Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: 10LdTNaJ+K5Ueurm8m0507exkl7JYEMa+ArV8DtXCXc=
Subject key identifier: B5:8A:87:38:FD:25:E3:95:70:68:BF:62:11:D6:CD:CB:07:4C:68:73
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 0198D472A014F68DE38DC8443CB8434ABCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 134F
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: 7ruNer9XPPAvPpwKn2h13UBk7Z43j4X63dOy1ZQPWec=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a0:14:f6:8d:e3:8d:c8:44:3c:b8:43:4a:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=b58a8738fd25e3957068bf6211d6cdcb074c6873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:35:47:22:cb:4c:c3:55:7e:e5:97:11:68:d6:
d9:b5:d0:61:23:6f:cb:e4:b3:f5:05:5d:b6:70:70:
b2:dc:13:bb:df:ff:04:bc:6f:a0:07:61:a1:d1:04:
af:7b:14:f7:36:c1:a2:02:c6:2d:f4:df:e7:22:21:
1a:9b:c5:8b:96:64:95:ab:0f:3c:cc:2a:99:74:01:
68:2e:a5:55:f2:7f:24:b5:3b:30:e5:b8:f0:50:64:
94:79:88:bc:c3:e2:ee:53:e9:10:25:eb:71:37:62:
f1:9b:7a:16:dd:cf:51:80:a3:c3:a1:8d:bd:64:9d:
d7:31:5b:b7:86:cd:48:31:8f:d4:53:fb:f2:c5:0d:
87:85:23:51:b4:fa:79:22:23:a3:e5:b3:96:05:7c:
e0:db:0f:6d:4a:b8:c4:67:2c:e3:d2:41:18:c6:e6:
69:ab:52:8f:83:9b:97:cf:d6:04:d5:3d:3a:9b:41:
aa:37:ac:75:21:0f:f3:78:db:59:81:6b:5f:3d:f6:
b1:ec:ce:78:37:51:b4:f7:0f:cd:f0:a3:1c:88:71:
39:0a:82:b0:89:85:2e:08:ba:8f:1a:77:3d:78:e8:
31:8d:dd:c2:8b:c6:2b:66:28:a0:17:ae:d9:cf:cd:
02:53:65:51:52:9b:90:5e:40:27:86:b5:1a:47:cd:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8A:87:38:FD:25:E3:95:70:68:BF:62:11:D6:CD:CB:07:4C:68:73
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b7:2f:b8:7b:65:2c:47:d9:10:65:03:39:df:a5:74:55:2d:
fa:62:1a:3b:a1:e4:16:59:df:41:22:3e:4e:ca:ab:03:1e:69:
bb:9d:a1:13:53:9f:50:04:b1:8b:28:29:08:17:c9:f3:99:fd:
c6:ae:6d:21:f3:42:46:b6:47:c3:c1:ef:ec:4d:be:d6:20:41:
e7:6e:31:66:f4:5b:4e:0f:c9:d7:04:5d:6c:56:7e:f5:dd:54:
8c:27:9a:22:72:c7:65:cf:fc:36:dc:af:1d:ed:7a:7b:ae:68:
65:26:ff:32:3b:1f:25:4c:2d:1c:45:c0:90:ad:7f:3a:02:4e:
a0:f8:55:a1:b8:54:8e:3b:eb:b7:78:75:58:c3:bc:08:80:22:
90:5e:ff:f2:1e:49:b7:f0:fc:80:d7:f8:c1:52:b8:a6:b8:c1:
ef:66:4a:c1:a7:35:73:46:63:ff:bf:b5:34:3d:e9:6a:8f:d7:
92:0e:77:2d:80:93:f6:63:5c:16:7b:db:7c:e8:60:bf:ac:0c:
5c:44:bb:25:63:05:01:44:fc:7c:cb:dc:d6:54:50:ef:d4:2a:
e7:50:29:bc:44:ee:fd:9c:67:00:82:05:a1:72:52:c3:5f:7d:
2a:c0:ab:78:d2:ed:fc:1b:62:d7:d7:3d:28:25:5e:d3:75:68:
7b:10:80:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:35 2025 by rpki-client