Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier: 6oGooPoEoU6U7NuJkZxaKDq0meaLL8g1s+TEt9hk+0k=
Subject key identifier: 5C:76:69:81:1F:53:4B:C6:C8:1A:57:38:39:86:40:F9:D0:B6:30:71
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 019875628580CCC940F6474759141A1ECEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number: 02FB
Signing time: Mon 04 Aug 2025 14:00:47 +0000
Manifest this update: Mon 04 Aug 2025 14:00:47 +0000
Manifest next update: Tue 05 Aug 2025 14:00:47 +0000
Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: fAdn6ra4ZCD7tZVhc26+PRD39SjaQ3D6npDe7EHGQQA=)
2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:85:80:cc:c9:40:f6:47:47:59:14:1a:1e:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: Aug 4 14:00:47 2025 GMT
Not After : Aug 5 14:00:47 2025 GMT
Subject: CN=5c7669811f534bc6c81a5738398640f9d0b63071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:01:f0:bb:1d:c8:5c:1c:ca:b0:3d:65:81:
d5:5c:90:3c:c0:66:65:b7:05:c9:5c:48:4c:e7:a6:
c3:7c:c2:aa:3c:26:a3:d0:66:9f:00:d5:51:ae:7f:
1d:1f:69:f3:70:f2:d1:91:75:bd:17:75:63:01:f2:
a4:68:4d:3e:6e:0a:ab:2d:79:a6:39:37:52:65:4d:
40:bc:ab:cd:66:c9:c8:43:12:85:e5:1c:30:9b:7f:
26:66:23:7d:d4:11:7b:6b:9c:30:a3:04:f6:c2:cb:
f5:cf:0f:28:0a:98:c2:70:b7:c5:dd:1e:2a:75:d9:
65:6d:e7:96:58:18:a6:4a:20:af:ea:b8:1e:65:29:
12:d9:6a:65:3a:66:d5:29:e7:8e:2f:83:83:a9:6f:
60:58:30:ad:56:e7:d3:ef:c0:4a:2e:c1:8d:3f:39:
1c:31:42:3e:5d:28:96:8d:97:f8:94:92:d6:c4:7b:
50:12:91:bb:73:91:27:ef:91:c4:19:03:cf:15:e6:
09:ae:14:d6:41:cf:42:31:da:04:e4:d2:83:fe:7f:
71:30:ad:8e:96:fa:9c:c6:4f:2e:30:45:53:6e:5a:
bf:59:c7:4f:bf:72:b2:f8:1d:7a:59:13:28:28:90:
4f:ed:25:94:f0:e7:51:6b:08:09:8c:ce:c7:cd:74:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:76:69:81:1F:53:4B:C6:C8:1A:57:38:39:86:40:F9:D0:B6:30:71
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c9:de:30:47:ee:14:57:4f:40:e9:52:71:ec:d8:39:06:60:
34:c1:86:fb:ce:5e:ea:cb:da:9a:a7:d4:4a:ce:72:26:a3:24:
3a:83:c1:3e:f6:88:eb:01:4c:e2:c8:55:2f:80:4b:92:fb:48:
dc:b6:25:ac:22:74:a4:74:35:85:58:36:8f:26:fd:d3:79:8e:
f2:19:ab:8c:21:29:89:56:c8:fe:7d:f3:3d:78:ea:f7:52:a5:
90:17:42:67:5e:a4:aa:3a:23:79:e2:3f:94:54:d0:ed:13:bf:
b0:28:ae:24:f7:bc:10:f6:3e:f8:c8:5e:e2:b1:7d:1f:95:f6:
0e:9c:84:6e:5d:ea:73:c6:8b:9c:e1:80:26:15:fc:05:ca:81:
af:12:ef:11:c9:44:ac:bb:20:d3:59:5f:d0:da:1f:80:18:68:
94:ba:5d:9a:f9:26:cd:e6:a8:23:33:0e:e7:4a:33:11:66:d2:
c9:e0:3e:c1:db:9d:9c:a7:ed:3b:f8:6f:d1:09:02:16:b1:f2:
fc:97:f7:0f:5e:c8:79:3c:58:b6:99:42:c4:48:fd:58:cb:ff:
32:e6:d5:1d:08:3c:5e:a9:d9:6a:d3:5f:bc:f2:ab:ca:32:da:
31:1d:2f:85:d8:87:47:b4:a5:3f:f3:f9:55:77:b6:87:ab:fc:
ee:db:33:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YoWAzMlA9kdHWRQaHs68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx
MjYwMTgwHhcNMjUwODA0MTQwMDQ3WhcNMjUwODA1MTQwMDQ3WjAzMTEwLwYDVQQD
Eyg1Yzc2Njk4MTFmNTM0YmM2YzgxYTU3MzgzOTg2NDBmOWQwYjYzMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gIB8LsdyFwcyrA9ZYHVXJA8wGZl
twXJXEhM56bDfMKqPCaj0GafANVRrn8dH2nzcPLRkXW9F3VjAfKkaE0+bgqrLXmm
OTdSZU1AvKvNZsnIQxKF5Rwwm38mZiN91BF7a5wwowT2wsv1zw8oCpjCcLfF3R4q
ddllbeeWWBimSiCv6rgeZSkS2WplOmbVKeeOL4ODqW9gWDCtVufT78BKLsGNPzkc
MUI+XSiWjZf4lJLWxHtQEpG7c5En75HEGQPPFeYJrhTWQc9CMdoE5NKD/n9xMK2O
lvqcxk8uMEVTblq/WcdPv3Ky+B16WRMoKJBP7SWU8OdRawgJjM7HzXSdZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFx2aYEfU0vGyBpXODmGQPnQtjBxMB8GA1UdIwQY
MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct
MjliM2UxMTFkY2VjLzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj
LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8neMEfu
FFdPQOlScezYOQZgNMGG+85e6svamqfUSs5yJqMkOoPBPvaI6wFM4shVL4BLkvtI
3LYlrCJ0pHQ1hVg2jyb903mO8hmrjCEpiVbI/n3zPXjq91KlkBdCZ16kqjojeeI/
lFTQ7RO/sCiuJPe8EPY++Mhe4rF9H5X2DpyEbl3qc8aLnOGAJhX8BcqBrxLvEclE
rLsg01lf0NofgBholLpdmvkmzeaoIzMO50ozEWbSyeA+wdudnKftO/hv0QkCFrHy
/Jf3D17IeTxYtplCxEj9WMv/MubVHQg8XqnZatNfvPKryjLaMR0vhdiHR7SlP/P5
VXe2h6v87tszBg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:38 2025 by rpki-client