Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: oQOdxS6cLGdSSSQ64n34M2PKMMePDjTYorYkgodtmlc=
Subject key identifier: 4D:FB:4F:38:8C:CA:69:62:03:97:7F:3C:D7:80:CB:3F:90:18:90:A3
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 0197B70E7E3015758336FAA3E9EC6DFADDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: 9Az9UjStu29c4+eCQZZWe9III2MxNAY6MKhSFi6FUqU=)
2: Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa (hash: AeoYOs9mV63Xly1m52PMpieci7ekofQ+wo4YmlONy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7e:30:15:75:83:36:fa:a3:e9:ec:6d:fa:dd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=4dfb4f388cca696203977f3cd780cb3f901890a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:29:70:cc:65:ac:27:00:aa:19:ca:17:11:
b6:3c:f2:00:64:37:b3:a8:97:84:12:c6:60:b9:2e:
d4:88:0c:50:e6:04:f0:60:e3:8e:6d:ee:31:58:8d:
89:86:05:3f:c7:1c:26:8a:f9:fb:53:a5:dd:44:9f:
02:43:7f:9f:54:69:1d:bc:d3:72:7a:09:7a:0c:e0:
ea:e4:96:20:37:17:d8:63:e8:4b:7f:56:95:78:9f:
63:ad:0d:b1:89:5e:a4:a7:96:a0:bc:4d:01:0e:e9:
4a:53:5b:03:fc:92:db:c4:1d:5b:f6:d1:fb:20:08:
da:07:99:5f:e2:df:cf:e0:70:c1:c2:3c:f3:09:7d:
dd:ad:0b:ec:05:6d:9a:e6:9c:51:17:c1:14:a0:49:
a8:4c:e3:9a:00:cd:bd:b0:d1:42:c7:31:84:15:ce:
d5:f3:fb:e8:7b:4c:95:95:3e:88:03:37:e1:34:10:
71:f2:49:e1:a8:81:e2:f0:94:02:27:fb:30:ec:c1:
7d:0c:87:ec:2f:f9:19:57:f8:9f:86:36:75:c8:bd:
70:91:cd:b8:1b:86:5e:5b:c9:84:1a:92:2e:10:da:
29:71:d3:cd:ce:d1:3a:68:fa:ba:c6:58:51:d6:24:
1e:4b:54:bb:9d:c3:da:3b:13:1a:ab:63:1e:5f:73:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:4F:38:8C:CA:69:62:03:97:7F:3C:D7:80:CB:3F:90:18:90:A3
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:fd:12:62:ee:06:7c:0c:0f:8e:32:67:f2:36:46:37:a2:
dd:0b:d0:ab:73:e4:da:b4:b8:98:ae:ee:f4:24:ce:23:bb:93:
a5:6f:93:94:38:aa:8a:2d:c3:84:4e:6e:22:fe:88:8d:fa:67:
9e:50:37:56:41:25:de:3d:06:a6:da:e6:e0:bf:25:42:b8:17:
e8:fb:fe:b2:99:cc:b7:49:63:13:98:2c:79:19:3b:99:43:d3:
3b:1f:75:b6:20:cc:92:04:a5:20:37:4b:bd:cf:a3:6e:d9:9b:
1e:5d:05:90:86:27:4e:71:9c:05:47:77:b3:36:83:c0:74:ad:
7b:ed:0e:c5:95:20:c4:77:4e:c5:c2:6e:c4:16:f6:f5:37:3a:
3d:f9:05:d5:e5:2e:ec:ae:d0:ff:a4:a1:51:d5:fa:4a:10:29:
76:ab:a6:99:64:8a:5c:1e:62:3f:54:3a:1d:1b:6f:6a:a9:e4:
44:ae:45:b3:95:14:c2:60:ad:b9:94:d8:e8:7d:71:92:54:ef:
c8:85:75:e9:be:67:19:d9:80:18:f3:97:7b:80:75:53:f2:26:
ef:fb:c4:63:3d:ec:e5:b3:09:1c:be:36:42:ee:e5:17:9a:bc:
31:73:8b:2a:d4:88:ee:6c:89:7f:ce:08:38:13:d5:cd:e7:2c:
a2:4a:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:55 2025 by rpki-client