Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: Mb/OjfPZmiOaaBbMObcAGXi2oUV2IO1tMjJkR6JlBlE=
Subject key identifier: 70:73:D6:62:45:70:38:55:83:4A:E7:54:24:06:67:BB:5A:11:C9:22
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019769615B16DDF61BD12CCE97EF8310440A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 1293
Signing time: Fri 13 Jun 2025 13:01:17 +0000
Manifest this update: Fri 13 Jun 2025 13:01:17 +0000
Manifest next update: Sat 14 Jun 2025 13:01:17 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: ytpqvz4ouoFZC0RFsBs/NYSZQCxbXvCA68JY6AcrLuQ=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:5b:16:dd:f6:1b:d1:2c:ce:97:ef:83:10:44:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Jun 13 13:01:17 2025 GMT
Not After : Jun 14 13:01:17 2025 GMT
Subject: CN=7073d66245703855834ae754240667bb5a11c922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:09:f7:cb:62:91:8f:87:b1:a4:fb:74:c3:
08:a1:d2:78:a3:ad:1b:ca:e8:29:8c:ce:b4:37:7e:
aa:e5:75:c2:a1:c2:07:b7:5a:b3:01:51:07:d1:be:
d7:81:62:ce:e3:c6:df:b5:0d:77:39:db:f4:01:1f:
54:81:78:9c:f2:8e:65:89:06:ae:ac:76:28:5a:de:
a0:d8:04:72:af:1b:a7:e8:fa:49:5d:48:ef:99:c7:
45:56:ad:69:30:b2:7a:33:89:70:7a:f7:04:5c:38:
ea:a8:6a:7b:b2:52:32:13:e7:3f:fe:0d:ae:49:df:
03:57:9d:0b:4c:73:16:30:f1:d1:75:72:62:02:d2:
01:7f:f5:34:2a:32:a7:7d:29:cf:50:9b:99:5c:72:
89:33:8b:68:99:65:e9:30:80:6d:a5:3c:0f:d1:10:
14:2f:c1:45:b4:42:75:6c:ce:fb:87:4c:39:a9:e6:
68:e8:35:c1:4a:85:71:7e:60:ee:d4:01:e8:2e:9a:
83:77:79:9b:bb:d8:af:d1:78:cf:f3:91:51:d9:4c:
e2:46:fd:10:16:79:01:8a:61:a4:bf:1c:73:30:06:
90:23:90:42:0a:76:8e:1f:f9:61:65:e2:09:a0:03:
69:bd:5a:23:a4:95:4c:17:54:77:d9:f1:50:87:ee:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:D6:62:45:70:38:55:83:4A:E7:54:24:06:67:BB:5A:11:C9:22
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:22:37:0c:99:3b:24:12:ab:8e:17:04:f6:33:ef:26:83:6d:
04:bd:4b:15:75:2d:14:ec:b8:65:a7:14:15:50:d0:34:11:87:
3d:26:6f:a8:38:55:01:3c:2f:e1:3b:09:f4:af:58:2a:2e:e6:
f6:c1:27:b4:c4:8c:27:23:71:03:35:b3:6a:1f:ca:a6:54:8f:
21:49:59:3a:16:6a:3f:84:57:3f:8a:72:44:ec:fb:bf:ac:ee:
84:89:dd:be:dd:61:a1:0b:d0:db:f3:11:a2:9d:62:5d:28:cf:
7a:66:88:9e:3f:2c:6b:85:a0:69:71:9c:bf:9e:d0:dc:95:c0:
d2:40:c1:84:15:dd:f2:12:05:ae:fe:60:81:6e:de:cf:9d:39:
93:82:13:64:4c:27:57:10:00:8b:d5:26:3b:96:7e:90:e0:ba:
0f:14:b6:ef:fb:3d:22:a3:41:43:4d:da:10:27:28:25:b0:37:
e2:40:70:a0:73:85:5d:c7:0a:a6:f4:84:18:97:f0:89:a1:6b:
74:46:65:c7:04:5e:72:11:8e:66:35:36:b4:c5:23:44:98:28:
03:54:4a:14:2c:30:f6:7e:0a:93:29:0d:a3:46:c7:4e:0a:4d:
f1:f6:71:98:fc:8e:e4:30:34:67:0d:97:0b:2e:c6:98:cc:3d:
39:7b:5f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYVsW3fYb0SzOl++DEEQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj
NDZjZmQwHhcNMjUwNjEzMTMwMTE3WhcNMjUwNjE0MTMwMTE3WjAzMTEwLwYDVQQD
Eyg3MDczZDY2MjQ1NzAzODU1ODM0YWU3NTQyNDA2NjdiYjVhMTFjOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+oJ98tikY+HsaT7dMMIodJ4o60b
yugpjM60N36q5XXCocIHt1qzAVEH0b7XgWLO48bftQ13Odv0AR9UgXic8o5liQau
rHYoWt6g2ARyrxun6PpJXUjvmcdFVq1pMLJ6M4lwevcEXDjqqGp7slIyE+c//g2u
Sd8DV50LTHMWMPHRdXJiAtIBf/U0KjKnfSnPUJuZXHKJM4tomWXpMIBtpTwP0RAU
L8FFtEJ1bM77h0w5qeZo6DXBSoVxfmDu1AHoLpqDd3mbu9iv0XjP85FR2UziRv0Q
FnkBimGkvxxzMAaQI5BCCnaOH/lhZeIJoANpvVojpJVMF1R32fFQh+4QwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBz1mJFcDhVg0rnVCQGZ7taEckiMB8GA1UdIwQY
MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt
YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0
LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSI3DJk7
JBKrjhcE9jPvJoNtBL1LFXUtFOy4ZacUFVDQNBGHPSZvqDhVATwv4TsJ9K9YKi7m
9sEntMSMJyNxAzWzah/KplSPIUlZOhZqP4RXP4pyROz7v6zuhIndvt1hoQvQ2/MR
op1iXSjPemaInj8sa4WgaXGcv57Q3JXA0kDBhBXd8hIFrv5ggW7ez505k4ITZEwn
VxAAi9UmO5Z+kOC6DxS27/s9IqNBQ03aECcoJbA34kBwoHOFXccKpvSEGJfwiaFr
dEZlxwRechGOZjU2tMUjRJgoA1RKFCww9n4KkykNo0bHTgpN8fZxmPyO5DA0Zw2X
Cy7GmMw9OXtfGw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:08 2025 by rpki-client