Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: /c3ortZORn5NQjcnkOFfamzKkodgWoI4Rj7IlySTRU4=
Subject key identifier: D9:AD:D4:DA:19:B4:D7:CB:C3:3B:B6:E6:54:B8:50:C3:0C:4C:FD:71
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 0199372580C17AA28B11456DC870DE05C222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 1558
Signing time: Thu 11 Sep 2025 05:00:28 +0000
Manifest this update: Thu 11 Sep 2025 05:00:28 +0000
Manifest next update: Fri 12 Sep 2025 05:00:28 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: uHWe5cozx2325WPVDnlWQSkSDOiVOHpGELkTbJ3u/ww=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:80:c1:7a:a2:8b:11:45:6d:c8:70:de:05:c2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Sep 11 05:00:28 2025 GMT
Not After : Sep 12 05:00:28 2025 GMT
Subject: CN=d9add4da19b4d7cbc33bb6e654b850c30c4cfd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:95:75:58:d1:09:69:8e:40:c5:8d:f3:3b:
8f:90:6b:de:04:e6:5f:23:e3:4e:16:e9:06:0a:48:
f8:cb:9b:52:f3:ba:ad:e9:f4:95:4e:a2:a7:3d:02:
7e:32:17:5b:6a:9c:97:9c:bb:3d:b0:f2:2b:37:b2:
f3:87:a1:52:50:3b:08:2c:3e:94:27:8a:70:ea:2a:
cf:0d:10:ea:4b:d4:24:a4:fc:dd:f8:f8:84:ac:99:
28:d0:43:96:19:5b:d9:7b:31:0d:f5:8c:ba:36:ff:
13:cd:cd:a1:4b:2d:42:2d:23:eb:4c:6a:bb:28:70:
c6:c6:91:43:09:e4:ff:f0:44:b3:61:69:8d:fc:9d:
9b:11:4a:c7:c4:c1:ca:85:2d:42:37:97:73:99:3a:
72:37:ad:d8:34:c7:ce:8f:d8:43:35:66:dd:95:28:
d9:8d:47:27:af:33:96:a0:42:cb:f7:fa:ab:fa:90:
3d:f2:27:be:20:94:9b:d1:67:9c:d0:bc:89:a4:72:
66:4b:01:1b:2c:dd:f2:f7:f6:86:3c:68:73:da:f9:
63:cb:54:39:87:d8:cc:18:bc:a3:8d:63:58:89:60:
f9:71:ca:32:e3:b3:c5:26:2a:e5:d9:6a:01:fe:43:
0f:f8:f5:6d:f1:96:cf:ec:30:80:36:5a:a9:76:6e:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AD:D4:DA:19:B4:D7:CB:C3:3B:B6:E6:54:B8:50:C3:0C:4C:FD:71
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3e:4d:cf:31:d2:59:a0:c3:31:55:ab:f3:7b:31:ec:6a:ab:
8d:f8:f6:a0:d1:01:77:65:b8:48:bc:ad:9a:d7:37:fa:ce:e4:
fb:f8:7d:7c:8e:df:70:d4:79:82:57:1a:f4:27:7f:e6:b2:4b:
2d:71:c5:30:cb:45:3e:e7:d5:84:3a:11:a0:67:91:ee:9d:4d:
79:b7:92:91:4c:52:89:6a:7b:75:c2:cd:de:b5:f6:93:78:f1:
62:26:40:c8:61:60:a5:1c:37:7d:33:74:9d:a2:f5:76:4c:e5:
df:d1:9c:10:e5:a6:2c:d4:e8:1d:a8:b8:5d:ad:e1:16:b2:2e:
88:1b:f8:65:f2:3d:26:0e:6a:58:fb:c5:9e:e2:f0:60:12:3e:
c2:1b:fc:3b:5d:16:d5:3a:99:80:46:64:2b:11:57:29:b1:b4:
ad:19:db:0f:90:11:0b:40:b3:9e:3f:2b:57:f3:59:25:06:d8:
9d:75:ad:0d:2c:47:60:dd:8a:a1:99:ab:98:c7:b4:bf:ba:63:
f9:1a:b2:77:59:25:6c:73:7d:11:4a:ac:76:01:32:d4:53:5d:
4e:13:2d:7d:b6:12:74:05:44:25:be:52:d9:00:ea:c6:17:d5:
01:9c:d7:dc:05:17:af:2c:09:ad:e2:db:bd:8c:97:af:9b:ea:
4a:12:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:49:11 2025 by rpki-client