Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: OgffBC47GjLq9iIbpHlcCacJJlEA7lu2CGtESBh59yo=
Subject key identifier: C5:04:71:85:B8:EE:CE:3D:74:9B:D6:19:6B:12:D5:31:99:0C:AB:14
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 019836BA55649D0E8902685E4755CD8C2155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 15F6
Signing time: Wed 23 Jul 2025 10:00:37 +0000
Manifest this update: Wed 23 Jul 2025 10:00:37 +0000
Manifest next update: Thu 24 Jul 2025 10:00:37 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: SeQQazeXIGZ4zUUCqoJ3zfCpf5B1YFNzCI/47czMNGU=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:ba:55:64:9d:0e:89:02:68:5e:47:55:cd:8c:21:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Jul 23 10:00:37 2025 GMT
Not After : Jul 24 10:00:37 2025 GMT
Subject: CN=c5047185b8eece3d749bd6196b12d531990cab14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:93:26:93:50:c0:80:16:9e:92:15:59:fd:
d1:60:dd:d9:d0:7c:3d:67:8e:b4:01:bf:96:c8:d1:
73:e6:f2:b1:b2:36:7d:43:7e:f4:99:b9:a0:d4:39:
f2:8d:fb:a6:c5:0e:8a:e5:ad:40:a8:11:d9:8b:3d:
ce:f2:a6:53:51:b9:a7:52:6c:93:29:2c:55:ac:85:
dc:32:7b:ba:ba:0c:0e:c9:8c:a1:df:08:3e:5a:c8:
bc:06:66:5e:29:0a:40:66:77:b4:0f:4c:88:21:df:
3f:36:a1:74:78:11:8d:62:21:39:a7:96:1c:c1:5b:
e9:1d:1f:75:36:65:95:da:5e:22:86:f3:00:e3:f8:
3c:36:84:fe:72:bd:78:6e:1f:d7:d0:1b:20:d9:97:
31:97:dd:8c:df:c4:30:fd:65:94:a8:9b:42:2d:84:
44:01:b7:8f:26:3a:ce:74:29:46:38:16:e9:f5:fe:
ab:e0:a1:d8:bb:f1:c5:0b:20:69:34:35:56:13:7b:
cb:ef:0c:ca:74:90:92:5f:2e:5d:e8:05:47:4c:e9:
26:d8:dd:f5:a5:c4:7c:43:ae:b3:92:e1:92:f0:00:
00:79:d4:c7:af:7f:4f:4b:1b:13:2b:86:52:fb:be:
ac:c7:ee:b8:71:44:9d:c1:03:28:87:51:db:f2:d4:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:71:85:B8:EE:CE:3D:74:9B:D6:19:6B:12:D5:31:99:0C:AB:14
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:6c:51:8b:75:63:91:df:69:34:ba:40:d3:b1:c5:c6:08:
11:50:6e:e5:81:7b:8e:7f:b5:fa:bf:16:b7:ec:92:2f:97:0e:
03:68:eb:0e:0e:d9:e6:3a:c0:a3:f5:df:01:33:fb:51:bf:e4:
4f:16:9c:94:de:56:1c:88:04:95:89:62:1e:24:b5:46:11:39:
4f:18:7d:fc:43:87:dd:ab:9c:f9:fc:8c:53:ac:8d:c3:35:24:
aa:98:7e:71:c7:79:28:f8:d2:ab:df:6a:4e:28:a2:d9:0d:41:
65:3a:c8:3d:e2:df:32:25:cd:bb:5c:80:00:dd:27:c3:e4:e2:
4c:6d:63:06:70:f2:f4:1e:a1:f8:22:d6:d5:5f:9f:2c:28:8b:
73:10:c6:7e:06:62:eb:57:50:3f:2e:3b:8a:8c:21:c6:05:f3:
d7:ff:dc:cb:7c:08:5e:b3:c6:0a:1a:92:67:21:a5:10:f7:ee:
74:c0:5f:c9:2a:4d:6f:85:92:b6:79:30:36:34:11:98:4f:fb:
38:6c:c8:8a:5b:95:f2:b7:0c:fe:92:e5:d5:51:30:0b:ab:1c:
ba:01:a6:1e:87:bd:ea:04:df:a6:90:c0:9f:9b:19:8f:31:34:
e7:c0:44:a7:d4:87:f4:fc:24:01:50:b6:ef:32:91:20:62:53:
88:f7:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:12:06 2025 by rpki-client