
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
File: aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft (raw, json)
Hash identifier: xcK3+Q7TgMKX+15syfULhji80Q2dRGqpSMLbSmSeN4U=
Subject key identifier: CF:1C:1F:88:4A:B4:25:37:89:31:A4:CB:D8:0A:0C:50:0A:3A:66:BA
Authority key identifier: 68:C1:82:4B:E0:B1:6F:46:D2:FF:01:2C:58:25:A6:70:BB:93:2A:17
Certificate issuer: /CN=68c1824be0b16f46d2ff012c5825a670bb932a17
Certificate serial: 0199FBEBDA5336C3AFB644FF15BB1265A3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
Manifest number: 03F3
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl (hash: wjcvxW5N+tPu+C9FJ2xjJ2nhfUUMblIBGLqBPrC7pAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:da:53:36:c3:af:b6:44:ff:15:bb:12:65:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c1824be0b16f46d2ff012c5825a670bb932a17
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=cf1c1f884ab425378931a4cbd80a0c500a3a66ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:ad:47:15:e4:11:72:07:1a:29:53:c0:0e:
c3:f8:35:ce:02:1e:ff:ad:00:10:63:36:aa:4c:c6:
19:9e:23:6e:fe:c1:87:4b:ec:ae:f6:7e:18:7a:f8:
a3:19:1d:eb:e5:8e:2b:4c:b8:ee:58:f3:97:b9:11:
7e:ea:33:b5:81:fe:ea:01:62:ca:10:c4:dd:84:a9:
ef:5f:f4:48:50:55:10:4f:e2:8b:2d:ab:48:49:9a:
f1:a5:e9:6c:47:eb:86:a7:0c:a7:6c:e8:06:13:46:
61:32:ef:49:83:83:38:09:29:8f:88:d9:e8:b7:49:
f0:43:20:35:af:f6:3b:ae:36:9e:7f:5f:fa:51:7b:
2c:36:e2:00:5f:3f:25:a4:eb:c9:d2:95:36:70:e1:
07:d4:9f:c3:80:de:bb:2c:b0:5f:ee:a2:6e:97:f8:
93:b2:b4:38:b0:d3:e9:05:66:d2:d9:c9:7d:88:69:
c8:a5:41:a6:f1:97:8f:81:89:e2:f3:bd:3b:84:eb:
71:20:5f:33:f1:29:38:b1:8a:17:b6:9c:35:30:0e:
94:12:d2:fd:92:70:78:a1:5c:49:66:53:88:36:29:
e8:c0:24:0b:3e:69:7b:e6:78:ed:5c:e6:50:07:5b:
ac:7d:57:45:26:78:61:ac:37:02:55:2f:cb:48:24:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:1F:88:4A:B4:25:37:89:31:A4:CB:D8:0A:0C:50:0A:3A:66:BA
X509v3 Authority Key Identifier:
keyid:68:C1:82:4B:E0:B1:6F:46:D2:FF:01:2C:58:25:A6:70:BB:93:2A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/986634-c573-4fc4-ada4-7fdeb8f50503/1/aMGCS-Cxb0bS_wEsWCWmcLuTKhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:19:c1:76:7b:54:c3:51:50:35:fc:7f:e8:6e:6a:32:4d:98:
8b:52:6c:b4:86:20:78:55:fb:ed:1b:ab:6f:ff:85:04:fd:56:
03:36:e7:04:85:b6:9f:9a:73:22:3b:fb:9c:d7:ff:c4:ca:dd:
38:c8:41:8f:3a:a0:8e:af:87:be:e2:27:28:52:c3:99:95:ed:
1c:35:e7:94:e7:cb:6e:e7:f7:26:e6:f1:66:a7:43:cb:c9:80:
55:6d:d9:aa:e6:23:b1:f1:3a:55:e7:dd:e6:1a:b8:9b:b6:77:
b0:2c:53:9a:0b:d2:19:f7:27:2b:ea:f3:7c:56:52:d5:d7:bb:
c1:35:aa:b0:9d:18:f4:31:c1:d2:89:35:24:11:a8:8d:12:3e:
b7:ea:92:af:01:31:07:93:81:60:d7:45:af:fb:40:fc:f1:b3:
77:fe:1e:b8:b4:78:dd:45:f0:34:24:6d:59:84:6c:f9:75:32:
55:5f:7f:7b:81:e0:bf:6c:36:6b:8f:ba:8e:a5:96:27:53:0d:
63:8a:91:5b:15:f8:27:ff:09:b9:03:67:6b:a4:1f:6b:ab:8c:
c7:95:f8:49:02:5d:07:56:40:90:03:c4:c1:00:77:0e:94:56:
0d:f4:0c:5c:13:dd:58:a9:1b:1e:71:0a:86:b6:5b:29:09:b3:
d1:ea:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:21 2025 by rpki-client