Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File: AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier: JYWybTJgUuFP7nlYjkxQjPtUilIWCuMf/SqBIXHLmjc=
Subject key identifier: 8C:AC:DC:27:48:4C:49:D7:85:8C:2C:EB:0D:A1:4A:75:5A:05:8B:E4
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer: /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial: 01985231480AB75ED3F29D0E19CDA008D7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number: 0573
Signing time: Mon 28 Jul 2025 18:00:18 +0000
Manifest this update: Mon 28 Jul 2025 18:00:18 +0000
Manifest next update: Tue 29 Jul 2025 18:00:18 +0000
Files and hashes: 1: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: l5uylkQJ6cFZdqL8mj3k/2N86Ul2VAd7frX6HZoox8s=)
2: e0RKB6c0KB07YznYp0xB1MsPmzk.roa (hash: qPmTA1Xz3mqQ1fzxdYI8NmB7dWpfMeJeVGXYLIJQJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:48:0a:b7:5e:d3:f2:9d:0e:19:cd:a0:08:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Validity
Not Before: Jul 28 18:00:18 2025 GMT
Not After : Jul 29 18:00:18 2025 GMT
Subject: CN=8cacdc27484c49d7858c2ceb0da14a755a058be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:51:dc:e2:b6:6f:bc:39:e0:17:4e:46:3f:
17:bd:28:08:83:74:1d:af:ce:42:c3:6a:09:87:3a:
13:b6:64:69:75:31:a7:95:8b:c3:f1:31:22:39:59:
4a:53:a7:85:1d:6e:fa:fc:97:4b:34:ff:c8:f0:9b:
35:83:fa:c9:d4:25:39:d8:d2:4c:a4:10:ed:7f:dd:
b6:1b:5c:c8:95:24:36:a1:93:20:a3:2b:70:b7:41:
9e:d9:5f:63:45:60:41:c3:b3:ec:36:44:fe:04:e3:
e5:f2:74:47:54:1b:a8:67:6b:ef:ce:80:e8:44:4e:
d4:3f:56:be:18:89:00:f6:fa:37:9e:55:24:da:ab:
ef:56:95:33:b9:85:46:65:20:10:96:18:7d:85:10:
62:86:88:d7:fe:6b:34:70:e8:12:0c:43:1d:1a:9e:
37:8e:48:1d:55:cc:b7:e8:32:59:59:e2:b8:f1:26:
6e:74:2a:db:c7:f8:d9:f0:7e:41:78:eb:05:87:01:
7a:d0:39:1e:67:9b:b5:37:6b:9c:b9:e3:3e:3b:ff:
88:ce:1f:ba:a9:79:d0:f1:c5:a1:99:7a:d6:94:b0:
38:87:a5:36:15:74:c4:a2:9d:f9:95:c5:77:bf:a8:
5f:1c:68:08:ef:6f:2f:5c:20:f8:0f:41:d4:b8:ef:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:DC:27:48:4C:49:D7:85:8C:2C:EB:0D:A1:4A:75:5A:05:8B:E4
X509v3 Authority Key Identifier:
keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:aa:3a:7b:15:10:2a:30:37:c2:76:b5:78:46:5e:5a:ec:27:
92:55:02:0e:be:f1:33:8a:23:cc:de:b6:dd:d7:29:6c:af:62:
bb:62:64:54:d7:f9:9d:76:f1:b4:99:c8:ab:4a:25:71:5d:33:
ce:db:26:cd:be:88:0b:c0:ec:87:64:b9:e7:2d:db:6b:c9:73:
ea:bb:cc:3e:12:50:cb:77:67:17:ee:86:19:50:69:7d:bc:f1:
5e:90:cf:8a:8c:7c:a2:03:bf:28:84:a1:8b:7f:36:f4:d6:0e:
c3:42:5b:d5:df:f8:3c:e4:fa:04:f6:8a:d6:46:8e:1e:01:9d:
1d:05:54:48:b8:c4:d8:01:d5:7d:f4:65:a8:e3:b9:42:0f:6c:
1b:fa:53:52:2e:d0:8a:be:d8:f3:63:a6:81:6a:d4:39:8f:7b:
74:b9:7d:5d:ce:71:2c:68:67:86:ec:24:99:3d:96:08:e6:3e:
83:59:d9:42:86:ae:1d:c9:56:60:47:46:a6:0f:f8:e5:fb:cd:
d6:7b:de:57:e4:aa:84:1c:0a:b8:7d:17:18:ef:e8:98:d3:05:
ad:90:bd:40:2b:c7:91:54:09:2f:50:ad:4b:f7:38:59:d8:72:
5e:9a:92:33:df:a4:e1:27:21:3f:51:18:1f:af:b6:46:28:44:
58:aa:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:38 2025 by rpki-client