Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: viC+NQpHmGewvFTF5W2K7gPnawJyBx9JRgvLzA7mffE=
Subject key identifier: CB:B6:F5:99:6F:F8:BB:10:38:5C:4F:46:C1:E2:9D:AB:67:16:2C:45
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 01967FB3D7C2775EF0383EDE047DABE91AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 121A
Signing time: Tue 29 Apr 2025 04:00:14 +0000
Manifest this update: Tue 29 Apr 2025 04:00:14 +0000
Manifest next update: Wed 30 Apr 2025 04:00:14 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: 0oC5Cbts4rIDmbH3hbuPqKTRBiYUH8Q63RqoU0jX8ag=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:d7:c2:77:5e:f0:38:3e:de:04:7d:ab:e9:1a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Apr 29 04:00:14 2025 GMT
Not After : Apr 30 04:00:14 2025 GMT
Subject: CN=cbb6f5996ff8bb10385c4f46c1e29dab67162c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:07:4b:41:b2:14:94:18:48:e8:e5:1d:ee:
5d:d9:81:bf:eb:16:70:e7:b9:1b:4f:03:54:dc:3c:
52:4e:61:fd:35:c4:48:e6:00:d8:72:22:81:84:f8:
47:29:e3:3a:86:6d:e8:9e:b3:8b:74:1e:ad:9f:66:
df:68:55:76:b0:ad:f6:ea:84:6b:b7:08:ba:ce:dd:
bd:be:90:65:23:c7:f8:6d:e1:49:b9:72:88:83:bc:
aa:dc:87:aa:ec:a6:18:cb:90:17:dd:16:56:85:7d:
69:14:2d:51:53:f8:48:1b:d1:0f:da:2a:fd:c4:c9:
fb:f7:cd:49:31:65:61:23:a8:c8:79:e7:46:95:71:
84:ae:0b:e2:d9:5e:78:76:76:ed:9f:48:d4:dd:e7:
d7:3d:7c:99:30:e1:25:f0:64:88:74:41:72:2d:4e:
6b:69:8b:a7:07:9c:46:d7:ca:f3:7e:f7:a5:5f:14:
28:26:df:0d:a9:d2:32:46:fd:f9:21:0b:02:59:e6:
e3:87:c2:3d:ab:b8:94:3e:a8:18:05:51:ff:e3:4c:
8b:38:f3:6a:3e:c0:a1:c2:6f:d7:44:55:4c:79:04:
66:f2:75:5c:fa:25:2d:62:08:83:78:5e:ea:22:b8:
c4:8f:4d:ce:a7:49:66:22:48:4f:f6:71:a5:c5:f3:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B6:F5:99:6F:F8:BB:10:38:5C:4F:46:C1:E2:9D:AB:67:16:2C:45
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ac:0b:7d:72:85:90:ed:a0:ad:e4:d5:b1:eb:14:e7:ee:de:
5f:54:bf:b0:5e:19:f4:38:1b:d2:a8:bd:73:af:b3:54:be:76:
bc:3b:09:0e:b7:83:e2:74:42:0a:c1:39:76:8c:8a:21:66:a0:
c4:25:a7:4e:36:7f:a9:8f:37:b7:34:2d:7f:6e:74:6e:53:03:
8b:3e:77:31:95:88:aa:70:d9:ad:26:d7:59:c5:f7:6c:8f:eb:
da:50:7d:4a:fe:32:74:b4:e4:44:bd:6f:e9:ca:2d:37:e2:28:
c7:67:02:e4:3e:a2:48:d7:38:9f:ab:b7:cb:91:1d:7e:13:59:
6a:c1:e2:76:92:95:0c:bd:3e:5c:7b:b3:95:4c:62:fc:4e:28:
ec:1a:40:ed:3a:2b:45:6c:9d:cf:77:88:ca:04:4a:3e:62:46:
31:96:53:61:8d:f2:8d:ba:8c:b2:d3:1c:11:72:7d:fb:49:db:
f5:6d:64:80:56:ba:9a:70:22:63:60:e3:3a:a7:a2:fb:10:76:
d6:c1:e6:c6:5b:e1:0c:a4:b9:40:2c:92:f8:a6:1b:8d:4b:43:
5f:3a:3c:73:a0:97:85:16:7b:b3:20:dc:dd:e6:2a:bf:7d:33:
96:0b:6e:4d:83:24:64:d6:b5:c9:0a:11:c5:dc:09:fd:90:c8:
13:0e:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:42 2025 by rpki-client