Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File: AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier: DiOW4o8cmeRNiA7S+YgRp2AjTEjn89l1IZlYwAOkWyE=
Subject key identifier: E3:AD:8E:33:47:FD:DE:35:07:B4:1A:DC:97:D0:99:EC:F9:61:26:29
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer: /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial: 0198D66067D169A2B63E6D486F342F79E31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:38 +0000
Manifest this update: Sat 23 Aug 2025 10:01:38 +0000
Manifest next update: Sun 24 Aug 2025 10:01:38 +0000
Files and hashes: 1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: eDMgBGZfp+MEfh/jPGiF35rIEqmEwl7e5Oh7nlliiC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:67:d1:69:a2:b6:3e:6d:48:6f:34:2f:79:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Validity
Not Before: Aug 23 10:01:38 2025 GMT
Not After : Aug 24 10:01:38 2025 GMT
Subject: CN=e3ad8e3347fdde3507b41adc97d099ecf9612629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:ea:5e:6f:37:38:d8:dc:43:9f:26:5f:45:
69:18:86:de:17:f3:8e:93:ab:5b:0e:bf:b4:e1:e5:
dd:1e:42:0a:87:c6:c3:d7:43:aa:ea:38:7a:cd:0b:
9d:52:1c:3a:88:61:3d:b3:7c:32:70:ee:ea:94:17:
ae:90:76:f1:86:01:88:82:d5:f2:36:67:9d:82:ab:
ce:f7:05:e0:56:e4:ec:01:90:27:ae:75:15:1b:d3:
b2:8c:53:09:87:cf:51:60:91:c4:42:67:df:16:99:
29:90:b5:83:25:e0:91:f0:d4:ce:4c:fe:b6:ff:e0:
d9:5a:e6:a0:82:9f:db:7a:9e:1c:5b:e3:bc:12:e8:
82:19:cc:14:7f:0c:d1:a4:85:7e:18:8f:8a:d0:8b:
84:e1:6d:56:a9:c9:3e:a5:f4:bb:68:2e:14:87:37:
95:88:2f:e9:46:48:2a:64:9d:03:a0:9c:ed:4e:c9:
cb:c0:3d:76:ad:70:64:5c:cd:52:6a:38:7d:09:d6:
d7:93:93:bd:92:0b:92:c6:f1:a4:59:19:65:fd:40:
61:da:1c:c4:c3:73:75:8d:5e:4e:f4:b2:15:b2:90:
3c:0e:70:25:30:e6:a7:e3:25:b9:2b:48:33:cd:96:
41:9b:cd:c8:1f:c3:4e:ff:b0:61:af:3d:98:92:83:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:8E:33:47:FD:DE:35:07:B4:1A:DC:97:D0:99:EC:F9:61:26:29
X509v3 Authority Key Identifier:
keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:86:a0:6a:4a:fd:49:76:56:e9:45:26:08:ac:5e:72:9c:ae:
e5:a4:9d:f4:04:54:d1:04:ce:d3:73:ad:e2:6d:19:f1:05:42:
ee:e9:e4:c0:e7:29:11:8a:6b:f2:ce:d8:97:87:0b:cf:c5:5f:
7a:17:20:df:ef:0a:19:8e:e9:05:3b:f7:c8:8e:ec:6f:65:6c:
17:5a:b4:4e:ee:1d:f0:f6:44:b1:32:47:c2:71:fc:17:58:f4:
da:3f:20:02:25:21:71:f1:31:5d:fc:96:8b:4d:36:7b:37:32:
dc:31:b6:41:53:6e:0c:2b:cc:40:9c:47:72:2d:ea:bb:80:d3:
09:2e:6b:7f:4c:41:90:3d:d4:8a:94:22:d4:0b:26:57:8e:1a:
ac:40:73:12:67:6c:fb:c0:69:94:db:6f:3d:ec:a5:b5:41:ef:
78:df:ac:63:45:da:cb:4b:5d:78:cd:78:9f:4c:7d:d3:d1:0f:
1f:69:60:7d:12:e9:65:c3:44:d1:69:d3:3d:1f:2a:b1:e6:1f:
56:36:6d:9d:e2:f8:eb:8d:5c:2c:57:01:d6:2a:28:36:8e:2a:
e5:8e:71:7b:1b:46:53:39:c3:46:ed:51:10:56:61:65:3b:11:
ee:ae:d5:6b:be:a7:cf:8e:15:62:5a:51:77:b0:6e:06:4d:39:
e7:bc:6c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYGfRaaK2Pm1IbzQveeMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYzdiYjgyYTYwMTI1N2I5YzgyY2ZmN2FjNzkzM2YzNTEz
YTRkNDkwHhcNMjUwODIzMTAwMTM4WhcNMjUwODI0MTAwMTM4WjAzMTEwLwYDVQQD
EyhlM2FkOGUzMzQ3ZmRkZTM1MDdiNDFhZGM5N2QwOTllY2Y5NjEyNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkbqXm83ONjcQ58mX0VpGIbeF/OO
k6tbDr+04eXdHkIKh8bD10Oq6jh6zQudUhw6iGE9s3wycO7qlBeukHbxhgGIgtXy
NmedgqvO9wXgVuTsAZAnrnUVG9OyjFMJh89RYJHEQmffFpkpkLWDJeCR8NTOTP62
/+DZWuaggp/bep4cW+O8EuiCGcwUfwzRpIV+GI+K0IuE4W1Wqck+pfS7aC4UhzeV
iC/pRkgqZJ0DoJztTsnLwD12rXBkXM1Sajh9CdbXk5O9kguSxvGkWRll/UBh2hzE
w3N1jV5O9LIVspA8DnAlMOan4yW5K0gzzZZBm83IH8NO/7Bhrz2YkoPxfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOtjjNH/d41B7Qa3JfQmez5YSYpMB8GA1UdIwQY
MBaAFADHu4KmASV7nILP96x5M/NROk1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNjIzZDgtYWY2Mi00OTFhLTlmOWYt
MTIxNjIyNmM2ZmI1LzEvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNjIzZDgtYWY2Mi00OTFhLTlmOWYtMTIxNjIyNmM2ZmI1
LzEvQU1lN2dxWUJKWHVjZ3NfM3JIa3o4MUU2VFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4agakr9
SXZW6UUmCKxecpyu5aSd9ARU0QTO03Ot4m0Z8QVC7unkwOcpEYpr8s7Yl4cLz8Vf
ehcg3+8KGY7pBTv3yI7sb2VsF1q0Tu4d8PZEsTJHwnH8F1j02j8gAiUhcfExXfyW
i002ezcy3DG2QVNuDCvMQJxHci3qu4DTCS5rf0xBkD3UipQi1AsmV44arEBzEmds
+8BplNtvPeyltUHveN+sY0Xay0tdeM14n0x909EPH2lgfRLpZcNE0WnTPR8qseYf
VjZtneL4641cLFcB1iooNo4q5Y5xextGUznDRu1REFZhZTsR7q7Va76nz44VYlpR
d7BuBk0557xseg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:29 2025 by rpki-client