Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: nsvXUV+nZZHj/04Opkl4PXUrJZVvcsNVtpYvsJSKMcg=
Subject key identifier: DD:2F:C2:33:26:4A:A0:ED:68:59:9B:41:56:CA:96:7F:1D:DD:C8:13
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 0198D6CD08D4A9ED40E61C80BF4B7B9D820D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:17 +0000
Manifest this update: Sat 23 Aug 2025 12:00:17 +0000
Manifest next update: Sun 24 Aug 2025 12:00:17 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: xXGCztbYxSHUffW1Qiiqat/lyQUhLbL5rRNld47sXOo=)
2: Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa (hash: AeoYOs9mV63Xly1m52PMpieci7ekofQ+wo4YmlONy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:08:d4:a9:ed:40:e6:1c:80:bf:4b:7b:9d:82:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Aug 23 12:00:17 2025 GMT
Not After : Aug 24 12:00:17 2025 GMT
Subject: CN=dd2fc233264aa0ed68599b4156ca967f1dddc813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:4c:de:a4:1b:57:01:36:d0:12:45:85:02:
d7:c7:79:e8:06:31:aa:da:6f:6f:37:f5:37:9f:94:
20:47:47:ee:d2:93:0d:11:af:37:81:ea:4a:b9:6c:
83:2d:db:cc:08:cc:d4:8e:56:b7:ed:e7:1f:30:72:
f6:a0:b0:93:6b:60:48:30:ec:a0:db:3d:20:a0:fd:
fc:19:b1:dd:05:cf:9c:91:6f:bd:4f:19:c7:42:bb:
f5:28:11:6d:88:86:65:61:0c:84:87:da:73:ec:b8:
f9:73:9f:e6:f5:f1:c1:01:f4:e2:15:d9:54:b6:c1:
50:8f:18:83:d6:31:eb:cc:d7:6b:02:55:04:de:ab:
49:b8:90:dd:9f:5c:63:e6:d7:c5:39:46:51:c6:3a:
4c:35:4a:69:52:d8:dc:01:8a:20:3c:e9:f3:66:0a:
46:5d:2f:41:59:fb:f0:29:f4:31:b1:9d:7a:c9:ae:
5c:0a:54:5e:3d:08:18:4c:89:1c:e9:8e:6f:27:e7:
41:79:1e:2c:85:16:c2:95:bb:89:f3:21:0b:80:76:
07:c2:9d:43:50:7a:f4:da:12:21:08:e4:5b:0b:ab:
ba:28:ea:1f:66:ed:7b:b1:36:f6:86:1c:ba:50:ed:
0b:4c:94:c5:29:d5:34:1d:59:0c:a8:06:ea:55:ad:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:C2:33:26:4A:A0:ED:68:59:9B:41:56:CA:96:7F:1D:DD:C8:13
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:64:23:2c:89:46:46:f4:97:32:06:12:52:75:9d:ee:6f:28:
e4:0e:b9:93:31:49:f4:69:3e:d8:58:b5:17:35:fa:92:83:38:
da:24:b5:21:ff:f8:aa:fb:b9:76:9d:01:1b:bd:b8:b3:d5:75:
17:fe:2a:0b:8a:20:37:42:58:7f:73:e4:36:dd:da:83:ef:b1:
d4:08:b1:84:8f:d9:14:d9:c8:0f:06:35:87:87:f9:83:6d:d6:
1d:b1:a4:e7:30:dd:74:95:95:82:72:04:a9:bd:20:fa:b8:ca:
a0:17:3e:c3:da:cb:3e:86:7a:2c:56:ec:7e:7e:a5:be:85:8b:
f1:9c:d4:39:64:7a:54:75:09:2b:da:c8:2d:c9:ce:ae:b8:48:
54:23:0f:e1:0e:86:cf:4b:d2:52:6e:dc:00:71:61:2c:a6:b1:
8d:8f:bc:e3:75:1a:82:cb:dd:26:ba:2c:a1:f5:21:5c:96:97:
01:d5:10:d2:30:e0:dd:c8:ce:a3:60:3d:6a:80:df:4b:3e:89:
b1:79:b6:e1:cd:ec:67:b8:05:88:24:bf:c3:14:cf:dc:91:82:
ea:e4:a3:37:00:28:9e:88:ea:58:aa:4e:ad:cc:6a:1a:57:f4:
8b:fb:bd:5a:df:eb:cc:c2:8c:59:34:db:4c:67:35:67:fc:d1:
8e:78:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:52 2025 by rpki-client