Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: 9cbCKClftGnoSuxGO8uLTif27zV+UGFB1DjQS5ykXJ4=
Subject key identifier: 67:4B:73:88:E8:3A:A3:32:58:42:3F:F2:47:DB:93:84:25:36:55:4D
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 01984966DC608AA1F6851ED01B14DA75D50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 0279
Signing time: Sun 27 Jul 2025 01:02:14 +0000
Manifest this update: Sun 27 Jul 2025 01:02:14 +0000
Manifest next update: Mon 28 Jul 2025 01:02:14 +0000
Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: A4Wk3xQmx4TrV1z2IyhdRAFgG2Y+a3WD9AxEXc7G2aI=)
2: PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (hash: pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=)
3: q6pqSEbcTlqmRayyanV7tPyo7fs.roa (hash: EC2KtAOMCahopm9kPSQwxVqEk8+Lm5s50v5gQFz0rN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:dc:60:8a:a1:f6:85:1e:d0:1b:14:da:75:d5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Jul 27 01:02:14 2025 GMT
Not After : Jul 28 01:02:14 2025 GMT
Subject: CN=674b7388e83aa33258423ff247db93842536554d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:c6:fb:f8:c7:a7:c2:d2:03:77:42:97:4b:
22:9d:cb:12:49:64:1f:b1:25:e2:f2:90:85:90:4b:
e4:18:10:f7:e4:07:21:20:82:e3:2b:45:bd:41:1d:
91:5f:31:fc:7f:59:c8:43:48:8d:3b:f3:37:71:2f:
7f:2a:5b:45:0b:7b:98:6e:d0:0f:06:74:3f:4f:7f:
e1:a3:bd:db:81:04:97:e0:3b:f4:dc:cc:51:bb:09:
06:53:5d:7f:81:28:e9:b0:d3:3e:7b:e5:a6:42:11:
a6:98:b0:ba:1d:a4:7e:02:b1:47:fb:2c:dd:d3:f2:
9c:41:f1:5f:86:fa:a2:04:e0:63:e3:f2:00:94:62:
e8:e8:2c:cb:d6:cb:c3:99:da:41:21:f2:cd:03:b9:
db:84:d4:bc:56:08:1e:a8:54:19:11:99:dd:a9:d7:
57:59:3f:c6:32:ca:29:43:04:de:93:0a:a9:34:55:
91:1d:eb:1f:49:45:36:8d:1a:a1:5d:2e:1c:92:82:
13:29:3f:d7:b2:5c:be:de:75:fc:71:10:f9:8f:34:
65:0b:57:a8:79:c2:7a:99:06:c9:5c:c1:c9:3f:99:
8a:f3:15:1c:e0:30:19:21:7b:fa:ff:ed:f3:9d:98:
b1:0c:2d:d1:fd:43:12:93:7f:df:e5:94:ac:fd:1e:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:73:88:E8:3A:A3:32:58:42:3F:F2:47:DB:93:84:25:36:55:4D
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:04:ef:29:71:ab:1a:bb:d2:f8:b9:a3:80:1d:8d:dd:5e:35:
f7:ab:62:13:9b:7a:c3:ea:70:78:5b:a2:8f:47:6b:7d:a7:cd:
bb:8a:68:f7:3b:76:c0:18:ce:53:45:b1:a3:c7:fe:eb:b0:98:
a2:fc:1b:e8:1f:e8:67:ec:a3:5b:82:8e:6d:2a:94:2a:af:00:
f4:51:75:30:6d:b4:ce:05:38:1b:db:a1:28:b9:c9:4b:7c:3d:
02:cd:3a:99:db:5f:6e:3e:18:68:3b:b0:ba:8b:4b:dd:54:a3:
98:5b:ea:43:53:37:8b:dc:9a:46:30:01:04:7a:b8:2f:6b:6c:
11:f9:cf:08:eb:ed:dd:50:43:94:85:4b:3c:ce:43:ad:f4:24:
a5:43:0e:c2:e9:38:5b:9d:ee:43:da:1b:03:9f:ee:fc:7c:bb:
ba:31:21:8f:b3:d2:f2:a9:02:2e:8e:a5:01:8c:76:74:20:9e:
1c:e2:eb:e0:32:b8:42:e9:a6:a4:48:49:79:ad:d6:3d:a5:36:
19:6d:64:04:9a:12:94:8c:24:56:39:fc:d8:1e:c2:44:a7:80:
49:8a:02:bf:e1:40:c2:fc:e9:91:9d:ce:fa:5a:05:9b:09:e4:
8a:87:09:e3:05:87:1b:65:84:45:7a:a1:cc:50:08:bf:03:24:
38:3b:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:14 2025 by rpki-client