Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: Yp7GmZdrAZeycg0+G5Wiqmmk/hg8fErR17PPYrXCYaQ=
Subject key identifier: 97:33:49:0D:6C:0C:05:7D:4E:C8:77:3E:D1:7A:D3:CF:4E:1D:4F:24
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 019896A60B38563E8C98135A04C94A3FE948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 098C
Signing time: Mon 11 Aug 2025 01:02:00 +0000
Manifest this update: Mon 11 Aug 2025 01:02:00 +0000
Manifest next update: Tue 12 Aug 2025 01:02:00 +0000
Files and hashes: 1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: VOpDfiOMF4QS3Y0dqQ+YxP2oUpXOg3t+KJ/FmJIdcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:0b:38:56:3e:8c:98:13:5a:04:c9:4a:3f:e9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Aug 11 01:02:00 2025 GMT
Not After : Aug 12 01:02:00 2025 GMT
Subject: CN=9733490d6c0c057d4ec8773ed17ad3cf4e1d4f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:ab:f6:ea:14:1f:25:fb:66:ff:be:6b:08:
d8:68:b8:19:ca:7f:0d:09:61:27:2d:17:ab:42:10:
12:46:f0:cf:06:df:4b:48:04:24:f9:4f:2a:36:e2:
77:5c:63:6d:b0:52:02:a4:25:f7:25:a5:bc:f3:f1:
25:31:c5:7d:00:57:38:5a:d3:1c:7c:e6:e5:bf:d2:
93:3b:8d:ff:02:4d:0e:5e:b0:f9:3c:be:48:4b:50:
2e:78:81:55:c2:78:0e:3f:c4:d9:92:d5:b7:2e:36:
92:f7:9e:2b:94:23:be:e0:b7:8b:46:36:a7:5e:db:
87:48:4e:44:9d:a7:30:74:d6:68:58:93:0f:7c:03:
30:4f:83:17:8e:f7:ec:f4:62:84:a5:77:6d:9a:40:
ac:ff:05:e7:8b:d2:33:1d:71:ea:f2:85:66:d9:ee:
70:98:9f:c6:bf:00:dd:6d:65:7a:16:70:d8:16:d6:
17:56:d2:cd:56:71:43:78:2e:f7:4c:d4:8c:f3:b4:
5f:d9:18:23:b3:09:89:28:fc:20:81:20:1c:3e:e5:
57:61:55:b2:56:d8:71:b9:21:35:83:fc:a9:dc:c3:
28:c8:d2:f1:4f:7c:5e:b9:f8:63:a0:a3:bb:da:41:
d8:ed:36:70:39:72:0c:08:a7:e2:45:6c:40:bc:c7:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:49:0D:6C:0C:05:7D:4E:C8:77:3E:D1:7A:D3:CF:4E:1D:4F:24
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:ad:9f:e2:42:d2:55:29:68:54:b7:4b:2b:71:14:00:d1:
f7:73:e0:c5:d4:0b:be:a2:e3:9a:93:12:fc:fb:29:58:11:e8:
cf:a1:25:73:5a:67:e6:4d:6a:b5:0e:f5:5a:db:58:4b:d9:bd:
4f:1b:1b:73:78:e1:84:c0:4e:43:5f:e0:0e:d4:df:a1:81:c8:
07:c5:cc:35:23:71:1a:de:a8:96:5d:7f:09:50:63:1a:7b:fa:
67:5e:47:f1:b7:9e:53:00:b5:6d:d7:fa:3e:22:42:ba:12:96:
c2:1c:fa:ec:7f:63:d9:56:15:ec:80:e9:aa:c6:17:97:a7:4d:
42:ce:cc:75:2a:35:2f:a2:cc:55:cc:e1:ac:93:8e:85:96:9f:
99:8e:5e:91:41:c7:f3:df:03:de:22:bf:5b:c1:83:e2:d4:b7:
cf:f6:30:68:fa:51:4e:17:2f:7a:25:0d:c9:b7:27:97:20:d0:
52:a7:85:47:c9:71:5a:40:95:9b:14:d2:65:94:5d:eb:58:47:
72:ce:58:16:39:44:19:9e:2a:19:5b:1a:68:a4:6e:97:a4:96:
bb:62:c6:9b:bc:15:e7:27:74:0f:e6:c4:c2:35:bf:37:25:e2:
c5:1f:9d:8d:c8:3b:3f:88:95:78:79:7f:d8:1f:02:a3:8e:2f:
3d:36:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:19 2025 by rpki-client