Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: QdIpsNRJxeUyzzeX3KQQu59Q8gR3ER3ywg53NcStAtc=
Subject key identifier: F8:6A:20:2F:C3:3B:04:70:E6:C6:A7:48:D8:44:A8:68:2D:FB:05:3B
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 01976884C79EC228720C4734E7A2F7ED7E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 2F
Signing time: Fri 13 Jun 2025 09:00:21 +0000
Manifest this update: Fri 13 Jun 2025 09:00:21 +0000
Manifest next update: Sat 14 Jun 2025 09:00:21 +0000
Files and hashes: 1: KZpkhLSygow8v2JeRm5l6FtwdnM.roa (hash: kEG8Taeqqp1OFVs4WldwYvtT3+8GrXdXaDIEP4OfOTY=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: n4fKt7rxpRwFnTYjto9MoFAORe7qUwM/GnnBu2dUJPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:c7:9e:c2:28:72:0c:47:34:e7:a2:f7:ed:7e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Jun 13 09:00:21 2025 GMT
Not After : Jun 14 09:00:21 2025 GMT
Subject: CN=f86a202fc33b0470e6c6a748d844a8682dfb053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:e9:48:8a:63:ae:2e:e1:b0:15:4c:f5:ae:
a8:a0:ca:0f:10:1f:63:ac:f0:91:68:11:4f:89:3e:
72:bb:08:47:25:74:8d:96:3c:2c:99:0a:c7:de:6b:
3b:d8:06:86:09:14:38:b3:1f:aa:51:f2:3e:6d:b8:
1c:d0:f9:58:5a:52:dd:19:62:12:ae:d9:fe:41:ee:
45:e8:12:9e:d7:3c:3c:90:1d:2a:1c:43:a9:38:de:
fd:8e:b3:13:b6:25:a5:1a:65:cb:de:cd:98:31:3b:
b2:aa:26:20:01:f1:43:2d:e0:db:ae:ff:33:1d:6a:
fa:38:d7:65:19:97:7a:14:91:b1:36:75:22:5c:02:
e1:58:02:6e:49:26:ac:11:33:99:5f:f7:99:44:ba:
67:51:8e:35:f9:ae:d8:2b:6e:a9:9b:d6:10:f3:b1:
c6:52:68:ce:d3:3d:af:2a:5d:b0:bc:1e:20:3b:72:
9c:04:dc:a1:19:e9:9e:d1:b8:d9:84:3e:24:65:8c:
c9:85:b4:f3:eb:11:a6:f0:c8:61:cf:71:bc:dd:25:
37:b4:7c:95:b6:5e:a0:bb:45:9f:e4:e4:f3:84:ba:
f6:fb:5f:a3:46:60:e6:b5:11:65:2d:9d:55:4f:eb:
6a:6e:e9:38:f1:42:de:8c:18:76:51:f2:ee:6e:9d:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6A:20:2F:C3:3B:04:70:E6:C6:A7:48:D8:44:A8:68:2D:FB:05:3B
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1f:a9:a7:58:54:cf:6a:6f:04:94:5e:85:82:1f:e9:12:30:
49:22:74:99:0a:1a:56:1c:94:58:81:53:fd:c3:61:d2:23:49:
a2:7c:73:44:0f:8c:13:7c:b8:c2:ff:67:84:a1:2d:94:3d:47:
d3:99:68:c1:f0:c5:fe:29:af:26:e3:17:f2:b0:97:c8:9a:5c:
17:24:e9:54:43:f0:10:01:91:c7:0d:13:ab:4a:cd:73:2e:5d:
b7:89:74:c1:aa:e2:d3:d1:93:dd:dd:4c:99:7a:8e:2f:85:4e:
cb:84:c8:18:41:e6:6d:f0:03:6f:7f:6e:7d:cc:77:df:58:19:
1a:82:85:c4:2e:2a:3d:61:23:30:13:d5:7b:42:94:eb:c1:d7:
20:bd:e6:0d:87:10:6e:c7:fe:9d:2b:be:30:66:20:e5:10:4f:
20:fc:64:23:65:04:9d:b5:74:8a:b6:f3:f5:96:6b:a6:09:f0:
a8:3f:87:f2:e8:f6:b9:31:4d:f7:af:a1:84:dc:dc:dd:50:d2:
fb:68:bc:6e:69:f0:b5:42:06:43:15:23:be:77:be:69:8f:a4:
63:65:d0:41:58:0e:75:a0:fe:93:82:d6:f1:db:84:84:39:93:
fd:95:d2:47:9d:94:28:60:b7:a0:e1:61:1b:9e:b1:b0:36:ee:
0a:28:0f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:04 2025 by rpki-client