Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File: AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier: pGYpkCy2JEm1yK4qOR/bgkBxDsldkvUnkgpkC+Ihz7A=
Subject key identifier: 20:88:02:8B:05:49:4B:66:27:A8:A3:4A:3E:B7:AB:6D:CD:44:31:12
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer: /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial: 01987E9C9B7AD539FFC147FA8DA23D85BA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number: 058A
Signing time: Wed 06 Aug 2025 09:00:49 +0000
Manifest this update: Wed 06 Aug 2025 09:00:49 +0000
Manifest next update: Thu 07 Aug 2025 09:00:49 +0000
Files and hashes: 1: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: aSDT3FPvDnAWztoqwENQ34Vn9jT9WVBckn2fekID6Fo=)
2: e0RKB6c0KB07YznYp0xB1MsPmzk.roa (hash: qPmTA1Xz3mqQ1fzxdYI8NmB7dWpfMeJeVGXYLIJQJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:9b:7a:d5:39:ff:c1:47:fa:8d:a2:3d:85:ba:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Validity
Not Before: Aug 6 09:00:49 2025 GMT
Not After : Aug 7 09:00:49 2025 GMT
Subject: CN=2088028b05494b6627a8a34a3eb7ab6dcd443112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:9a:d7:d5:0d:ef:c4:b5:ba:d8:be:ec:0d:
e3:57:2a:bf:11:f6:3e:18:58:28:0e:9e:3c:8d:6f:
7f:81:2a:f4:73:71:e0:e6:ca:58:91:ff:b6:e2:ab:
b4:8c:69:f7:4b:05:be:5d:34:45:88:f8:12:29:41:
a0:31:fa:7c:79:49:dc:58:80:5c:f8:41:a2:f4:54:
bb:ad:8f:ec:3e:a1:e9:ad:9e:df:3b:70:31:72:1b:
9d:2a:3b:a4:c9:df:b9:fb:66:4f:8a:c0:2b:92:af:
e9:ca:be:63:f3:56:04:e5:cd:60:90:16:1f:c7:bb:
8b:e4:14:8c:6d:a8:cd:54:fc:76:cc:13:08:77:ee:
b2:a9:6d:92:42:61:0b:07:19:7e:6b:d6:06:49:4e:
51:09:a1:e1:da:7c:62:29:67:4d:0d:cd:e0:e3:08:
49:4b:b6:4b:3e:04:65:4a:ea:fe:8f:9f:55:83:ee:
7b:5a:0b:34:ca:d4:be:a8:59:62:31:ee:48:1a:75:
01:3e:94:38:35:95:88:0a:2b:30:f9:ff:34:7b:f4:
64:26:51:46:6d:6a:8d:e2:2f:4b:b8:b9:6c:2f:ce:
53:d8:c5:e4:84:2b:c6:52:8f:b3:f7:c1:2d:76:12:
de:b1:20:e1:68:fa:be:2d:4d:1a:4c:5b:9f:c0:e3:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:88:02:8B:05:49:4B:66:27:A8:A3:4A:3E:B7:AB:6D:CD:44:31:12
X509v3 Authority Key Identifier:
keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9e:14:da:27:81:c7:e8:bb:25:43:b2:48:8e:ec:f5:3a:f9:
01:23:d6:23:44:8a:f8:77:6e:8b:04:d4:ef:6e:50:f9:27:35:
d2:c9:ea:96:f6:76:79:bd:8e:4f:e2:21:5b:74:1c:eb:5a:3a:
6e:71:c1:82:0d:8f:b5:ce:63:8e:e5:9a:0b:9b:36:c7:d2:dc:
df:49:12:ee:63:47:35:1b:c2:fa:9a:71:e4:72:05:7c:2f:f0:
e0:d0:d5:7f:b9:66:5d:0a:2e:56:f9:0c:24:19:0f:c4:0a:69:
46:dd:2b:58:4f:6a:83:01:4c:25:cd:22:aa:c0:a3:af:55:58:
a5:a5:06:cb:39:09:e1:49:56:28:c0:07:45:fb:71:b0:95:d3:
cc:52:a3:5f:9e:79:9c:eb:e9:64:22:d9:ee:38:52:19:b1:53:
c5:b8:17:75:87:95:af:86:26:92:50:6c:8d:1b:98:e3:8c:1c:
64:b3:b5:fc:be:ba:46:a9:40:5a:81:c3:d6:d1:ef:0d:6a:1f:
7d:95:4d:97:d5:4c:c0:9f:74:e5:a3:c9:ef:39:52:65:14:13:
2d:c3:df:8a:3f:81:e8:7b:bd:b3:6a:04:5c:3e:cd:26:11:8e:
dd:dd:07:c5:06:c1:05:84:28:d4:c6:5d:a6:60:9c:d0:3e:76:
6e:7c:58:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nJt61Tn/wUf6jaI9hbqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2NmYTJjMTY2Zjg2YzNjZDAxYzZlYmFlMTkzNzQ1ZTFl
YjBmMjkwHhcNMjUwODA2MDkwMDQ5WhcNMjUwODA3MDkwMDQ5WjAzMTEwLwYDVQQD
EygyMDg4MDI4YjA1NDk0YjY2MjdhOGEzNGEzZWI3YWI2ZGNkNDQzMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrKa19UN78S1uti+7A3jVyq/EfY+
GFgoDp48jW9/gSr0c3Hg5spYkf+24qu0jGn3SwW+XTRFiPgSKUGgMfp8eUncWIBc
+EGi9FS7rY/sPqHprZ7fO3AxchudKjukyd+5+2ZPisArkq/pyr5j81YE5c1gkBYf
x7uL5BSMbajNVPx2zBMId+6yqW2SQmELBxl+a9YGSU5RCaHh2nxiKWdNDc3g4whJ
S7ZLPgRlSur+j59Vg+57Wgs0ytS+qFliMe5IGnUBPpQ4NZWICisw+f80e/RkJlFG
bWqN4i9LuLlsL85T2MXkhCvGUo+z98EtdhLesSDhaPq+LU0aTFufwOMNlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCIAosFSUtmJ6ijSj63q23NRDESMB8GA1UdIwQY
MBaAFADM+iwWb4bDzQHG664ZN0Xh6w8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU16NkxCWnZoc1BOQWNicnJoazNSZUhyRHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80N2U5MDktNzc0NC00ZGIzLWI2OTEt
YTdiOWM3MTE1YzFlLzEvQU16NkxCWnZoc1BOQWNicnJoazNSZUhyRHlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80N2U5MDktNzc0NC00ZGIzLWI2OTEtYTdiOWM3MTE1YzFl
LzEvQU16NkxCWnZoc1BOQWNicnJoazNSZUhyRHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZ4U2ieB
x+i7JUOySI7s9Tr5ASPWI0SK+HduiwTU725Q+Sc10snqlvZ2eb2OT+IhW3Qc61o6
bnHBgg2Ptc5jjuWaC5s2x9Lc30kS7mNHNRvC+ppx5HIFfC/w4NDVf7lmXQouVvkM
JBkPxAppRt0rWE9qgwFMJc0iqsCjr1VYpaUGyzkJ4UlWKMAHRftxsJXTzFKjX555
nOvpZCLZ7jhSGbFTxbgXdYeVr4YmklBsjRuY44wcZLO1/L66RqlAWoHD1tHvDWof
fZVNl9VMwJ905aPJ7zlSZRQTLcPfij+B6Hu9s2oEXD7NJhGO3d0HxQbBBYQo1MZd
pmCc0D52bnxYHA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:11 2025 by rpki-client