Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: Gyqh51gKRftdol+Q2zNfv3F9KkBfjmIBoLKPzWRKGEY=
Subject key identifier: 95:E0:6E:02:E6:4D:17:75:25:3A:DF:BE:B7:D7:46:88:DB:9A:FB:0F
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 0199356E83D323A8204E8B23D8D94473FA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 21:00:58 +0000
Manifest this update: Wed 10 Sep 2025 21:00:58 +0000
Manifest next update: Thu 11 Sep 2025 21:00:58 +0000
Files and hashes: 1: WTZTgFi28jLlym6OE35mFLAhldM.roa (hash: jSGkSx+xIVrc/nZDnmv+Qse1KJ3JV2HCFfbdRdP+Xro=)
2: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: 4BGNe9FdrHXDDiSe1A/zILvOxSRIxZC+uLVnaLyTa08=)
3: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (hash: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:83:d3:23:a8:20:4e:8b:23:d8:d9:44:73:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Sep 10 21:00:58 2025 GMT
Not After : Sep 11 21:00:58 2025 GMT
Subject: CN=95e06e02e64d1775253adfbeb7d74688db9afb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:c3:11:92:05:34:8c:fc:92:da:f8:c8:c9:
a2:69:b1:97:6c:98:bb:d3:59:e6:39:98:97:2e:88:
89:d0:6d:17:60:d9:c5:3e:3c:87:28:87:29:a4:6e:
2b:dd:10:bf:c8:f0:86:16:31:14:ad:35:20:10:0f:
88:a7:21:90:f8:14:48:38:e2:ea:6d:24:7e:13:1a:
98:cf:86:58:15:11:a3:ea:56:28:e4:e5:f5:ed:a4:
47:89:7a:fe:63:07:4f:1f:ee:6b:c0:a0:0e:51:eb:
9a:36:29:70:0c:b3:3a:c7:c4:83:6a:47:80:65:36:
7e:88:80:cc:fe:6b:37:b9:72:6c:2c:1f:ce:9b:d9:
13:89:9a:4a:75:36:4c:6e:86:56:5e:0c:34:3a:48:
86:43:bf:d7:27:0b:c3:06:65:6d:c4:c7:f9:28:9f:
5c:c5:bc:69:e5:66:70:1f:40:f3:9e:32:ff:9e:dd:
05:5f:9f:fd:24:56:21:21:bd:a0:e8:90:a4:e3:2a:
9a:2a:64:0a:51:ef:97:73:07:7a:ed:55:b4:b1:87:
76:c0:72:01:4f:84:76:7a:d2:43:eb:b0:0b:92:15:
6a:6f:83:96:03:31:b0:2f:1e:f5:0f:af:e5:6d:01:
ec:f9:3c:a5:66:ac:c0:ce:53:d5:1a:ee:ce:68:fa:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:6E:02:E6:4D:17:75:25:3A:DF:BE:B7:D7:46:88:DB:9A:FB:0F
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2c:da:68:4b:df:b6:98:75:f9:07:15:d4:8a:ba:a6:e1:e9:
f1:d3:b5:ae:9d:15:89:4b:21:1b:f2:e0:69:e7:1f:1a:62:a5:
4c:c9:96:c8:36:71:6d:6b:14:73:4f:94:99:a1:75:a4:b3:d2:
41:7f:bc:3e:35:ca:f2:6a:27:66:de:0a:54:5a:9b:af:04:ff:
6d:8c:9e:36:a1:39:99:b0:1d:77:95:26:87:96:09:95:ff:95:
d8:1f:8b:62:e7:53:ac:2b:e6:dd:c2:ce:c6:cf:7b:e3:02:b2:
07:47:fd:55:f0:0d:99:0a:96:3d:c2:80:23:b1:fc:74:15:17:
96:86:85:1a:10:b9:71:ce:67:1d:9d:4f:80:67:06:a6:ca:52:
74:4c:e4:23:03:f8:1a:35:1a:2e:e4:76:f3:e6:fc:6d:da:c6:
a8:29:00:3c:3c:50:fd:99:7c:57:3b:7f:0d:a8:ab:9d:a8:59:
d8:2d:e1:5e:b2:57:25:28:30:dc:74:2a:b8:19:10:e5:cc:74:
bf:d6:2a:f8:70:bc:77:f0:6f:c0:66:51:2b:e0:ec:fe:e2:87:
dd:0c:0e:4f:3b:fd:5d:90:82:ad:d1:f0:da:41:37:41:3b:43:
a2:5a:a3:b3:2a:c0:2f:40:62:9a:f3:e6:d5:0a:70:39:e7:74:
62:42:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:36:13 2025 by rpki-client