:0F:EC:03:89:AA:0A
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 019849D2D676EE476A2A18BBF0C58CFC4752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 03:00:10 +0000
Manifest this update: Sun 27 Jul 2025 03:00:10 +0000
Manifest next update: Mon 28 Jul 2025 03:00:10 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: uiHvsveV5m8BakCTlisi/48XqWk8RIm3gWtSMCRJSHs=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d6:76:ee:47:6a:2a:18:bb:f0:c5:8c:fc:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Jul 27 03:00:10 2025 GMT
Not After : Jul 28 03:00:10 2025 GMT
Subject: CN=28ae29e85c5d1ed1872ccb6cb6d60fec0389aa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:50:81:c3:b5:3f:7d:4d:74:fa:7e:7f:de:
80:30:c1:54:e9:94:6e:f8:ae:de:33:f8:1f:95:5c:
90:ef:43:7c:6d:ca:fe:ee:c0:4a:ed:b4:a3:10:ff:
aa:24:70:11:ef:12:25:dd:c7:1a:c5:03:e2:4c:16:
fe:32:09:28:a7:f4:21:17:43:cc:d1:25:e2:67:87:
e5:c7:f9:70:d9:48:e3:ad:41:83:ef:10:5c:27:39:
f0:00:13:5e:3b:55:e0:d5:7b:d9:89:f1:a5:5d:a2:
d5:ba:06:13:4b:d2:a7:62:35:fb:c1:a3:a2:d0:a7:
b5:42:c3:6f:34:da:c4:57:33:b6:2e:e9:79:8f:3b:
4e:b3:3e:26:22:12:92:8d:d3:7c:e0:c7:3a:68:21:
49:e6:6c:94:8f:d1:c3:47:44:2a:8e:ac:bd:ed:2b:
74:9d:d1:30:2e:08:e6:21:c2:2f:a5:fd:77:96:1f:
46:84:af:1f:d6:a1:79:bb:76:f1:94:c5:67:ea:bc:
81:c3:e9:1d:02:95:d3:14:bc:90:5b:4f:a7:44:eb:
e1:42:76:c6:b9:13:ba:93:f0:6a:cf:c6:93:3a:9b:
e5:9e:d0:3c:ec:1b:be:b2:bb:f1:cb:c2:f1:ab:78:
22:96:77:70:0f:70:a3:f9:bf:58:7c:01:3e:92:08:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AE:29:E8:5C:5D:1E:D1:87:2C:CB:6C:B6:D6:0F:EC:03:89:AA:0A
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e7:81:dc:27:ef:52:19:47:f9:28:b6:f4:b2:dd:24:46:83:
83:c8:df:d2:13:2f:0a:bb:f9:97:b5:0d:47:c4:83:90:b1:42:
e4:71:2a:d0:c7:56:90:77:79:53:81:ff:0e:df:d1:4f:60:ad:
02:1d:07:fc:eb:58:3a:79:44:6e:1f:22:2b:1d:09:9d:18:fb:
94:2c:6f:eb:9f:3d:17:16:fc:a2:2e:42:a6:23:a8:c8:4b:19:
31:ec:13:d5:a7:cd:0b:b6:c5:54:cc:b0:12:db:4d:cf:f0:55:
79:3f:a7:5b:28:76:8a:a9:21:59:58:af:50:02:30:7c:d2:4a:
37:1b:2a:02:60:10:f0:f6:c2:56:1b:a5:80:d5:91:53:6d:e8:
5c:01:a7:e1:34:19:2a:97:93:bd:e2:65:17:c0:d9:50:68:f3:
f4:25:fe:1a:f0:c9:ea:27:ca:47:08:18:a6:9a:20:fc:ea:94:
ea:ad:d0:b5:4b:df:50:eb:5b:21:38:c9:df:bc:53:f7:7d:04:
8c:05:20:97:18:b5:aa:81:61:25:4a:06:8c:fd:38:6f:c5:56:
ff:98:59:ac:bd:1a:86:9a:a0:b3:d6:d9:bd:d1:49:7a:69:90:
b7:e3:58:0d:ad:a7:55:ae:f6:d4:eb:70:72:fc:51:f3:bf:16:
71:cf:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:44 2025 by rpki-client