Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier: GeilYhLIZRe7ctNPCinCCLWkmLx5RmannC6Nl5HKsOI=
Subject key identifier: 42:8D:D1:90:05:65:F1:B9:46:9F:40:38:55:4D:19:B6:49:C0:E4:0F
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 0196BD1255400662FE62F929A1E1588467B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number: 0217
Signing time: Sun 11 May 2025 02:00:17 +0000
Manifest this update: Sun 11 May 2025 02:00:17 +0000
Manifest next update: Mon 12 May 2025 02:00:17 +0000
Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: 6cqsTP5n++Y1OBU/JnaXg2SRd88Q7+j7wZPk/3l87ME=)
2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:55:40:06:62:fe:62:f9:29:a1:e1:58:84:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: May 11 02:00:17 2025 GMT
Not After : May 12 02:00:17 2025 GMT
Subject: CN=428dd1900565f1b9469f4038554d19b649c0e40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:0b:c0:48:04:7c:c9:9a:e4:73:a6:eb:2e:
51:ff:d5:b6:48:ff:e3:30:25:d0:8f:02:7d:d0:02:
3b:94:60:99:d2:37:c9:52:e9:70:a7:b8:3b:c9:24:
b4:49:b3:92:3a:39:d3:5d:bd:b9:96:9b:b6:f0:bd:
0a:0a:a4:9a:1b:34:16:81:50:ef:fc:56:ce:8d:54:
34:c8:15:d4:69:d1:5f:7b:59:0d:a6:96:e6:5e:49:
98:c4:4e:04:4a:bb:09:45:b9:27:e0:de:6a:5a:a7:
67:32:e5:70:a1:9d:3a:dc:43:f7:95:54:5a:8d:a6:
8f:2f:a8:9e:ab:cf:4c:ec:3d:e7:38:a4:7d:24:79:
22:3f:91:fc:3e:18:07:ed:49:48:7a:44:f5:26:a8:
77:e8:19:75:04:28:e4:69:da:93:90:c2:82:c5:e8:
3e:db:ac:3a:37:7a:17:5f:c1:dc:4b:36:0d:be:e7:
a9:56:89:5e:33:71:12:e2:a2:90:d4:1d:c5:79:00:
0d:aa:4e:c7:bd:c5:70:eb:ac:0e:20:c6:db:96:77:
b5:e3:a9:49:86:1b:df:c3:d0:39:15:d4:69:d8:bf:
77:ff:b1:db:5b:50:54:5d:64:d7:7a:4d:cd:3e:4b:
c6:e7:8e:96:b1:d7:cb:e7:98:2b:ee:58:db:f6:8e:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8D:D1:90:05:65:F1:B9:46:9F:40:38:55:4D:19:B6:49:C0:E4:0F
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:36:b8:eb:f6:1c:58:45:2b:56:4d:9c:c8:2e:73:4e:69:b4:
ae:3c:b5:c4:e6:7c:99:58:b9:1c:8e:8e:b5:37:b0:42:f1:a8:
c5:cb:62:cf:52:9f:49:1f:7c:97:45:e1:9a:83:8f:c2:a8:d8:
d8:82:48:b5:29:23:85:f7:88:ad:89:9b:63:45:7b:69:1d:90:
3b:d0:0f:45:27:38:f9:83:15:06:fe:4f:cc:03:d3:6e:63:ef:
bf:e3:f8:64:18:ac:ad:f0:c8:8a:3b:87:0b:1f:e7:55:be:4c:
0e:89:dc:03:b7:a8:3c:4c:57:2c:c4:40:00:0f:11:cb:a3:b8:
84:f5:f2:a8:3b:c7:78:c2:e7:95:c2:73:cf:7e:b3:ce:da:4d:
14:c3:43:75:d2:56:17:fb:92:9e:27:bb:3d:f0:8c:3f:4b:eb:
09:c8:77:65:6e:9d:17:a2:b9:a4:ff:fc:6f:48:0e:2b:15:08:
c2:4a:b9:10:b2:14:6e:fc:36:e6:b0:bb:0f:62:46:10:dc:d6:
c3:3e:3c:53:a5:fc:5e:09:c4:00:8b:da:6d:b7:dd:1b:3b:71:
a8:1a:eb:20:39:a2:60:0c:42:90:7e:f8:68:8b:1e:56:55:39:
0b:41:10:69:21:5b:b7:72:38:10:b3:75:4b:23:61:01:4a:6e:
fc:3b:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:14:33 2025 by rpki-client