Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: /K+kUzfAEYW/yKsqNwtA8brUz7r3p5eli8HvEgb2ZQY=
Subject key identifier: 91:43:89:AE:5A:F5:BA:C8:D4:92:C9:33:54:EB:1A:50:47:09:02:C1
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019848F77CE1BA446A5E061F385BD9D717D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:35 +0000
Manifest this update: Sat 26 Jul 2025 23:00:35 +0000
Manifest next update: Sun 27 Jul 2025 23:00:35 +0000
Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: un9fNU/veBOCd4igsXv2GI2nSatdWP12o9pG9vaDwkI=)
2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:7c:e1:ba:44:6a:5e:06:1f:38:5b:d9:d7:17:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Jul 26 23:00:35 2025 GMT
Not After : Jul 27 23:00:35 2025 GMT
Subject: CN=914389ae5af5bac8d492c93354eb1a50470902c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:26:e7:10:9d:b4:4d:ed:87:62:d6:e4:9e:
ef:57:91:95:3f:c7:e6:5b:33:6b:fa:08:4e:29:db:
73:b6:2b:93:d9:44:c1:79:a0:7a:9b:53:cd:5b:38:
80:fa:13:00:ac:33:e1:b1:0c:b1:8b:79:61:e5:b3:
41:1a:0c:e9:d0:b9:f1:23:3e:b5:4d:b3:8a:61:99:
a7:6d:09:20:7d:df:4c:54:0a:45:82:f0:f2:cc:7a:
e4:bd:46:e9:34:17:cb:b5:f8:ae:fa:f0:80:46:86:
00:68:17:c5:94:6c:0d:c2:53:2a:e2:05:15:dc:4b:
53:b7:ce:eb:c7:16:a2:35:25:ee:5a:d4:d1:59:da:
84:c1:ea:f7:d3:c3:e3:cc:e0:8c:b4:d5:e8:1c:43:
b9:cc:87:77:0d:52:d1:40:46:4f:05:c5:4b:f4:d4:
5b:00:88:83:55:76:0a:91:b9:a5:75:bd:97:2c:82:
6c:78:46:70:9f:6c:cc:a9:70:29:80:f4:3c:79:63:
13:55:ea:11:09:5e:6e:d4:58:6e:b0:9f:01:23:d9:
6d:53:0e:6e:4e:f4:44:8a:ae:2a:94:7e:e9:87:83:
01:53:bc:f6:ef:26:3f:9d:2c:cf:56:9c:30:d0:80:
09:b7:cc:ab:db:4f:b4:8f:f7:bf:fe:9d:6c:66:06:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:43:89:AE:5A:F5:BA:C8:D4:92:C9:33:54:EB:1A:50:47:09:02:C1
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:87:56:22:2d:d7:cd:5e:6d:cc:f6:29:73:f5:2f:f8:7d:5b:
cf:1a:c3:34:48:bf:9d:bf:30:f9:b5:56:a1:10:7d:a0:b7:4c:
49:07:f9:df:59:dd:80:a7:38:ed:70:dd:8d:d9:89:a7:2f:60:
c1:fb:e5:c3:b8:1d:01:03:df:e7:21:11:f3:28:c9:79:78:47:
29:36:5f:9a:1d:35:6b:61:6a:85:83:ed:b9:27:69:f1:48:12:
08:49:98:8d:cc:63:ec:7d:ca:e4:f9:6b:b5:90:59:db:75:7b:
8e:23:9c:92:00:28:8f:aa:42:cd:34:d7:b1:d2:06:d6:1a:2e:
3b:27:af:2e:92:7b:27:02:8f:08:b5:04:0d:3e:b9:12:1f:9f:
63:9e:f3:84:79:a8:40:aa:b0:0d:cd:12:3a:cf:35:8c:d4:dc:
c8:03:2c:0c:06:e7:01:2b:7c:1d:7b:0a:de:be:db:1d:f2:27:
4d:57:b9:e5:dd:64:e8:be:be:de:6b:90:ad:10:3c:c6:04:32:
73:d0:5b:49:84:7c:94:be:ff:a2:a6:2e:29:a9:6d:a8:81:a3:
6a:81:0b:f1:61:ca:3a:6d:47:46:f7:8c:4e:b6:d0:bb:00:b6:
14:20:13:c0:b1:49:00:c3:06:d1:9f:37:e7:2d:50:9a:cd:ec:
9d:39:31:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI93zhukRqXgYfOFvZ1xfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjQwYmNjYjcxNzFmMTk5YzQzYTBhOTc0Y2FiODI3ZWQx
OGU3NTAwHhcNMjUwNzI2MjMwMDM1WhcNMjUwNzI3MjMwMDM1WjAzMTEwLwYDVQQD
Eyg5MTQzODlhZTVhZjViYWM4ZDQ5MmM5MzM1NGViMWE1MDQ3MDkwMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Im5xCdtE3th2LW5J7vV5GVP8fm
WzNr+ghOKdtztiuT2UTBeaB6m1PNWziA+hMArDPhsQyxi3lh5bNBGgzp0LnxIz61
TbOKYZmnbQkgfd9MVApFgvDyzHrkvUbpNBfLtfiu+vCARoYAaBfFlGwNwlMq4gUV
3EtTt87rxxaiNSXuWtTRWdqEwer308PjzOCMtNXoHEO5zId3DVLRQEZPBcVL9NRb
AIiDVXYKkbmldb2XLIJseEZwn2zMqXApgPQ8eWMTVeoRCV5u1FhusJ8BI9ltUw5u
TvREiq4qlH7ph4MBU7z27yY/nSzPVpww0IAJt8yr20+0j/e//p1sZgaNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFDia5a9brI1JLJM1TrGlBHCQLBMB8GA1UdIwQY
MBaAFAJkC8y3Fx8ZnEOgqXTKuCftGOdQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYt
YzdiZjk1ZTVhYjdiLzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYtYzdiZjk1ZTVhYjdi
LzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbodWIi3X
zV5tzPYpc/Uv+H1bzxrDNEi/nb8w+bVWoRB9oLdMSQf531ndgKc47XDdjdmJpy9g
wfvlw7gdAQPf5yER8yjJeXhHKTZfmh01a2FqhYPtuSdp8UgSCEmYjcxj7H3K5Plr
tZBZ23V7jiOckgAoj6pCzTTXsdIG1houOyevLpJ7JwKPCLUEDT65Eh+fY57zhHmo
QKqwDc0SOs81jNTcyAMsDAbnASt8HXsK3r7bHfInTVe55d1k6L6+3muQrRA8xgQy
c9BbSYR8lL7/oqYuKaltqIGjaoEL8WHKOm1HRveMTrbQuwC2FCATwLFJAMMG0Z83
5y1Qms3snTkxhw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:42 2025 by rpki-client