Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: QxxPTKteSgLRJFhLBZaAx+XpL3GftiiZkDfIWlLg2VU=
Subject key identifier: E6:55:05:93:B9:89:17:89:6F:9E:08:EC:A7:C8:83:9B:C1:1C:18:F7
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 019A22C0C38776A5B91A145CE8A13932F12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 15D2
Signing time: Sun 26 Oct 2025 23:00:49 +0000
Manifest this update: Sun 26 Oct 2025 23:00:49 +0000
Manifest next update: Mon 27 Oct 2025 23:00:49 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: RHUZ20XKNovIjiRe+YWeI6XBaxAfjm6OE4QMBdYbceQ=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:c3:87:76:a5:b9:1a:14:5c:e8:a1:39:32:f1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Oct 26 23:00:49 2025 GMT
Not After : Oct 27 23:00:49 2025 GMT
Subject: CN=e6550593b98917896f9e08eca7c8839bc11c18f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:c6:75:ae:58:d9:b7:e8:00:a8:55:02:09:
32:88:fb:6e:c2:14:91:94:41:dc:e7:bb:61:f5:f1:
d4:85:b1:db:bc:28:8a:e3:24:ce:8b:76:f5:19:37:
8d:84:f7:76:35:75:99:99:37:e2:64:47:e5:b3:fc:
ea:9f:c3:0d:38:81:92:c4:1a:7e:f4:1f:89:25:52:
94:bd:ae:1c:12:9b:ae:8a:ac:3d:f0:61:da:0b:73:
87:66:1f:ef:4f:f0:84:0b:48:eb:d1:47:42:27:16:
a6:0e:8e:93:22:7f:77:d9:ab:cc:93:ea:d6:60:0d:
3f:d6:b6:f2:f0:96:eb:a4:fa:4c:e7:3d:b1:86:35:
b4:25:a3:c2:e9:a5:f6:6c:9a:03:27:74:b2:aa:77:
33:1d:9e:f5:4e:fc:78:dc:e9:39:87:9f:19:d6:64:
85:be:fb:64:bd:cc:7b:9d:30:fa:28:60:e9:92:01:
37:9e:4f:3e:09:3a:43:df:0c:8a:d5:6f:61:ea:fe:
54:b5:87:80:5d:f5:37:6b:81:5c:a3:03:21:18:70:
11:d2:9b:13:1c:0a:b4:28:50:7a:ef:a4:bf:7a:45:
a2:69:46:8b:aa:75:20:69:4c:b5:9a:e4:2f:5d:82:
29:07:73:06:16:14:3e:60:39:f6:39:62:fd:6a:e1:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:55:05:93:B9:89:17:89:6F:9E:08:EC:A7:C8:83:9B:C1:1C:18:F7
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bb:19:7f:34:3d:ae:92:d4:fa:b4:07:9e:a8:64:cc:11:18:
23:76:0e:b9:9b:9a:b6:c8:15:8d:e3:cc:29:4a:44:80:de:a9:
d7:e1:78:df:ea:ca:95:35:b2:f9:a8:9f:74:24:4f:5f:1a:0c:
f4:23:14:c4:a3:9d:61:23:6f:e8:88:d5:9a:50:62:8d:6c:81:
4c:fd:60:75:0b:5a:ae:34:1e:c9:82:eb:55:36:1a:38:2e:6a:
ae:65:bb:7f:f6:40:a4:05:30:9d:42:81:67:47:8e:2b:11:84:
8d:23:a7:0f:56:ab:e1:79:31:f3:86:ae:08:02:24:7a:07:a1:
2e:e9:5b:55:f9:8b:59:ab:7e:1b:ca:8e:e2:c3:74:71:1e:d9:
2e:e2:00:05:1f:14:8b:f2:dc:5a:60:d0:3f:13:45:cc:39:d7:
12:4e:0a:2d:03:8b:75:a4:20:e9:bf:8e:d1:19:fc:13:cb:0b:
36:8c:b8:d8:cd:82:0d:c0:4a:61:3a:bc:55:fb:b5:4b:71:68:
d8:cc:fb:be:05:42:e0:33:c3:48:22:64:f5:1e:db:33:6a:e5:
08:03:cb:f2:a5:ad:c9:67:f3:68:84:03:7a:99:b4:80:47:e5:
d1:f2:1e:f8:c5:f1:de:28:3a:02:f4:df:31:84:ac:85:71:79:
54:25:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:32:42 2025 by rpki-client