Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
File: Ami5ML7spR-_NUP-efmxk0XPE9U.mft (raw, json)
Hash identifier: mkCxTqSfcDDgFzP7drOkl9siQECoXlRLz5Ug6sY8ESc=
Subject key identifier: 02:8D:3B:D7:B9:9E:6F:6D:8E:BC:D1:BF:30:60:D3:06:67:5B:FB:57
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 0198D5F1691A072FE714C68DE53D7DD9F043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
Manifest number: 0C14
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: 7ocFAoRHk3yJWF4ccbCKPsPczz0.roa (hash: 3rzZftACx3aNRwkNijs0bb/ATBefsoIo/62WXVgzLj8=)
2: Ami5ML7spR-_NUP-efmxk0XPE9U.crl (hash: tm9dw4PpRahbVFeo11s2Zecr+KaZGH5EjjwgzAGIURU=)
3: KQ2gfKjDTAqDCIF8rg6ctK4u8jw.roa (hash: SW1oNVSy3V9mCkDE3DhSyTP3T2L66HAY6yybOJ8XTqM=)
4: z58icxsnW3D1G-Tg8oJfAEu4K30.roa (hash: 2xl+ZWAT8+7LeSxTlZeMXeVfz1ij8cub6sBtbC4Yv/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:69:1a:07:2f:e7:14:c6:8d:e5:3d:7d:d9:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=028d3bd7b99e6f6d8ebcd1bf3060d306675bfb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:ff:fa:1d:95:98:76:58:4d:32:58:c1:51:
3b:19:d8:8d:d0:34:25:2c:8a:b7:33:76:5b:e3:d9:
fe:bc:02:a0:db:19:fc:cf:7e:42:71:b9:6d:cd:37:
3d:b2:c0:34:39:cd:ee:cb:67:0f:8f:4e:f9:d7:a0:
96:1c:b4:b1:c3:95:9a:52:ad:d4:8f:cf:99:0c:cc:
c2:80:ea:b6:6d:31:f5:f2:b1:2e:c8:1c:5b:f9:5c:
ff:e4:d3:0f:e0:f5:2f:c7:d2:52:ef:19:41:06:88:
c3:4e:06:09:1b:be:58:f0:56:d7:ce:c0:b1:5e:8d:
16:c7:32:fb:a7:90:18:3f:40:5e:03:f5:67:bd:ca:
b9:df:6e:7b:66:ce:10:be:8e:6c:5c:4d:2c:f4:5a:
8c:3b:f4:f0:70:33:7e:6a:18:22:44:d7:60:ef:75:
d0:75:a5:a5:aa:86:2d:20:a4:e0:73:77:27:78:8e:
fe:9f:ca:f3:36:ca:80:21:59:d2:3f:c0:61:10:fb:
1e:63:82:e6:95:9a:c1:72:76:3c:9d:f1:e8:a6:4c:
f8:3a:fb:d8:b2:3c:d6:37:7e:9d:33:b2:cb:b1:0c:
11:40:db:81:be:c9:ed:c3:0d:2e:3f:66:a1:42:f5:
eb:df:f9:53:75:82:60:0b:cd:03:84:dc:97:74:5e:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:3B:D7:B9:9E:6F:6D:8E:BC:D1:BF:30:60:D3:06:67:5B:FB:57
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2a:37:74:e8:f5:74:00:97:7b:97:6d:63:fe:30:9c:a9:8e:
40:1d:82:8f:48:62:b0:6f:28:29:a4:48:3d:c4:41:97:bc:1e:
08:78:7c:33:8c:96:30:da:20:25:92:3c:95:7d:a2:42:a9:6d:
47:c3:15:26:9a:63:bd:c5:05:d6:cf:63:ea:ec:10:5f:c2:e6:
1c:f8:8a:c9:b0:e3:81:e6:95:dc:5e:be:fb:dd:cb:a5:0c:89:
86:2c:6f:ff:6b:ae:dc:9c:cd:92:1a:b8:13:7b:56:8a:c9:fd:
70:ea:ef:4f:5f:a2:9a:f3:7d:25:f2:86:1a:e5:9a:53:77:0d:
ad:36:f9:ea:d6:b8:6c:f8:87:98:11:ef:b7:cc:e4:a9:58:55:
a9:f9:6e:b6:44:90:d7:f7:83:82:cc:b0:d8:76:0f:ce:20:c9:
5d:b2:73:d6:77:8a:cb:63:9d:30:60:ba:b7:33:40:bf:30:11:
8c:2a:81:7d:c4:3a:ef:e5:9d:62:31:45:8d:38:20:3a:37:22:
d3:1a:aa:df:6e:5a:35:78:b3:24:48:e4:0b:71:ee:4f:52:8a:
05:bc:19:b3:a9:1d:ac:75:f2:b5:6d:84:6b:4b:bd:a7:71:21:
97:14:28:45:7f:50:16:a9:20:7e:1b:ac:5d:df:db:c2:de:b1:
24:14:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:47 2025 by rpki-client