Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: ktVNr8A945KXHmgI/yOj07oJmepV13pq2OFTpBcqxEw=
Subject key identifier: 9F:B0:D4:F3:26:AF:C2:C5:0D:DA:64:82:4B:A5:21:EA:76:89:B0:AE
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019873E221413AC1645035BBB40261FE1F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 131D
Signing time: Mon 04 Aug 2025 07:00:55 +0000
Manifest this update: Mon 04 Aug 2025 07:00:55 +0000
Manifest next update: Tue 05 Aug 2025 07:00:55 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: bBZqqFlA5SPkIs4JQOPg0HwsW7ZgFric8qVQDrQ1Y5A=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:21:41:3a:c1:64:50:35:bb:b4:02:61:fe:1f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Aug 4 07:00:55 2025 GMT
Not After : Aug 5 07:00:55 2025 GMT
Subject: CN=9fb0d4f326afc2c50dda64824ba521ea7689b0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:a0:78:0f:cd:15:a1:c2:12:90:75:1b:81:
50:f4:03:2c:cd:f6:b0:88:5b:9d:4c:1e:8d:c9:7c:
72:ca:cf:d9:b2:70:65:30:e8:b9:18:b3:e2:7a:1f:
5b:76:0c:ff:9d:4c:82:07:0f:06:9e:26:b4:58:03:
37:0b:e0:f9:5a:5b:fa:7f:3b:bd:2c:97:a6:85:09:
04:5e:f0:cf:5b:88:79:42:ac:ce:45:3f:41:e9:5c:
a5:b7:2d:33:4e:85:8f:d8:2c:95:d3:4a:43:af:63:
96:d6:5e:01:42:13:ef:1e:f7:b6:78:fd:45:a4:83:
c8:02:16:3b:f8:af:9c:eb:c0:e8:9c:c0:cd:40:3e:
51:59:99:eb:a7:d3:be:79:89:b3:62:00:16:c3:d2:
4a:f5:d3:c9:d4:b3:7f:74:89:e7:cf:01:9b:c4:67:
e6:39:34:6d:c8:28:6f:9e:1a:f9:77:3e:26:1c:54:
b1:35:43:7b:35:f0:e8:70:1c:2e:07:24:35:48:d5:
7b:4f:5e:e6:f2:ff:ea:36:cc:bf:c2:46:40:c7:a6:
94:8f:f6:eb:bf:f7:08:e9:b3:1c:c6:f8:32:73:c2:
ab:fb:54:cb:fa:0a:8d:2d:41:99:c4:81:dc:ec:c9:
b7:6e:9e:93:e6:83:2a:95:ab:a6:9e:ae:7c:68:b2:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B0:D4:F3:26:AF:C2:C5:0D:DA:64:82:4B:A5:21:EA:76:89:B0:AE
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0e:e8:4d:4b:50:eb:c8:f2:04:3f:07:bd:9b:76:95:d7:73:
fc:54:5c:56:37:35:80:21:4f:04:30:62:c4:4b:9c:9e:1a:b9:
9f:ca:12:2f:cb:f1:05:9a:d6:2e:de:d9:13:41:6d:b1:35:7d:
44:c1:fb:8f:d9:bc:fe:5c:fb:4b:dd:d0:66:09:00:6a:5e:9a:
9a:a7:ab:00:ca:94:50:83:41:7f:e5:e8:59:8b:fa:31:82:68:
78:7e:c0:c1:65:2e:bb:33:e3:0b:c3:70:40:d6:57:72:54:28:
18:57:99:0f:69:3c:96:ef:26:6a:9c:df:af:1b:aa:42:2b:41:
db:df:4a:cf:f8:a6:03:f3:ae:d9:12:13:36:31:b8:82:77:05:
21:7d:45:28:16:d2:e3:66:07:27:0f:3c:e4:d4:08:f8:72:4a:
13:d4:a8:34:ad:17:49:a0:4f:ca:f8:31:35:4b:e8:8f:c3:89:
f9:ab:7b:e8:a8:ea:8c:b2:d6:9f:ba:45:7f:4a:46:d8:69:04:
a1:8e:99:3a:58:b8:79:8e:5e:57:bb:d4:e2:63:7c:b7:7e:92:
7c:54:00:36:63:1b:6b:f7:e9:e7:df:02:1c:bc:01:a6:db:b8:
0b:be:78:f9:dc:dc:63:95:ac:66:0f:d0:fe:1d:20:5b:b6:86:
7d:9d:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:54 2025 by rpki-client