Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: xBapR0/oAnF5RVqpWfTU6/D4GHkbcdC4Hk3MBGuBGdU=
Subject key identifier: 55:59:09:DA:78:88:AC:28:36:10:92:3A:9C:2A:A1:AD:1C:CD:A3:6C
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019A16F3310E57E8352C369ED2140E5E009D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 0368
Signing time: Fri 24 Oct 2025 16:00:27 +0000
Manifest this update: Fri 24 Oct 2025 16:00:27 +0000
Manifest next update: Sat 25 Oct 2025 16:00:27 +0000
Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: uQMfiZ1atZg/+F9DzzYYew9cTh077WDf7JHmF05rHno=)
2: PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (hash: pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=)
3: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (hash: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f3:31:0e:57:e8:35:2c:36:9e:d2:14:0e:5e:00:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Oct 24 16:00:27 2025 GMT
Not After : Oct 25 16:00:27 2025 GMT
Subject: CN=555909da7888ac283610923a9c2aa1ad1ccda36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:91:b2:19:9e:06:cf:e9:cf:df:64:a8:8a:
19:fb:2d:bc:3f:8c:64:df:de:50:88:e7:5e:40:f4:
2d:c2:c4:d2:ce:e6:a1:fe:5a:6b:3a:cc:0e:ca:79:
d2:11:8a:63:9e:89:0e:12:e0:a0:b8:8c:8b:d2:a2:
1f:89:96:a4:03:d4:c6:3e:5f:cc:54:9f:3d:74:0f:
e2:04:db:80:be:15:bd:0b:11:5a:51:e0:e4:ad:cb:
02:b7:46:4d:91:55:a6:e2:b3:73:5b:30:5b:26:51:
cd:ec:b7:b7:a6:7b:b0:26:de:a6:e5:8a:d0:5e:12:
01:2d:51:18:9a:7e:39:64:d2:2b:b4:3a:74:35:d0:
25:ab:4a:a3:5a:ed:59:fb:01:ac:be:b5:41:51:ed:
01:ea:d9:64:33:c0:8a:0d:dd:a4:14:39:c8:48:52:
4d:d6:26:a9:5a:dd:ff:c4:0a:e4:e4:84:60:4e:ed:
f8:0b:e5:53:9b:46:7d:d7:14:63:05:ee:35:fd:df:
10:0e:a2:d5:b6:64:ff:e2:86:b8:c3:dd:07:5b:e3:
0b:84:81:51:7f:cb:0b:8a:50:e9:e1:b5:aa:06:8c:
1b:12:99:31:f8:c0:d1:b2:f5:7d:56:de:dc:b9:ca:
0a:27:41:f7:a8:c7:f8:a6:15:35:3e:ca:ce:08:ee:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:09:DA:78:88:AC:28:36:10:92:3A:9C:2A:A1:AD:1C:CD:A3:6C
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:32:cb:d4:64:fd:66:39:49:c1:0d:9e:6f:08:3a:68:13:7c:
91:97:35:45:74:ec:bc:cf:00:83:cd:34:af:c2:c2:aa:44:30:
e6:bf:5d:95:99:90:b4:19:af:03:41:9d:54:ca:c9:06:de:25:
9a:8b:f4:3b:2d:7f:57:4e:b9:f6:85:ff:6a:e3:29:37:c8:c0:
23:90:73:b1:4f:b6:e1:2c:13:04:04:b0:90:33:88:fb:4a:92:
8f:d3:4f:b8:ae:cb:a5:ad:26:7e:e5:87:1a:b3:43:3e:38:77:
08:f4:e2:c1:dd:ab:0d:be:50:28:0e:b4:0a:72:aa:1b:24:59:
7c:54:8c:9d:08:5f:3f:90:59:06:1f:52:21:18:06:5a:5b:ab:
ad:52:ec:fd:f4:70:ac:e5:fa:62:85:f4:ec:68:94:5f:38:cc:
d6:e6:65:ed:ee:ba:7b:28:1e:99:9e:eb:08:88:43:37:29:c1:
04:6b:cc:63:87:1d:4e:6c:f1:5d:3c:aa:12:a5:bb:2f:2b:6e:
d8:f8:0d:31:a8:4d:9a:b5:dc:5b:ff:7d:f6:99:92:c8:74:e3:
d6:53:9d:05:bd:e0:f5:d2:bf:d1:69:f0:a0:0a:76:9f:ba:30:
07:15:dd:bc:85:a9:75:46:a0:12:78:a5:ac:63:2f:8d:e1:89:
20:d1:8f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 23:31:27 2025 by rpki-client