Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: oAKemEFaul1CWyLV2VNiW6O86zpQ78mY8U13mnMAK/M=
Subject key identifier: E9:DB:C1:1B:AF:86:AE:78:EF:CF:C5:B2:F1:74:7C:6F:CA:FA:2A:D0
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 01984776A965E14DCCDB6C351F2BE4F6169F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 16:00:15 +0000
Manifest this update: Sat 26 Jul 2025 16:00:15 +0000
Manifest next update: Sun 27 Jul 2025 16:00:15 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: oKTa6j2zlj/+3iPcVrIGAcGlCBvw8lUs466Si/HYVqw=)
2: ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa (hash: A+6pCmvRh21bff+k990m7MW26aQWM6C7J37zdRTRafw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:a9:65:e1:4d:cc:db:6c:35:1f:2b:e4:f6:16:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Jul 26 16:00:15 2025 GMT
Not After : Jul 27 16:00:15 2025 GMT
Subject: CN=e9dbc11baf86ae78efcfc5b2f1747c6fcafa2ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:0f:b5:98:ec:1c:01:6a:13:61:09:f7:0d:
95:f6:e1:01:f9:f6:6a:25:d5:3a:70:dd:14:3f:65:
3e:5f:f7:ca:95:f3:d3:f5:41:6b:da:5f:c4:b5:42:
4c:e9:5f:6c:83:fb:e0:74:a1:71:48:7a:7f:ad:76:
d4:3a:d4:8a:11:a3:cc:e7:7c:55:a1:7a:e2:56:07:
3d:f9:96:76:d3:76:4e:69:94:26:f9:45:bf:f0:a7:
dc:a7:4e:9f:92:7b:80:32:74:5a:6a:a6:9f:a0:08:
5d:b7:68:26:fd:9b:59:7b:41:7a:97:3a:90:2c:0f:
de:bb:e9:d7:45:90:05:c0:e5:24:5e:bd:7f:61:20:
00:e6:27:83:48:4b:78:46:7f:43:83:40:56:0c:ee:
35:3a:6a:fb:1c:c2:92:f6:cb:ea:80:e2:ab:ae:8f:
b7:5f:fb:d1:cd:cf:74:03:43:ad:ee:5a:1a:e9:37:
d2:87:e3:51:74:79:0d:82:fa:8a:31:f0:7d:51:3d:
ef:a7:2c:be:a3:33:b4:60:2a:f0:26:78:15:cf:f9:
3e:86:ba:ad:94:5a:80:4f:94:d7:50:3b:86:69:56:
29:5b:64:67:b2:6e:96:09:14:85:eb:3d:06:46:35:
76:16:47:8a:b7:22:6c:07:9e:91:9f:2c:b1:7e:b8:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DB:C1:1B:AF:86:AE:78:EF:CF:C5:B2:F1:74:7C:6F:CA:FA:2A:D0
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:21:0a:ec:13:c4:00:99:d3:f9:aa:6a:22:25:9a:d3:2a:31:
9d:e7:a3:8e:b1:23:85:f0:39:ee:93:3e:05:db:ab:0e:28:86:
74:e0:0e:8d:82:99:9f:e0:2d:ae:93:a5:52:12:6f:04:79:aa:
33:d9:a8:e9:8c:be:37:ba:81:f2:9c:f6:34:b0:81:cc:d9:27:
16:16:18:41:ac:36:53:19:fd:4b:7b:5d:33:bd:99:e7:9f:b0:
ae:15:12:6b:3a:07:5f:98:a1:b7:ac:e4:fc:43:b8:79:08:52:
ae:d9:da:d1:fa:3c:fe:90:e0:57:f7:9b:99:97:11:c7:bd:52:
4a:2a:e3:09:45:7c:77:5e:1c:20:35:32:23:55:e6:07:35:27:
de:5e:8a:b6:b5:35:c1:84:38:3c:c1:6f:e6:7d:37:a1:0f:71:
6c:d8:b9:ba:14:30:06:16:3c:2e:e8:23:82:7c:b1:fb:97:66:
00:83:b1:bc:a0:08:0d:c0:a8:3d:9b:a9:8a:77:78:02:5b:91:
5e:a8:b7:da:25:c7:82:91:f6:81:ab:bc:c9:ae:50:90:46:d0:
4a:bf:bc:8f:d9:23:ab:58:43:60:b6:67:68:4c:32:3a:a0:39:
89:0d:be:f8:54:10:51:ae:a2:3c:19:f0:fd:aa:92:0c:9d:f2:
c8:60:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:38:14 2025 by rpki-client