Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: GRk8EY82mW3N+pQhIbDUY8UI9InRP+TbU1znABfcV4Y=
Subject key identifier: D1:14:EC:23:DA:F0:D2:45:6C:30:03:8F:DA:3D:0B:11:54:E5:62:0C
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 019A24E5C4F34ADD21DE79F6945CA62F03E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 09:00:29 +0000
Manifest this update: Mon 27 Oct 2025 09:00:29 +0000
Manifest next update: Tue 28 Oct 2025 09:00:29 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: lkycE1KCSxd2aYyf28yIsYsWycnjNx89tOLCozEEcqo=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:c4:f3:4a:dd:21:de:79:f6:94:5c:a6:2f:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Oct 27 09:00:29 2025 GMT
Not After : Oct 28 09:00:29 2025 GMT
Subject: CN=d114ec23daf0d2456c30038fda3d0b1154e5620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:9e:ca:44:3a:ec:ab:d2:a9:4a:f5:8a:76:
94:a9:72:17:5c:94:9f:ee:0c:6a:f5:76:4f:f0:09:
39:7d:b5:70:0a:86:6e:eb:6b:6b:f7:1b:ef:40:63:
38:aa:c7:ed:13:2f:ed:6d:0c:6f:dc:cd:23:bc:0a:
b3:dc:50:ad:5b:a2:a6:a1:fb:f5:56:b0:30:45:d7:
44:f9:e8:dd:f8:06:62:4d:10:61:4c:22:bb:ee:e7:
19:43:c5:93:77:e6:8d:14:0f:91:27:11:22:51:a4:
ce:bb:e4:44:c7:73:02:e1:77:a5:fc:4a:5c:9e:0c:
8a:70:67:bc:93:c6:92:c6:44:6e:66:eb:1a:f6:bc:
ed:e9:26:0a:0f:7c:64:49:a4:e8:33:8d:51:3d:dc:
46:c3:7e:2f:2a:22:ae:70:e6:64:a2:40:99:22:1a:
02:55:49:a8:28:ce:ba:91:fd:ae:9e:b2:fb:b9:2b:
a2:a5:2d:a3:12:bd:77:5b:dd:4d:0b:df:1b:dd:03:
50:13:43:dd:7c:57:9c:2d:fe:20:e0:70:fc:49:82:
17:37:1a:db:dd:72:ed:76:9f:74:ba:86:cd:cc:c8:
4b:d6:87:8d:e0:37:7b:a2:f9:86:a7:15:54:cf:0e:
b2:0f:b8:7e:ac:1a:e7:fe:ce:9b:f7:e7:fb:a7:43:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:14:EC:23:DA:F0:D2:45:6C:30:03:8F:DA:3D:0B:11:54:E5:62:0C
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:22:ad:76:8d:65:af:cb:e9:83:0e:70:bd:7c:48:ff:9f:
0a:d2:e8:4d:ed:d8:02:f1:67:d7:6f:b6:60:10:61:9d:97:4f:
e5:18:dc:a8:9a:da:e1:a8:c4:63:ab:6d:60:bc:93:95:77:3f:
3e:0f:fc:78:10:96:67:1a:50:35:ec:62:48:d3:1d:b7:f5:27:
7d:26:2d:9f:5a:26:aa:72:bc:7d:69:06:9d:f8:74:44:c9:71:
cf:86:22:74:43:c1:b5:1a:60:68:a4:db:25:48:64:9d:e1:f1:
43:14:f0:91:da:7f:fc:9c:fc:07:25:f8:3a:00:93:fa:a5:2a:
b9:56:29:f0:39:c9:f2:f0:4b:64:ed:69:b3:e1:2e:f7:55:69:
61:d4:bf:86:1d:b4:c6:19:73:02:0e:0c:05:cf:bb:14:ae:5f:
e8:58:a8:dc:e8:ae:c1:ab:5e:04:ac:0c:ab:91:39:4e:c8:aa:
f7:82:04:43:71:77:c7:85:5a:63:ad:d6:65:d0:3f:91:c9:67:
25:5c:6c:7b:81:c6:a3:09:52:5c:47:c4:e3:3f:86:a5:b5:ab:
6f:b9:69:5f:43:31:4c:27:c1:36:47:49:75:be:98:b9:96:78:
69:55:f3:4a:1d:82:e7:d7:ea:11:76:94:15:e7:5b:c4:5c:ea:
10:59:a6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:47:54 2025 by rpki-client