Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier: Z1a1GAo7U+1n4Dh6mQpkviezwClNa4UOA3hPLV+ul8U=
Subject key identifier: B3:DE:CF:4D:2C:88:58:83:F3:88:FE:52:05:F0:99:5B:37:23:F6:FC
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 019A5074ABE6528D59757FA6F005D19C0ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number: 03F1
Signing time: Tue 04 Nov 2025 20:00:14 +0000
Manifest this update: Tue 04 Nov 2025 20:00:14 +0000
Manifest next update: Wed 05 Nov 2025 20:00:14 +0000
Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: RdcFJ5NIOHHmhEEHQ+KjbIE8AtUoUnaCW65YUzOKmo0=)
2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:ab:e6:52:8d:59:75:7f:a6:f0:05:d1:9c:0a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: Nov 4 20:00:14 2025 GMT
Not After : Nov 5 20:00:14 2025 GMT
Subject: CN=b3decf4d2c885883f388fe5205f0995b3723f6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:ad:4b:03:f8:3c:12:cc:1f:d4:1b:c5:27:
7c:db:c9:fd:86:0a:44:84:86:9c:a5:5b:c5:48:ea:
c0:e7:d5:55:09:d0:d2:43:82:0c:59:c5:6b:a4:68:
24:57:eb:76:fc:2e:da:bc:fa:bf:65:44:b1:d5:e3:
c9:8c:a1:c1:a1:4b:9e:7e:bb:32:3c:34:a1:9f:40:
18:c2:e6:77:86:e9:b5:03:0a:49:91:e4:7a:c4:d5:
36:98:f8:25:2c:27:2b:2f:77:d5:8e:fb:a7:47:bf:
7f:66:e8:fb:56:ba:a7:cd:c9:e4:c0:44:0f:b1:6d:
00:cb:c7:68:2a:40:9e:c0:6a:4a:d6:9a:28:d9:44:
e5:0d:1c:a2:20:c5:ad:9e:86:95:a7:82:c9:12:b2:
a2:91:2e:b8:f3:1b:59:be:14:6e:fe:15:0a:23:7f:
f8:bd:96:c6:c0:e6:48:f7:7e:4e:18:9e:d1:4a:cb:
e2:9e:11:13:24:d6:8a:93:6e:ff:8a:18:fd:a1:99:
c0:92:9a:d7:bc:d4:06:eb:95:58:f9:e7:cc:87:c9:
6a:4f:68:a9:b7:d3:0b:5e:5e:2f:d8:3a:ff:cb:37:
d5:0f:76:ce:87:92:3a:b3:44:89:21:c3:6d:e4:2a:
19:0e:bc:d6:f2:99:a9:39:2c:5a:05:c2:b9:cc:62:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DE:CF:4D:2C:88:58:83:F3:88:FE:52:05:F0:99:5B:37:23:F6:FC
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d4:6c:d6:50:ca:ff:59:d6:a7:e9:16:b9:e7:bf:cf:55:14:
66:42:a4:6e:f4:28:2f:a8:ad:8f:08:f3:7e:e7:58:2a:3a:b5:
a9:e4:cb:37:2d:30:d8:78:5b:45:59:e0:f6:52:c7:bc:1f:8c:
70:07:81:01:48:de:f0:41:ac:9a:58:22:4a:8e:c4:70:c1:3d:
13:b5:b5:73:a6:f3:31:27:d6:c2:e8:5c:cd:c6:93:58:a1:98:
1f:fb:11:a1:89:e2:79:b4:79:dd:1b:67:40:b9:7c:b3:c5:56:
05:5e:cd:a5:7e:17:68:e1:c5:82:65:c5:88:4a:7a:66:4b:3b:
ad:d0:f4:3a:a9:1f:39:cb:06:6b:8f:81:47:f1:35:98:5b:64:
e0:ec:a2:a7:7a:b6:94:13:d6:74:52:97:1c:4f:b0:b7:12:9e:
ac:50:be:7c:96:f3:a9:05:ab:03:be:c0:c1:16:d3:65:93:9d:
f4:d4:8c:61:11:9c:85:8a:9d:78:9f:dd:c6:29:29:3f:6d:3d:
4f:58:5e:c5:24:69:33:72:80:bb:ca:97:de:0a:75:5e:e2:fa:
0b:3c:58:f1:9e:47:12:ab:a7:0a:be:66:8f:76:fb:7a:22:dc:
72:db:8a:6f:71:4e:c3:63:dd:13:ad:7d:f9:05:34:46:6a:6b:
72:06:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:41 2025 by rpki-client