Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier: zXw3271BIjvIr2AZlIgzAnaFmlDXi9aFO2cRls9RpsE=
Subject key identifier: 2F:91:F0:C9:B1:40:7B:21:07:EA:A8:CC:4A:61:2D:90:C3:A0:DC:82
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 0198D40507FABDF1EF2A409C47827A7BDEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number: 032C
Signing time: Fri 22 Aug 2025 23:02:36 +0000
Manifest this update: Fri 22 Aug 2025 23:02:36 +0000
Manifest next update: Sat 23 Aug 2025 23:02:36 +0000
Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: s9QMARh5E3q4l9iGRoWFQUr6BTgT3k5QuseH0mp2az8=)
2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:05:07:fa:bd:f1:ef:2a:40:9c:47:82:7a:7b:de:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: Aug 22 23:02:36 2025 GMT
Not After : Aug 23 23:02:36 2025 GMT
Subject: CN=2f91f0c9b1407b2107eaa8cc4a612d90c3a0dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:eb:39:75:da:c0:19:aa:0d:e3:23:36:6e:
f4:77:c2:c2:c7:16:ec:06:24:f6:f9:ac:ae:49:e1:
17:d2:1b:1d:7f:16:50:72:4b:13:57:e9:ef:dc:52:
2b:4b:fb:ac:da:c8:d6:dd:c8:c5:ca:b6:0b:2d:62:
f7:16:2a:82:e5:75:2a:cd:8b:c9:ec:05:f6:2a:b1:
53:54:53:13:6c:c6:55:ed:69:bf:d5:b6:04:aa:b5:
81:3d:8b:de:00:60:62:e4:e4:70:8c:b4:1f:20:86:
57:fe:4b:17:c6:b8:da:96:5e:14:9d:fd:3a:82:90:
6f:6b:fc:74:55:56:b1:70:08:99:24:f1:f1:0b:2e:
43:ae:1a:22:a9:d7:7e:4a:70:55:8d:93:a8:98:54:
f6:55:f1:d0:c9:bb:9a:f8:48:7c:ad:50:d1:97:b0:
11:e1:6b:96:41:e1:7d:21:40:94:31:72:c8:7b:07:
ba:90:5a:29:64:e6:ff:32:70:24:89:58:b8:67:53:
6d:ed:82:de:51:12:29:9a:70:18:3a:19:a7:b6:44:
a2:3c:55:da:c1:02:ce:a1:b1:d1:65:11:33:00:d9:
55:7d:b2:12:9b:2c:27:e1:74:f6:c6:73:71:0e:fb:
55:3e:74:dc:44:90:66:00:e6:7a:48:1e:88:72:23:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:F0:C9:B1:40:7B:21:07:EA:A8:CC:4A:61:2D:90:C3:A0:DC:82
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:32:b3:e6:5d:5c:00:cc:64:26:c9:8c:ab:a9:a9:61:86:ce:
ba:2f:37:f9:ed:fa:1b:2e:47:38:6b:58:6c:22:7a:8c:e8:5e:
01:7c:f9:65:83:76:e9:6d:43:6a:dd:cc:9d:1a:9c:6d:14:9b:
8a:da:64:5d:7d:48:eb:e6:f8:b5:95:86:b0:37:1d:b4:94:8a:
ec:4a:df:9a:65:07:5f:2d:e7:84:99:e6:48:a1:85:c3:0a:8f:
62:77:c0:46:96:32:e6:86:6f:21:49:20:40:6e:83:83:2a:2d:
3e:ba:ed:67:2a:1c:82:a6:45:83:85:39:77:ae:d4:9f:25:4f:
12:01:c3:4a:2a:9d:4f:51:e1:65:50:74:97:77:f9:0a:9c:21:
c3:61:4f:a3:e7:be:80:1e:65:4c:2c:0a:96:42:54:b9:d0:87:
ca:1d:ce:4b:a8:35:a0:89:fe:9d:c5:0f:a1:9d:3d:e8:9e:fc:
5f:23:f9:1d:8f:0b:c7:d7:41:61:b3:f8:f9:00:45:25:70:f2:
b4:e5:73:7c:12:2c:86:d7:ce:ee:7b:62:0f:04:2a:d0:af:18:
c3:a7:01:4c:2a:a8:cd:2e:48:b8:9c:92:ff:42:22:3e:00:85:
af:95:bc:a5:0b:40:14:5a:02:14:fa:7a:3f:68:db:de:77:7e:
a9:f6:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:48 2025 by rpki-client