Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
File: amgjORLYCZ5O3U5ZBtsfxiOubPk.mft (raw, json)
Hash identifier: ZRa4TaniOXynEa8wQehXuQX0pXUnyLTE5S+sPrY7C0c=
Subject key identifier: AC:D3:E8:37:4B:D6:E5:29:AF:D1:77:BB:FF:4B:60:75:73:C0:C8:B5
Authority key identifier: 6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
Certificate issuer: /CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Certificate serial: 0199FBEB31ACCAF22C2C954C92797495E833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
Manifest number: 0196
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: amgjORLYCZ5O3U5ZBtsfxiOubPk.crl (hash: /5o7hWqJHJfaF0EA02eOw9+A+eYzmzlP270YEonWprM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:31:ac:ca:f2:2c:2c:95:4c:92:79:74:95:e8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=acd3e8374bd6e529afd177bbff4b607573c0c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:4a:e8:45:74:3b:1b:89:c1:c3:af:3c:fb:
7d:c1:48:26:f8:fd:de:df:7d:23:d6:b4:46:66:ab:
e4:64:27:21:e2:87:06:36:7e:5d:d1:2e:84:c5:32:
38:a7:f8:65:32:b1:f4:31:b4:1c:0a:77:aa:0f:5c:
f5:80:ed:ff:30:59:24:23:3f:b8:20:c8:09:ca:2f:
ad:37:33:59:7e:2f:ea:70:c1:50:63:42:e2:5f:e8:
f9:3f:56:40:5a:3b:a4:05:7f:02:18:09:fe:6f:d4:
c9:e2:21:6f:5f:2c:57:ef:16:d5:73:1c:35:2b:e9:
a6:db:8b:52:a2:74:6e:70:18:bd:6f:ca:c7:a7:af:
52:b7:55:de:dd:37:c9:f7:21:b4:13:f9:3f:00:03:
fc:e3:56:d4:fb:39:ac:f6:47:21:63:8b:35:f6:45:
b6:20:8a:68:d7:3f:57:9e:76:dc:5a:e3:8a:9f:ad:
c4:21:88:d8:76:f9:3c:e5:88:2d:a2:c9:3b:9f:e5:
1f:8b:57:e5:12:a8:d1:ce:96:40:e5:ee:f4:f8:2a:
af:94:18:68:da:2b:cd:f0:55:65:c1:a7:33:3f:d7:
c7:20:ce:77:60:46:4b:4a:96:0d:9c:e4:c6:98:f3:
6b:1f:5d:0d:00:03:04:2c:00:fc:cf:17:df:0a:ed:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:E8:37:4B:D6:E5:29:AF:D1:77:BB:FF:4B:60:75:73:C0:C8:B5
X509v3 Authority Key Identifier:
keyid:6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:57:3c:44:2e:40:87:85:60:6b:b0:3e:27:8c:7f:fe:3d:95:
19:07:af:73:19:5d:87:f5:00:db:f1:96:39:3b:2e:ed:9d:c3:
39:a9:03:ab:35:8d:00:89:9f:9d:48:3c:35:76:c7:2d:26:8d:
32:47:2e:7b:37:58:14:25:8e:9b:ad:32:26:92:d4:b9:e7:a4:
28:f2:33:00:f8:57:19:46:ff:93:fb:7f:8c:a8:4d:70:a6:ce:
b1:b0:2e:cf:cb:d8:31:ef:3f:90:2d:5d:95:53:af:72:94:08:
36:3b:78:0a:66:f8:f4:d1:7a:b0:a8:3f:8f:11:b7:bc:d9:d2:
9b:8d:22:18:72:ff:c5:ef:2b:cb:b3:b0:b8:41:5c:95:90:b6:
f5:04:06:36:6f:ad:3c:f3:af:c6:2a:11:6d:50:2f:5d:71:78:
4d:de:87:f5:e7:08:66:a0:12:20:37:9d:a4:df:6d:9a:ff:4d:
78:6b:0c:fa:e5:e0:47:db:05:3c:87:01:f2:f6:8b:25:08:aa:
06:02:2e:41:33:4c:8d:3a:16:d1:ce:28:ca:e4:e9:c4:07:b1:
d1:04:c8:51:e5:08:35:a1:c4:b3:47:8e:bb:1a:89:30:cb:74:
5d:fe:74:49:b3:a8:fe:5d:dc:00:1f:c1:20:53:8b:55:b2:3b:
9e:70:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:26 2025 by rpki-client