Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
File: amy2jfouNjg5NN5oDtAlGsOu3Mo.mft (raw, json)
Hash identifier: JbFRdcHdSOt0NFv77ElS6WjgUdR9CHBvEZ3WLz1eQV8=
Subject key identifier: 9B:80:A3:6D:7B:5F:86:2E:45:53:9B:06:EA:F2:A2:6E:87:03:32:91
Authority key identifier: 6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
Certificate issuer: /CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Certificate serial: 0198D5F1AB825047C766022FEEBEAB83FD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
Manifest number: 4E
Signing time: Sat 23 Aug 2025 08:00:41 +0000
Manifest this update: Sat 23 Aug 2025 08:00:41 +0000
Manifest next update: Sun 24 Aug 2025 08:00:41 +0000
Files and hashes: 1: amy2jfouNjg5NN5oDtAlGsOu3Mo.crl (hash: +TmsFmW5Y7IdHDxXXdzh7pNKVfNCdsKi3VM+zOA7Jd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ab:82:50:47:c7:66:02:2f:ee:be:ab:83:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Validity
Not Before: Aug 23 08:00:41 2025 GMT
Not After : Aug 24 08:00:41 2025 GMT
Subject: CN=9b80a36d7b5f862e45539b06eaf2a26e87033291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:ad:18:11:f3:56:5a:b1:56:61:28:1d:83:
3f:c6:4a:5b:3c:13:c0:8d:6c:e9:47:6f:cf:1e:ed:
67:7a:12:a8:a6:8e:8e:49:f9:1e:8f:14:25:15:8b:
68:96:56:3a:4f:16:4f:ce:1f:53:61:23:04:c2:9e:
d5:d3:e1:a6:05:ca:21:03:71:cc:3c:da:3b:66:be:
8d:41:82:e5:2f:0f:6c:3c:1d:71:bd:44:bf:c2:29:
4c:20:38:1c:e8:f9:97:75:60:fa:30:ee:95:a2:ab:
27:99:db:cb:2f:6d:83:69:8f:2c:80:b6:17:27:d1:
61:06:90:5d:cf:b4:d4:f5:d5:12:84:38:f8:2f:1e:
75:07:35:02:8d:a1:07:80:ee:6c:bb:94:bb:9a:0b:
d2:1a:11:a1:12:6f:7a:5e:79:fb:e2:87:e8:e4:01:
fa:9f:45:79:23:b5:4a:4a:27:7d:b1:ba:d3:ab:e0:
d3:ca:45:69:b9:0f:55:5e:b1:4f:0e:ed:64:b0:a9:
03:7f:96:50:4c:64:42:3b:af:af:68:81:26:07:1c:
e0:8c:ec:4f:7a:e6:55:b7:5d:93:cd:de:10:d7:3b:
2b:e0:c8:39:70:2b:ec:0f:72:e1:e9:b5:f7:89:08:
c5:5e:5a:4f:b6:f3:cf:a9:3e:d7:08:7f:72:48:ed:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:A3:6D:7B:5F:86:2E:45:53:9B:06:EA:F2:A2:6E:87:03:32:91
X509v3 Authority Key Identifier:
keyid:6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ed:2d:fe:76:ad:d6:8d:5a:dc:a5:b8:f0:cd:2c:d8:df:c8:
8a:e2:a2:dd:a7:27:02:e4:7c:72:29:72:50:94:12:1d:54:e7:
39:33:84:17:52:5a:f4:83:3c:28:16:8f:0b:21:78:91:10:02:
4e:91:10:9b:b1:ed:33:5e:de:86:aa:de:60:a5:71:cb:0b:e4:
cf:b8:48:f4:8f:d9:6b:99:1d:05:4a:39:bf:c3:24:e1:75:4c:
90:a7:f3:1f:f0:8a:4c:85:82:93:0d:d6:1f:2a:25:c2:15:b0:
c2:77:4d:41:7d:cd:90:0b:93:d0:90:e3:66:8d:47:9d:dd:d3:
36:a7:7e:38:2a:eb:8c:b9:53:e9:6c:2e:71:83:f9:b2:79:10:
d1:a0:84:db:21:f9:b0:43:ad:30:e3:ea:3a:3f:a3:91:78:b9:
96:64:6d:34:d8:44:e8:36:2a:5e:ed:71:ad:f3:4d:b1:e2:1d:
2b:a3:99:17:fe:a5:9a:8c:dd:0a:d3:73:3e:e0:53:c2:9b:2d:
06:f0:2a:79:49:f5:41:c6:53:e4:46:52:3b:b7:48:0a:3b:f9:
12:b0:80:e3:b2:82:20:24:b4:3a:6d:fa:6c:7f:99:a0:08:d4:
08:a8:63:07:d0:0b:4c:32:7c:59:fa:01:14:94:78:0c:4f:96:
a8:0e:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:47 2025 by rpki-client