Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: ISWJYO83M9ohBxD2Yj+SS6eA9c8aVFYmWsAxDlku1Og=
Subject key identifier: 88:EB:B4:71:04:AD:0A:C8:CA:6F:3C:11:07:F6:06:0F:A9:0C:83:A3
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 0198D515A06972C38849E583E2C4CAF63855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:20 +0000
Manifest this update: Sat 23 Aug 2025 04:00:20 +0000
Manifest next update: Sun 24 Aug 2025 04:00:20 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: 7086hcaa5x/s1BaujVr6p0Pm1VmC4Jz2wPIOt30i86I=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a0:69:72:c3:88:49:e5:83:e2:c4:ca:f6:38:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Aug 23 04:00:20 2025 GMT
Not After : Aug 24 04:00:20 2025 GMT
Subject: CN=88ebb47104ad0ac8ca6f3c1107f6060fa90c83a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:8b:1f:cc:c9:69:97:a7:9e:71:0b:3e:21:
0e:19:c7:4b:dd:4b:39:11:6b:0b:ee:8d:15:62:dd:
7b:45:21:dd:23:d2:44:e0:84:3f:0f:81:b0:d5:e5:
66:dc:09:45:8b:5a:37:e5:2c:41:12:ff:cb:66:09:
76:45:2b:48:d8:8b:bb:ad:94:27:9b:5f:67:32:25:
75:61:d1:05:a8:b7:bc:c3:95:98:ee:97:e6:a6:ff:
92:fe:10:1a:95:97:87:96:73:49:32:1c:29:bb:c9:
00:68:0e:d6:a9:0d:c6:7e:e2:57:08:9e:2a:b6:69:
e3:1f:b5:3f:f7:22:69:52:85:1f:85:3f:1e:7b:a4:
30:3c:95:72:24:79:0c:10:c1:f8:21:f0:d5:6b:43:
fa:9e:d0:3c:fe:3f:12:d4:05:c6:de:ad:7f:e2:db:
4b:e9:7f:ad:50:82:e4:ee:44:25:b6:c2:a6:76:ed:
d9:32:10:44:13:03:8e:b5:b1:aa:27:1f:83:e6:1e:
d8:e2:7e:dd:9a:72:5a:1a:dc:13:69:c6:7e:07:fe:
03:55:c6:72:70:09:3e:a3:6f:97:0b:0c:3c:91:b1:
69:e1:9b:ab:0a:08:3d:d1:98:96:04:eb:cc:f6:5a:
56:8f:9a:6f:9b:b3:4e:9d:9c:87:d8:64:9d:fe:80:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EB:B4:71:04:AD:0A:C8:CA:6F:3C:11:07:F6:06:0F:A9:0C:83:A3
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:98:52:9b:63:6e:51:60:8b:19:56:36:6c:4e:16:98:b7:37:
1a:6a:6b:58:62:1e:ee:b2:ca:80:66:3c:68:38:b5:6c:88:96:
48:49:80:69:51:05:52:a9:e8:f0:f7:11:82:53:78:c7:68:ac:
ae:69:5d:ac:03:f4:36:5e:c6:a7:35:86:f4:76:3b:e0:44:5b:
35:ce:0b:cc:55:24:83:b8:1d:72:43:19:f7:7c:34:67:0f:c6:
56:7e:41:c6:4a:97:cf:ef:0f:0a:38:33:95:36:53:ab:b1:69:
49:0c:30:a3:39:09:2a:06:e7:f9:63:39:52:1a:62:eb:bc:05:
07:b8:45:11:c6:b0:a8:67:7f:05:38:4b:e4:cd:5c:7c:3e:53:
9c:21:14:a2:70:e2:8a:a9:1e:a3:59:49:5c:9c:2a:9a:a7:7b:
53:92:e7:e2:46:80:02:04:cd:84:ef:ac:19:ab:11:4d:54:6a:
25:b7:da:2c:26:bc:4e:7d:24:be:75:e5:1a:93:41:f8:27:bf:
b1:cf:3f:43:a3:cc:db:de:6c:7c:40:20:56:bf:65:ea:b3:d6:
29:4b:ac:d3:f9:1c:10:84:ae:55:79:92:81:cd:13:0a:b5:74:
a8:34:c2:8a:4a:4d:1d:44:62:0f:ec:29:11:db:e1:8a:6a:4e:
77:20:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:35 2025 by rpki-client