Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: zLAMRidXLnQnBkH6I9oxS+ghRqr1IuTz6+LG7J5JTB8=
Subject key identifier: CB:A5:74:EF:0C:BC:63:E6:45:F7:3F:F0:C3:C5:0C:38:17:E3:9A:8D
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 019872984739248758EEDF741EDD4FCBEC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: B9
Signing time: Mon 04 Aug 2025 01:00:38 +0000
Manifest this update: Mon 04 Aug 2025 01:00:38 +0000
Manifest next update: Tue 05 Aug 2025 01:00:38 +0000
Files and hashes: 1: iwQbkJtBuAm_xcfzDuJT6i57BjY.roa (hash: RmTZJ40kwHa9kbSdBRPYJl4skgdfEXdZGrx35wy6Kio=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: 2vjYqroU7Dkp/7iL5/vHW5WRUrfxN1CFTN0ecTg/bI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:47:39:24:87:58:ee:df:74:1e:dd:4f:cb:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Aug 4 01:00:38 2025 GMT
Not After : Aug 5 01:00:38 2025 GMT
Subject: CN=cba574ef0cbc63e645f73ff0c3c50c3817e39a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:43:14:f9:4d:c1:8b:14:92:d7:75:84:74:
3d:9b:a9:30:25:08:58:fc:e6:62:29:22:41:77:4d:
0d:cc:52:15:19:b2:ff:ba:60:d4:c0:d2:c0:f2:42:
35:fc:2c:0b:0c:e2:49:dc:0b:61:be:d8:40:ae:0c:
53:67:a3:1f:26:de:40:80:ce:f9:89:b3:d1:51:b6:
42:3e:d2:62:b0:c1:2f:d0:00:4d:05:07:66:ea:b8:
1b:a9:39:90:21:29:ee:17:9a:c5:0e:74:44:e9:69:
88:74:c3:d8:35:0d:c4:75:41:ae:e5:89:3e:ac:76:
e4:10:9b:a6:f3:f4:49:b0:60:94:cc:a3:f7:82:b2:
36:10:12:54:01:c4:48:40:2d:48:4e:02:c8:10:6d:
56:8d:29:47:6d:3c:01:92:9e:cd:46:c2:ab:c9:e8:
db:bf:b0:f5:41:6c:cc:99:a3:8b:1b:58:b0:3c:36:
d4:7f:27:f0:4b:00:4d:02:ec:f0:37:6e:c8:e7:4e:
e4:8e:1f:8f:f3:01:2d:74:df:cd:f5:5d:44:b7:b6:
96:91:f9:09:42:0b:b1:a2:8a:89:b0:1e:19:2e:0d:
d6:0d:87:31:b9:0a:55:ec:4c:3c:cb:92:e7:a5:c2:
1f:73:ee:b1:7b:58:91:2b:03:9c:a8:b4:42:3e:9d:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:74:EF:0C:BC:63:E6:45:F7:3F:F0:C3:C5:0C:38:17:E3:9A:8D
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0b:e4:5d:9f:48:2c:85:88:e4:25:ca:0c:e8:91:39:5b:4c:
18:95:bb:6a:71:fd:ec:db:a5:6e:64:02:55:8f:c8:cd:8a:74:
9c:a7:d1:62:4e:24:80:f9:30:c6:6e:19:6d:06:b3:6e:4f:f8:
6d:f1:8c:b1:5f:5a:1a:93:bb:df:e7:a8:49:63:15:f8:76:d7:
0e:64:f7:54:b7:f0:b6:50:4c:83:f0:d1:40:9a:7e:3b:e3:e7:
20:a1:27:6d:cd:9a:53:7a:9a:dd:1c:7f:4a:ec:d0:96:34:e5:
b8:bc:a2:5e:9b:44:d6:d1:a4:5c:b8:e1:7e:32:24:6b:6b:86:
12:f4:e8:fa:19:08:5e:2e:f8:5a:97:53:2b:08:06:4b:ca:b2:
e6:40:5d:79:e8:3a:9d:b1:8b:78:36:1d:0c:2f:13:63:14:d5:
60:bd:48:47:86:b7:a4:d6:ea:38:79:c0:a6:f9:ca:42:10:c7:
2a:df:91:11:3a:51:4c:7b:8a:75:5e:b6:ba:75:3f:e1:ea:2c:
e6:e0:51:f4:66:39:8f:0e:82:55:c8:0e:59:84:da:04:91:c0:
30:c7:1f:ef:92:38:ef:6e:8d:19:a2:bc:55:ed:e8:c5:02:dc:
ba:c9:c6:ed:58:41:03:e9:22:14:65:da:c5:37:35:88:27:21:
a2:4b:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:56 2025 by rpki-client