Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: dEiZi68APsp21JpETVwOUCecV6DWEEbWCk35KjZz0Nc=
Subject key identifier: 5E:0B:C5:18:22:5F:6E:55:6D:D3:BD:89:32:47:65:13:34:12:4A:A4
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 019A7225A295CC30C2CDBDD7A9BEE119920D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: F37XRwSmvES5w6YR8GBnKWBfVRlzZhIqROlOhUydmNg=)
2: Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa (hash: AeoYOs9mV63Xly1m52PMpieci7ekofQ+wo4YmlONy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a2:95:cc:30:c2:cd:bd:d7:a9:be:e1:19:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=5e0bc518225f6e556dd3bd893247651334124aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:76:82:3c:50:7e:cc:24:c6:5f:8c:5e:33:
e7:cb:09:ad:0b:c2:98:6a:21:32:38:40:89:97:cd:
09:41:49:74:03:cb:41:ab:28:a3:ca:0a:f9:d2:d0:
c7:47:11:13:0a:c4:a2:19:4f:f9:b5:57:b1:6f:59:
0d:ea:d6:c3:67:23:7b:c6:1f:14:35:93:92:54:5a:
a1:4a:76:54:67:39:0d:17:35:29:c5:94:78:4c:df:
4e:4f:12:d2:a3:ae:e9:dc:d1:56:af:54:f5:c2:08:
fc:54:63:7a:d1:59:b0:4b:51:59:36:7f:5e:2e:d4:
83:be:e1:f1:fd:01:f5:46:f2:9b:ee:17:3a:c1:08:
bd:52:c3:2e:5d:d3:17:25:e6:a6:c8:4d:c8:ef:a3:
88:11:58:e0:dc:4a:a5:0b:c0:ff:af:33:88:35:70:
99:22:51:4f:2d:96:5a:84:5a:29:1a:72:e0:a2:ae:
5c:20:90:45:e1:14:43:03:19:45:f9:e8:29:62:96:
b6:12:d3:58:25:d8:9a:24:f0:d7:1d:47:ae:ca:70:
e8:17:60:97:0f:43:35:32:f6:60:67:50:9d:ff:11:
ed:16:d8:6e:f5:1a:a4:1e:98:be:fa:2d:a9:11:5d:
66:33:8b:5e:f4:84:65:d5:02:ae:bb:a5:cc:4f:bb:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:C5:18:22:5F:6E:55:6D:D3:BD:89:32:47:65:13:34:12:4A:A4
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3b:45:3b:ac:32:d0:0f:9c:39:f5:2c:b7:6d:52:31:d8:c6:
ab:d2:ec:43:09:9f:0e:9e:66:28:b5:f8:54:f2:ad:87:4b:f1:
77:90:b5:a2:fd:8b:15:70:0c:8c:4c:76:60:4a:69:5e:c1:5b:
14:f1:c3:1e:e5:4e:ce:5b:c3:31:11:7f:9a:5f:73:74:57:a6:
04:0a:99:a0:1f:72:c2:b1:22:b9:ec:f4:86:fe:a4:f0:05:93:
c8:eb:32:30:7a:cc:84:df:ca:0c:cc:6e:02:68:0d:10:b7:ee:
c3:2d:77:e3:f5:e9:2e:e3:7b:1a:23:72:52:79:81:e1:c8:98:
16:06:72:b5:7d:14:92:24:b4:7b:f9:f7:e5:0e:fe:26:44:32:
fb:9e:8d:d2:23:fb:5e:ca:85:45:2b:b8:04:19:2b:15:6a:11:
96:1c:9b:54:b0:c4:df:f2:69:0b:a5:01:cc:48:ad:6f:71:9d:
b7:52:03:10:12:71:98:17:82:7f:23:ce:b9:8c:fe:40:af:22:
d8:96:78:e8:00:74:86:21:fd:60:14:be:48:f6:01:76:dc:00:
69:69:aa:60:8b:fc:6e:57:fd:14:ac:e4:c1:76:32:bc:fe:18:
b7:c1:4e:6e:c1:6f:56:21:b0:13:c1:91:7a:32:ca:c8:c0:fb:
08:fd:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:48 2025 by rpki-client