Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
File: amgjORLYCZ5O3U5ZBtsfxiOubPk.mft (raw, json)
Hash identifier: Y1kQFgoHLmr+dihGgVgRq1lxfZGEHllZ9oVwq/JdCGc=
Subject key identifier: 4F:5D:1C:71:E5:F3:CE:F0:0E:7D:88:A2:68:78:BD:51:ED:2A:FF:00
Authority key identifier: 6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
Certificate issuer: /CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Certificate serial: 0198D65F5059A9501E1ACD91F0E9777667EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: amgjORLYCZ5O3U5ZBtsfxiOubPk.crl (hash: jEz6j101S6mB10PbNOQXgonTp0D/ZG689en1w4gpTuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:50:59:a9:50:1e:1a:cd:91:f0:e9:77:76:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=4f5d1c71e5f3cef00e7d88a26878bd51ed2aff00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:c9:7d:b3:34:bf:bd:97:58:81:f7:0a:6b:
11:b4:6b:fc:d8:56:11:37:c9:2c:ec:e5:86:0e:67:
ae:df:8e:24:42:ac:e2:26:a0:00:ad:5e:33:45:0c:
dd:59:9a:90:c5:d6:d9:3b:84:22:ad:5b:67:b1:6b:
9a:3a:5d:3b:72:1e:79:8f:dd:f9:c6:3b:06:bb:ab:
f0:21:27:32:92:1e:d1:c2:10:31:5e:42:22:15:56:
30:72:e4:38:53:80:76:ea:82:ef:8f:c3:f2:34:20:
a8:87:2c:a6:9c:df:df:ee:56:89:fd:eb:62:75:c2:
ce:45:36:5f:fa:e4:01:88:aa:7b:60:a2:bb:e7:17:
27:24:18:19:9b:cf:58:12:c0:82:a7:c7:a1:0a:1c:
63:39:51:42:1e:02:f9:25:ed:c7:62:9e:0b:74:6e:
eb:1b:dd:f8:b7:2a:b4:f6:f4:5f:c8:28:08:fc:a2:
35:a8:7f:ca:b5:2c:5c:ec:a6:7a:93:1f:a5:25:1e:
1a:f8:b1:a3:88:c4:cb:72:08:3c:89:91:a5:72:16:
3d:9f:c4:d9:33:df:ab:73:ec:6f:2c:f2:64:94:72:
65:89:4b:59:97:03:62:39:de:b5:96:1a:b8:74:70:
f8:4a:e2:c7:e8:4f:d0:38:0f:4c:ce:7d:59:b4:dd:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:1C:71:E5:F3:CE:F0:0E:7D:88:A2:68:78:BD:51:ED:2A:FF:00
X509v3 Authority Key Identifier:
keyid:6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:30:87:99:d2:29:3c:4c:c1:7f:c3:c7:44:96:8f:e5:8d:15:
e3:ac:76:e1:59:4d:d2:24:16:48:74:5a:03:80:0b:f9:50:68:
55:b7:0b:f9:99:63:28:cc:08:ba:b8:53:6e:75:27:58:c3:01:
83:4f:b7:b7:e9:8c:87:62:0a:85:aa:5f:9f:f6:6d:c8:14:e1:
e0:cb:2d:a0:73:db:2a:6d:2d:ea:11:5f:08:f4:99:2e:64:9a:
6e:f2:c8:b9:eb:fd:53:13:55:9f:77:fd:83:f0:5b:b3:aa:ac:
99:0f:c7:a0:dc:fc:a4:32:7d:66:65:13:b9:52:d1:b3:6f:d5:
4b:f8:5e:02:03:6c:7d:09:44:a9:be:c8:1f:88:ba:9e:16:c3:
0a:27:79:22:48:eb:97:f0:ed:19:93:84:5d:95:c0:33:d1:c6:
86:8a:23:a0:99:fa:02:3a:0b:d9:0d:1e:83:a9:77:b0:20:8b:
3e:4f:09:7f:a9:a1:ef:1e:0a:3c:c3:3a:4a:4d:14:b2:f5:78:
3b:31:57:05:70:6d:c4:6f:7f:7e:0b:b9:1b:0c:f7:41:c2:7e:
7e:3d:20:a4:14:63:f5:1d:91:a7:ef:84:f9:8f:81:76:99:11:
bc:65:db:bd:65:84:8a:ce:70:9f:89:60:70:5d:73:a3:10:c2:
75:55:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:01 2025 by rpki-client