
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
File: amgjORLYCZ5O3U5ZBtsfxiOubPk.mft (raw, json)
Hash identifier: 9SSO9Nsh0dlyF9czoI3JrNskTtxXZjuZC5DjAo2Preg=
Subject key identifier: 58:9C:0F:70:F7:F0:10:8B:76:BB:69:2E:AB:4E:17:17:1E:E7:94:F5
Authority key identifier: 6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
Certificate issuer: /CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Certificate serial: 01976EF4B5ADB675165A597EF90FE383F727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 15:00:20 +0000
Manifest this update: Sat 14 Jun 2025 15:00:20 +0000
Manifest next update: Sun 15 Jun 2025 15:00:20 +0000
Files and hashes: 1: amgjORLYCZ5O3U5ZBtsfxiOubPk.crl (hash: dTOwfCAu/GBqa89hGvMhWkMSbmv4g4WCXLjh1U8Fm9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:b5:ad:b6:75:16:5a:59:7e:f9:0f:e3:83:f7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Validity
Not Before: Jun 14 15:00:20 2025 GMT
Not After : Jun 15 15:00:20 2025 GMT
Subject: CN=589c0f70f7f0108b76bb692eab4e17171ee794f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:c5:ed:19:92:33:93:48:7e:da:ff:e0:58:
e1:0a:f4:bf:79:43:22:47:b3:1c:c8:ef:14:24:97:
5f:c5:52:82:18:f2:17:5d:af:c9:83:72:ea:73:02:
5c:c9:c7:2a:a9:98:59:5b:50:e3:e4:84:b7:20:b7:
2f:9f:e9:ff:4a:a2:d3:d7:60:65:81:6d:90:df:d0:
92:86:4b:2c:2e:1d:c6:9a:21:bd:5f:82:a4:9a:b8:
b8:85:cc:b4:aa:0e:07:5e:93:6b:b1:aa:1f:33:07:
e4:86:eb:e9:25:92:82:47:eb:78:91:c9:41:aa:3b:
a9:56:02:b0:11:0e:ca:d3:c3:86:c0:9c:cb:a4:33:
a8:f6:6f:eb:1c:90:40:01:21:d2:04:8c:79:20:ee:
61:b1:b3:1c:5a:e9:7b:17:d9:eb:61:86:19:1d:6c:
f7:bf:96:d0:cc:53:f4:5b:92:74:4e:ae:e8:ce:3b:
d3:89:fa:fd:0f:23:61:2c:0f:d1:3c:9e:0b:09:3c:
a3:9a:a5:cf:50:0e:6b:62:2c:32:28:d9:ea:c9:5b:
4d:34:cd:eb:41:17:e2:67:5e:ad:6d:6c:81:05:11:
24:35:29:63:d4:38:cb:a6:1d:2e:43:70:1b:f8:46:
56:ba:c8:05:44:3f:6d:5d:33:af:ff:35:85:53:f2:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:0F:70:F7:F0:10:8B:76:BB:69:2E:AB:4E:17:17:1E:E7:94:F5
X509v3 Authority Key Identifier:
keyid:6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cd:83:4e:d7:58:66:76:56:62:fe:a6:d5:ee:31:da:3b:d4:
7b:10:2c:90:0c:e4:9b:2c:51:61:75:e7:9e:ce:0c:51:74:7a:
91:e8:67:ce:b1:ee:b2:f3:52:d4:50:8f:64:33:64:c5:b7:cc:
44:64:56:84:ce:65:78:a5:6a:64:15:ab:98:8f:ce:38:f5:37:
93:05:30:5e:6e:12:9a:36:8a:f5:1b:e1:3d:72:29:90:73:de:
5e:4c:b4:26:c5:cc:99:10:cc:bb:af:05:46:8f:52:5b:35:79:
0c:73:04:d8:b1:28:51:71:b6:ea:f0:93:7d:1f:88:2f:26:5e:
cb:30:e5:48:0b:aa:38:bb:ca:20:6b:2b:55:c1:2c:f4:91:6f:
6f:0b:3b:c6:7c:ea:fd:56:e5:83:5c:33:3b:c4:a5:3a:29:a3:
eb:0e:36:65:3f:bc:96:d0:d9:30:e7:a4:61:56:af:f0:d3:97:
31:c1:d7:0b:3f:28:9b:5e:c3:e6:ca:34:44:27:12:15:81:d0:
8c:b8:41:7f:7c:91:9b:5a:9a:93:e5:e1:58:45:04:56:d4:37:
42:5c:01:a3:29:b4:2a:b6:d2:c7:1b:e9:4d:a9:98:fa:13:d3:
02:bb:94:8b:31:25:13:ba:ea:90:c2:46:ef:5c:3d:d6:49:35:
1e:14:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:30 2025 by rpki-client