Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: yngZ+o1MLhVLeBn+dhdehlhL5XWf/JwLrQUf7XpaZWA=
Subject key identifier: 28:49:64:D5:45:DE:E2:92:B2:C7:42:E8:8C:16:1B:E6:11:22:43:A1
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019770ACACA17CAD4BC0D6518B0D8D117364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 23:00:53 +0000
Manifest this update: Sat 14 Jun 2025 23:00:53 +0000
Manifest next update: Sun 15 Jun 2025 23:00:53 +0000
Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: JggeU05by7r/BhUDIZJ462Xo7Q+EjLLgqbnapb88vzo=)
2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:ac:a1:7c:ad:4b:c0:d6:51:8b:0d:8d:11:73:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Jun 14 23:00:53 2025 GMT
Not After : Jun 15 23:00:53 2025 GMT
Subject: CN=284964d545dee292b2c742e88c161be6112243a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:d5:2b:8f:c9:43:dd:85:11:12:dc:45:3e:
f7:4a:b4:84:6b:16:da:d5:f1:1e:12:93:fe:1c:ee:
49:ec:88:80:d8:bb:a1:16:77:5e:ee:e9:1e:6c:cc:
c8:e5:36:51:c9:d9:70:5f:e9:2f:9c:25:67:19:ef:
95:90:cd:3a:c4:2c:eb:be:1d:df:df:b4:ef:de:b0:
90:94:ed:cb:a3:03:5b:9b:61:bf:bd:6e:d3:0d:1f:
d6:99:1b:fb:4a:d1:cd:f8:2d:6d:84:25:20:28:69:
3b:c3:e2:30:a9:ca:a4:66:68:f7:a2:3d:ff:f2:fa:
81:0b:fa:8e:15:a1:6e:1b:58:a0:aa:cf:7d:fc:e4:
6d:30:05:df:55:3b:d0:37:41:f3:bb:80:eb:86:95:
77:63:c2:13:1e:9e:ba:f4:a9:3c:0c:e1:65:ed:b4:
9d:0b:88:ac:d7:8f:51:0d:f9:9c:55:9f:32:e0:8c:
5a:2e:3a:d5:aa:fc:17:2d:17:8c:50:d2:34:7e:d6:
9e:bf:d8:87:f5:1d:d5:3f:ac:bc:d0:80:3a:25:cc:
da:bb:b9:6b:67:96:a1:85:ea:a1:04:f3:6e:7e:1e:
df:9b:a8:d9:94:35:5d:a9:ee:d7:e9:39:0e:d5:50:
2e:4f:c3:7d:f9:31:f0:81:4a:aa:b4:6a:c3:27:b7:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:64:D5:45:DE:E2:92:B2:C7:42:E8:8C:16:1B:E6:11:22:43:A1
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2f:6b:d2:0a:31:68:10:f2:13:58:68:e9:42:fd:fc:64:9d:
bb:fa:7d:24:7f:53:92:f6:06:12:34:7c:11:a5:15:24:b6:34:
c5:b7:c7:b7:29:cc:65:fb:c0:f2:8b:17:7c:59:7d:f8:38:5f:
5e:d6:df:fd:d3:cb:1e:52:48:79:1d:64:42:55:0d:28:5b:7c:
f0:75:a4:47:5d:90:32:c6:f2:84:8e:20:f4:1b:8d:e5:2c:83:
81:5c:2b:09:c2:83:61:0e:08:50:87:0b:8f:0f:60:80:b9:0c:
25:c3:ad:e7:c1:8f:7f:d5:bf:03:3d:28:e5:5a:5e:74:72:ff:
59:0c:84:dc:4d:b3:c1:85:9a:e1:cd:ee:a7:d2:66:7c:a5:64:
0e:ac:21:0e:55:d0:3b:e9:a1:b9:2f:55:3f:fd:c2:5c:fb:e2:
fc:ac:8f:a8:b1:cd:09:46:76:e7:8b:5a:ec:36:70:ae:d1:46:
cb:89:ce:c9:a8:3c:eb:e9:37:6d:9c:15:98:4e:13:e6:64:5b:
e3:4e:73:34:6c:7a:1c:cd:b6:f7:a1:86:10:e3:4b:7b:c0:80:
1f:13:f5:51:65:00:b1:4a:35:af:dd:da:7d:84:2d:1d:55:40:
d1:81:38:fd:87:e7:5a:97:12:1b:f5:1f:15:e5:37:fe:4c:5e:
3c:2c:1e:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrKyhfK1LwNZRiw2NEXNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjQwYmNjYjcxNzFmMTk5YzQzYTBhOTc0Y2FiODI3ZWQx
OGU3NTAwHhcNMjUwNjE0MjMwMDUzWhcNMjUwNjE1MjMwMDUzWjAzMTEwLwYDVQQD
EygyODQ5NjRkNTQ1ZGVlMjkyYjJjNzQyZTg4YzE2MWJlNjExMjI0M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfnVK4/JQ92FERLcRT73SrSEaxba
1fEeEpP+HO5J7IiA2LuhFnde7ukebMzI5TZRydlwX+kvnCVnGe+VkM06xCzrvh3f
37Tv3rCQlO3LowNbm2G/vW7TDR/WmRv7StHN+C1thCUgKGk7w+IwqcqkZmj3oj3/
8vqBC/qOFaFuG1igqs99/ORtMAXfVTvQN0Hzu4DrhpV3Y8ITHp669Kk8DOFl7bSd
C4is149RDfmcVZ8y4IxaLjrVqvwXLReMUNI0ftaev9iH9R3VP6y80IA6Jczau7lr
Z5ahheqhBPNufh7fm6jZlDVdqe7X6TkO1VAuT8N9+THwgUqqtGrDJ7euhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChJZNVF3uKSssdC6IwWG+YRIkOhMB8GA1UdIwQY
MBaAFAJkC8y3Fx8ZnEOgqXTKuCftGOdQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYt
YzdiZjk1ZTVhYjdiLzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYtYzdiZjk1ZTVhYjdi
LzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy9r0gox
aBDyE1ho6UL9/GSdu/p9JH9TkvYGEjR8EaUVJLY0xbfHtynMZfvA8osXfFl9+Dhf
Xtbf/dPLHlJIeR1kQlUNKFt88HWkR12QMsbyhI4g9BuN5SyDgVwrCcKDYQ4IUIcL
jw9ggLkMJcOt58GPf9W/Az0o5VpedHL/WQyE3E2zwYWa4c3up9JmfKVkDqwhDlXQ
O+mhuS9VP/3CXPvi/KyPqLHNCUZ254ta7DZwrtFGy4nOyag86+k3bZwVmE4T5mRb
405zNGx6HM2296GGEONLe8CAHxP1UWUAsUo1r93afYQtHVVA0YE4/YfnWpcSG/Uf
FeU3/kxePCweFA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:54:18 2025 by rpki-client