Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier: zyB1rRsaairtPrA8lt4SizHtjcfuSEwqmUVQcAI+/rQ=
Subject key identifier: BB:41:A0:B4:58:79:04:0F:9B:F0:B9:3B:CE:A5:99:8C:7E:4C:60:F0
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 0199FF59B71C9A16BCBE35AF43BA7E411035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number: 03C7
Signing time: Mon 20 Oct 2025 02:01:33 +0000
Manifest this update: Mon 20 Oct 2025 02:01:33 +0000
Manifest next update: Tue 21 Oct 2025 02:01:33 +0000
Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: SONNACS7M8kv95+VCwh0CLDRzUR1uXHKHLmDZouRi+w=)
2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b7:1c:9a:16:bc:be:35:af:43:ba:7e:41:10:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: Oct 20 02:01:33 2025 GMT
Not After : Oct 21 02:01:33 2025 GMT
Subject: CN=bb41a0b45879040f9bf0b93bcea5998c7e4c60f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:ce:33:ba:49:cd:69:9b:00:ea:55:fb:f5:
6f:0b:e9:93:26:25:c7:97:58:da:60:83:7c:6f:19:
95:b1:c9:1f:ef:35:2e:6c:5f:69:41:76:86:57:a9:
f4:1b:1e:d8:c2:20:2e:bf:a9:99:32:52:e9:80:68:
52:d6:9b:21:a8:b0:cd:c7:f7:0f:09:0f:d4:bb:92:
7d:0c:e6:ef:be:37:6a:fb:95:ec:55:06:e2:43:11:
df:06:bb:6f:c1:88:78:da:4a:3e:6b:2b:54:85:9b:
87:74:19:0c:23:27:6e:97:60:cc:70:8d:e9:ce:26:
2d:30:3f:d8:d4:56:2f:1a:40:77:79:fe:f8:ee:0f:
8d:f7:ff:7f:0b:d1:fb:c0:50:19:6a:65:f7:e6:13:
aa:15:bb:86:b2:36:2f:5b:63:b5:57:fd:00:8a:82:
96:67:67:13:39:59:9c:47:7a:7f:49:da:d1:58:1c:
45:a0:75:b3:93:90:08:18:65:0d:1f:8a:a2:6d:0c:
fb:97:09:67:5f:76:52:56:a4:57:97:6d:f5:6d:ae:
1e:3a:f7:ef:72:4e:e7:6d:ba:2c:9f:a8:47:1b:35:
cb:9f:6b:bc:a6:46:aa:cd:1a:8b:a1:81:93:9e:23:
e8:fd:72:d9:de:33:d4:61:84:a8:1a:95:5d:56:45:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:41:A0:B4:58:79:04:0F:9B:F0:B9:3B:CE:A5:99:8C:7E:4C:60:F0
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d0:f7:a8:81:12:5d:11:7b:69:56:be:2e:e5:f5:fe:b1:24:
c9:71:cd:63:77:3f:fa:a3:eb:b1:25:3e:d9:4d:8b:6a:fc:5f:
84:12:49:1f:da:7c:fb:2e:9f:1a:c4:6c:7d:74:60:cb:1f:4e:
a9:95:2c:1b:0a:81:0b:b9:8a:a1:03:4d:82:77:0b:12:60:67:
f1:f5:a2:fc:17:35:9d:bd:33:cd:9d:79:1f:7d:66:54:e1:8e:
b8:2f:42:5d:13:df:ae:d9:79:16:6e:fd:cf:89:c4:3c:00:c0:
49:c2:56:c9:70:0a:f2:db:b9:6e:33:25:28:0f:78:fe:b1:16:
7a:ad:51:64:e5:25:70:3f:7a:69:e6:77:dc:ce:4b:eb:d2:0d:
0c:2a:52:91:42:ec:fb:8c:92:3c:eb:b3:93:27:4a:0c:55:b5:
93:76:f7:f9:e9:5b:5a:1d:6f:64:66:a7:fb:35:4f:54:65:6b:
98:36:a1:44:6d:90:c3:79:be:00:cc:8e:b3:5b:e9:6c:68:7d:
3f:51:48:0e:eb:63:69:7c:5b:8b:ff:37:e0:ae:04:9f:85:eb:
2a:a3:fc:07:e0:e2:10:2a:08:00:a3:10:89:d6:eb:61:5f:a2:
ff:0a:c9:7e:93:50:09:30:6c:a4:27:56:c2:d9:c8:25:3a:16:
e3:12:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:39:06 2025 by rpki-client