Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File: AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier: kdfvzeVlDOcflzoTdasOw/WYBvg4ELD4o0bQDLq2fGM=
Subject key identifier: BE:D2:13:FA:B5:9D:3A:ED:DB:8C:8E:E7:6B:EB:95:1A:2D:E6:D8:5F
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer: /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial: 01977BD4ECD5A75FBBCFD58B2D75569B1C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number: 0504
Signing time: Tue 17 Jun 2025 03:00:41 +0000
Manifest this update: Tue 17 Jun 2025 03:00:41 +0000
Manifest next update: Wed 18 Jun 2025 03:00:41 +0000
Files and hashes: 1: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: Pe3blKIK006xnadmVipVtYyYlJDcB4zooKLVLtDtMB4=)
2: e0RKB6c0KB07YznYp0xB1MsPmzk.roa (hash: qPmTA1Xz3mqQ1fzxdYI8NmB7dWpfMeJeVGXYLIJQJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:d4:ec:d5:a7:5f:bb:cf:d5:8b:2d:75:56:9b:1c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Validity
Not Before: Jun 17 03:00:41 2025 GMT
Not After : Jun 18 03:00:41 2025 GMT
Subject: CN=bed213fab59d3aeddb8c8ee76beb951a2de6d85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:97:35:3a:95:48:67:8c:6e:72:96:8d:31:
b0:07:b0:5d:7c:4b:a9:33:7a:2d:38:0f:cb:a7:2f:
b7:06:09:d5:bf:dc:c0:cc:4e:5b:0f:ec:3a:e8:ac:
0b:97:6d:f0:cf:c4:c0:e9:c8:67:da:ee:27:f8:a8:
bc:c8:fa:24:f3:20:e1:bf:aa:96:1f:47:98:3d:16:
18:f5:4c:ba:11:e7:44:0f:bb:7b:04:28:1e:e5:7f:
2d:b0:58:aa:73:49:36:44:cc:5e:1f:db:bf:a6:c9:
bb:01:a2:3e:1e:a5:6b:36:0d:c5:9d:b8:f2:bb:56:
54:aa:43:23:57:5d:a3:2e:2a:aa:b3:a9:b8:85:35:
50:a8:a9:43:72:92:1f:e6:8c:27:c9:9f:7a:6e:73:
3c:1f:33:ed:fc:61:b8:d2:28:21:57:86:b1:3e:bb:
f9:44:19:99:97:e4:51:11:a4:55:0e:bf:6c:af:b2:
6d:83:26:45:c5:ff:05:ae:8c:f7:ae:0e:f6:d2:c4:
20:57:cc:29:92:3d:c9:90:03:1b:8e:4a:83:78:b9:
2f:e8:9a:7b:9b:55:cf:7b:1f:78:06:46:76:a1:6f:
ad:3e:ec:97:7e:03:22:bd:12:41:aa:6a:31:d7:4a:
52:20:69:d6:44:1c:60:ee:fe:a2:e8:ad:05:2f:a9:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D2:13:FA:B5:9D:3A:ED:DB:8C:8E:E7:6B:EB:95:1A:2D:E6:D8:5F
X509v3 Authority Key Identifier:
keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b1:ca:f6:4a:4e:21:83:8a:bb:37:7a:6c:a8:3d:90:09:b0:
46:ff:55:e3:8b:de:96:41:3b:33:36:e7:72:cc:68:15:6b:18:
fb:7b:d5:2a:0a:16:b2:fb:aa:a3:ed:13:51:0b:60:11:7a:49:
4b:89:8e:6f:8d:41:4f:de:1d:ff:1a:ab:d6:37:61:11:47:42:
b6:47:94:86:f9:66:54:4b:1b:ef:95:53:2f:c6:34:08:e5:39:
5a:df:ef:24:13:bd:89:d2:c6:eb:f1:2c:59:6a:b9:17:52:e6:
08:22:d3:e8:bc:dc:51:11:7a:fb:b4:08:15:7c:7a:8b:dd:9b:
2d:83:06:46:32:cd:60:d4:0b:b5:cf:47:a9:b2:b5:8e:16:f9:
04:d0:1e:7c:0c:f3:34:96:5a:ed:9f:d5:c1:d3:7d:48:45:e0:
c0:d7:f4:b3:fd:c0:45:92:8c:dd:66:15:9b:30:4e:bc:71:56:
6c:fd:8e:cf:a9:9b:76:5e:a7:d7:09:3b:23:e5:da:e8:91:fd:
e4:81:a4:f7:b6:72:4d:13:a0:27:66:0e:19:ad:39:80:aa:97:
9f:87:3d:eb:61:25:40:ce:ad:ef:da:c8:0b:89:4f:0a:5c:0c:
c6:9b:18:60:e8:87:e5:91:70:be:78:35:8f:1d:9c:d0:a9:0d:
b2:44:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:21:10 2025 by rpki-client