Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: 9OU0q74hoCSabxPxN4M7Wty1vkLK6GMK0xwiZaXdbg4=
Subject key identifier: C0:BB:26:1B:63:17:73:26:95:DC:AE:75:C0:4B:31:CE:27:65:C5:79
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019849653BE823CEA27CD24283CEDA3998A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 1307
Signing time: Sun 27 Jul 2025 01:00:27 +0000
Manifest this update: Sun 27 Jul 2025 01:00:27 +0000
Manifest next update: Mon 28 Jul 2025 01:00:27 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: xQsIVYTkqLIFvDere5ZvOJ1m/0hp0GUlyNW0sxFvoiI=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:3b:e8:23:ce:a2:7c:d2:42:83:ce:da:39:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Jul 27 01:00:27 2025 GMT
Not After : Jul 28 01:00:27 2025 GMT
Subject: CN=c0bb261b6317732695dcae75c04b31ce2765c579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:3d:7e:d8:87:0a:78:42:d6:cd:5f:1e:d5:
71:27:db:fc:f8:de:e2:37:ef:1b:43:d6:ee:51:de:
9f:21:b6:bc:63:17:2e:e5:99:00:69:e9:62:f8:0d:
de:34:e2:9e:6e:8b:33:d4:65:03:9e:18:63:5e:8a:
b4:de:86:4f:40:42:36:fe:c1:c0:ff:74:9f:6f:8a:
45:8a:ad:94:8a:a7:84:20:21:d8:5b:44:51:70:14:
60:b2:fe:28:2c:93:5e:29:74:33:d2:93:98:55:28:
08:b8:bf:5c:da:9d:8d:4a:70:ee:e5:25:2f:4d:7c:
7c:62:cf:db:5e:6d:6f:16:71:c9:05:6a:05:d5:2d:
64:29:26:84:8c:f2:43:71:01:44:81:ae:26:e3:bb:
ac:02:0f:fe:f9:4a:54:5d:7d:73:1d:0d:6c:e9:7a:
28:90:db:c3:7e:bd:04:88:96:b4:7f:9a:b8:11:6d:
5f:6f:24:c4:d2:e9:b9:39:b8:65:3e:5a:77:20:55:
43:eb:f1:02:73:a7:b6:2b:5e:7a:64:56:fe:3a:1c:
4c:a9:71:64:22:ff:f4:c5:18:e7:c3:c1:9b:ca:20:
e6:44:2d:94:d4:13:fd:b4:18:20:71:55:66:9a:fb:
94:88:93:a9:7a:e8:d6:f1:e6:a8:33:c9:5a:31:03:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:26:1B:63:17:73:26:95:DC:AE:75:C0:4B:31:CE:27:65:C5:79
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:06:3f:1a:e4:a0:47:0a:13:5f:3b:83:02:1b:ae:05:7d:
b3:eb:0f:88:05:2f:a9:dc:15:cc:87:82:d1:d1:a0:b7:65:67:
f8:c4:2b:dd:11:48:e3:01:c0:84:06:a9:79:81:6a:90:4e:b6:
c4:75:ab:c1:02:0d:19:aa:15:52:48:5e:9c:fa:79:73:53:c5:
42:d9:16:a5:26:09:37:13:ff:12:8d:7c:31:f8:42:9a:38:b1:
5e:19:b8:ff:be:78:38:e5:4c:3e:00:42:f8:e2:61:67:11:24:
bd:c8:1d:7a:95:d4:54:c6:57:6a:ca:f8:a8:f7:68:bb:34:5b:
28:9f:aa:35:a0:8a:ca:1f:a1:d0:98:de:9a:99:55:8e:af:30:
19:20:d7:0c:74:b6:45:21:3b:54:04:c4:5a:56:10:f9:dc:37:
36:50:3a:3a:34:c8:f9:fe:d4:96:46:63:c9:a6:07:8d:e8:65:
61:c3:78:a4:1e:e8:69:99:3d:eb:49:d2:7a:45:40:78:c1:d8:
99:74:b5:77:7b:67:a5:19:d0:b9:d4:ac:73:79:54:fd:8d:3e:
93:57:85:7c:3d:fc:b2:a1:a5:1f:69:06:e0:16:b3:46:5d:df:
f0:bc:ad:8a:1d:ed:fc:27:44:c7:d3:c3:cf:59:c4:a4:9b:52:
cf:da:6b:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZTvoI86ifNJCg87aOZioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj
NDZjZmQwHhcNMjUwNzI3MDEwMDI3WhcNMjUwNzI4MDEwMDI3WjAzMTEwLwYDVQQD
EyhjMGJiMjYxYjYzMTc3MzI2OTVkY2FlNzVjMDRiMzFjZTI3NjVjNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmI9ftiHCnhC1s1fHtVxJ9v8+N7i
N+8bQ9buUd6fIba8Yxcu5ZkAaeli+A3eNOKebosz1GUDnhhjXoq03oZPQEI2/sHA
/3Sfb4pFiq2UiqeEICHYW0RRcBRgsv4oLJNeKXQz0pOYVSgIuL9c2p2NSnDu5SUv
TXx8Ys/bXm1vFnHJBWoF1S1kKSaEjPJDcQFEga4m47usAg/++UpUXX1zHQ1s6Xoo
kNvDfr0EiJa0f5q4EW1fbyTE0um5ObhlPlp3IFVD6/ECc6e2K156ZFb+OhxMqXFk
Iv/0xRjnw8GbyiDmRC2U1BP9tBggcVVmmvuUiJOpeujW8eaoM8laMQM7OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC7JhtjF3MmldyudcBLMc4nZcV5MB8GA1UdIwQY
MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt
YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0
LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRUGPxrk
oEcKE187gwIbrgV9s+sPiAUvqdwVzIeC0dGgt2Vn+MQr3RFI4wHAhAapeYFqkE62
xHWrwQINGaoVUkhenPp5c1PFQtkWpSYJNxP/Eo18MfhCmjixXhm4/754OOVMPgBC
+OJhZxEkvcgdepXUVMZXasr4qPdouzRbKJ+qNaCKyh+h0JjemplVjq8wGSDXDHS2
RSE7VATEWlYQ+dw3NlA6OjTI+f7UlkZjyaYHjehlYcN4pB7oaZk960nSekVAeMHY
mXS1d3tnpRnQudSsc3lU/Y0+k1eFfD38sqGlH2kG4BazRl3f8Lytih3t/CdEx9PD
z1nEpJtSz9pr3g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:23 2025 by rpki-client