Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: EI2uLbiwhASTkHtJj2RZ6PamDJEqtC0Hd7sVYXslqRo=
Subject key identifier: 44:FC:A7:0C:25:A6:CF:E0:99:A1:47:23:0C:D9:41:97:13:5E:BE:49
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 0196A08913C80BA25BCD552CC5077432E949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 122B
Signing time: Mon 05 May 2025 13:01:00 +0000
Manifest this update: Mon 05 May 2025 13:01:00 +0000
Manifest next update: Tue 06 May 2025 13:01:00 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: kpgEwDcp9ub8PXcpvNiSfCYEehrgQMtg5pjGKTsNYJE=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:13:c8:0b:a2:5b:cd:55:2c:c5:07:74:32:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: May 5 13:01:00 2025 GMT
Not After : May 6 13:01:00 2025 GMT
Subject: CN=44fca70c25a6cfe099a147230cd94197135ebe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:c0:ae:1e:d3:a8:56:03:3a:dd:f7:bb:be:
03:91:71:60:53:ce:b1:aa:b8:61:d1:f7:4a:85:3f:
8f:2b:e3:db:33:0a:fa:ab:39:a8:31:f1:b5:ca:e3:
ef:7f:38:c9:3c:11:43:ab:60:71:3f:00:3c:e0:b2:
e7:c0:21:b7:00:66:2c:d2:8b:2c:71:c9:33:bf:5c:
b3:e9:ef:88:7c:87:a1:0c:1d:1d:01:01:27:e7:cb:
06:2b:ad:b7:03:3c:10:89:b4:eb:0e:bb:21:00:67:
b3:a7:40:56:0d:47:3b:a4:11:ee:a3:6f:00:f1:76:
f1:db:33:e3:23:f4:a9:67:49:64:8d:e8:fb:18:bb:
d7:cd:89:39:14:a4:89:c8:f2:cd:60:7a:5f:fc:87:
0e:50:69:c8:2f:81:48:ac:f5:66:38:c4:b8:0e:8c:
d8:5f:96:63:b2:6c:61:de:41:85:cc:42:d2:81:50:
27:13:a2:b3:42:d1:66:e7:20:36:d1:9f:16:92:c0:
dd:9c:16:11:da:e3:2e:75:d7:32:e0:00:99:ba:5e:
a8:55:c1:fb:ec:31:2b:75:7c:3a:4a:59:db:e7:11:
53:83:87:27:e9:cd:a1:23:e7:f4:65:06:0e:7e:62:
b9:5d:d6:4a:1b:82:af:b8:45:85:4e:85:b5:a5:5d:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FC:A7:0C:25:A6:CF:E0:99:A1:47:23:0C:D9:41:97:13:5E:BE:49
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d7:91:74:47:78:33:ca:c6:71:f8:2e:da:d8:43:2d:cb:29:
10:d7:19:2c:a4:5b:3b:c1:06:ab:a7:03:4e:07:03:ff:98:87:
c8:8f:32:b9:1e:24:ce:aa:75:99:21:10:5d:df:4e:9e:64:0f:
62:04:4f:36:fb:47:68:77:94:e3:7e:f7:0d:63:bc:46:fe:9c:
04:9e:2a:04:9e:98:47:d9:6f:f3:5b:f1:8d:3b:49:f9:7a:7b:
f1:71:c9:46:b9:7c:61:54:62:47:f6:79:23:32:f3:1b:cc:69:
a5:b6:75:b4:95:28:94:10:13:e9:50:e2:71:8c:f9:90:bb:fd:
5e:c7:1f:46:37:39:0d:fb:f5:72:50:f8:1d:a5:26:d1:10:10:
4a:91:ae:c6:6b:07:79:a5:b4:a7:d9:78:47:87:68:ff:99:c5:
a1:62:c3:b6:ca:ed:93:d2:38:6f:f3:03:ba:64:1a:9d:5b:de:
65:b9:69:8e:e2:d7:d9:f0:f2:0c:6c:bb:92:e6:c6:30:98:98:
21:a2:91:f5:ae:de:30:1b:df:c0:f8:df:d9:b4:bf:31:42:d3:
07:dc:e0:42:0c:62:20:28:57:60:44:47:95:56:4c:83:ae:10:
08:83:12:9d:1f:22:2a:06:47:12:a3:b8:46:50:c1:53:05:f6:
76:75:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:11:39 2025 by rpki-client