Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: BkKIdlTqNU6zpBQP/9r0dwNYllN9ODKfkcLGguDo4Qs=
Subject key identifier: 07:B4:99:DE:5B:F5:4D:AE:7F:89:51:75:56:81:FC:6F:75:86:F2:42
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 019883FA749C25491E1E0122CEB0CEAF1044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 10:01:25 +0000
Manifest this update: Thu 07 Aug 2025 10:01:25 +0000
Manifest next update: Fri 08 Aug 2025 10:01:25 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: SUvVLZZN5LE36eIwJTeb9DcotxRFwKXaczPMQSqXh9o=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:fa:74:9c:25:49:1e:1e:01:22:ce:b0:ce:af:10:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Aug 7 10:01:25 2025 GMT
Not After : Aug 8 10:01:25 2025 GMT
Subject: CN=07b499de5bf54dae7f8951755681fc6f7586f242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:47:4b:e9:34:5f:47:78:27:ea:4f:da:3f:
2c:1e:fb:3d:bc:e7:8f:31:4f:de:57:e8:3e:96:76:
55:83:43:81:ba:50:69:9f:56:99:9e:4f:9b:ba:f8:
06:24:0a:cf:68:16:2b:38:55:4b:a3:69:88:13:e3:
87:78:3f:f5:c1:cf:ca:1c:75:f0:b7:0e:54:73:a2:
0a:b3:43:97:fd:93:4f:56:7a:41:16:bc:d7:13:a4:
4e:e5:36:8d:ed:3e:6b:01:e2:f9:0f:e5:07:81:6b:
bc:96:a5:9e:42:1a:33:23:3d:7c:d8:73:63:ba:8e:
e3:96:0e:fe:50:ea:4a:63:91:f3:e9:d1:01:e5:29:
a9:e1:7f:03:bd:5e:f2:fa:9f:51:17:0c:90:74:3e:
f5:28:48:15:5a:d7:23:99:c1:b1:1b:dc:6c:29:45:
c8:ed:db:c4:7a:08:e1:0c:1a:6c:20:f4:d2:23:f2:
ff:d5:28:76:bf:50:c6:13:f5:b8:95:ca:51:b0:b9:
3f:15:d3:05:33:49:8f:42:24:af:fc:ce:01:a5:76:
fd:ca:3a:cf:2a:bc:ba:e0:c3:d4:a7:10:b9:ed:fc:
42:5e:6c:0b:41:cb:58:9a:43:a0:65:65:ea:c6:99:
4e:20:f5:ed:ef:02:74:7c:9c:c0:d3:8f:7c:7a:4c:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:99:DE:5B:F5:4D:AE:7F:89:51:75:56:81:FC:6F:75:86:F2:42
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7a:90:0c:da:68:31:b1:88:2c:66:90:4b:46:9c:0e:15:43:
b4:1e:39:4e:58:da:8f:44:88:d4:13:6e:b3:95:39:a4:6f:d0:
92:74:40:3f:86:46:92:dd:60:ed:9c:bf:5a:68:4d:e5:98:c6:
50:94:e2:e6:8b:c7:ae:55:58:dd:24:cb:a4:ba:8d:b8:8b:3f:
c1:85:4c:b6:09:1c:f5:02:7d:03:23:6d:88:94:4a:c0:bd:ee:
d8:3d:57:e7:b7:47:3f:1a:ab:82:1f:8a:ff:a6:35:2a:b4:57:
28:f4:3f:2d:52:6e:1a:58:89:ab:42:ce:a4:4a:b2:f0:f5:93:
77:3e:e8:41:29:66:7b:b7:6f:ac:93:f3:c0:75:3b:c1:b1:52:
9a:7f:ad:64:67:02:39:fc:4d:5f:66:03:86:c6:15:fc:8c:2c:
bc:de:8b:35:47:59:94:59:47:cb:66:22:cb:ae:66:50:88:0b:
62:8b:a0:2e:6b:4e:c5:fd:7b:97:be:c1:c7:cc:59:52:2c:74:
21:52:24:f5:fe:81:a6:5f:cb:a5:f6:3b:6e:5b:65:d4:a1:b2:
0a:e5:ad:bf:7d:34:b6:ca:09:a7:43:9b:fa:d1:13:bf:fb:2c:
85:ed:1d:aa:76:1a:9f:19:5b:26:70:9d:e7:06:cc:4b:51:2b:
7d:3c:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:34:21 2025 by rpki-client