Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: WrO6P56IGSbcOIpxmXLlV8LWkmoC8wpKNB9TiXgmDmw=
Subject key identifier: E8:62:9B:15:96:76:B6:83:24:DC:40:9D:EE:B6:A1:CF:2F:0C:95:44
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 01974AE84D73DC7136B3CDA84CABE987980A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 15:00:27 +0000
Manifest this update: Sat 07 Jun 2025 15:00:27 +0000
Manifest next update: Sun 08 Jun 2025 15:00:27 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: vlheK3RkoCFloujpo+0OvmJoVH5KKUqVHkeNGuR6NrA=)
2: Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa (hash: AeoYOs9mV63Xly1m52PMpieci7ekofQ+wo4YmlONy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:4d:73:dc:71:36:b3:cd:a8:4c:ab:e9:87:98:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Jun 7 15:00:27 2025 GMT
Not After : Jun 8 15:00:27 2025 GMT
Subject: CN=e8629b159676b68324dc409deeb6a1cf2f0c9544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:c1:d0:2f:aa:75:a6:a9:1d:ae:c3:cc:57:
30:a7:e8:3c:12:94:8a:d1:cd:6c:0b:01:e9:9e:a6:
c2:3e:66:e1:f5:e6:64:b4:0a:1d:82:51:b8:03:03:
66:13:cc:b6:cd:28:c0:d6:d1:e0:b1:ef:48:f4:1d:
08:81:43:60:ca:3e:3f:57:85:a6:4b:e4:b6:2c:24:
c5:b4:44:3e:7d:c2:b2:85:48:47:5f:40:a4:59:4f:
e0:ab:91:08:a1:80:e5:88:3c:0a:32:49:f1:cc:40:
18:90:40:10:14:a2:00:8c:81:d3:9c:97:a5:36:3c:
92:aa:02:14:8b:2a:6d:7a:1d:41:82:8e:bb:4d:ef:
a3:e3:ac:0e:11:b1:ad:93:f3:d0:bb:81:5d:f9:e1:
2d:8e:70:51:d6:2e:76:5a:0f:a5:2f:9a:50:7d:78:
02:a5:5f:82:a2:7e:7f:db:1e:b0:86:29:6a:d4:24:
07:5f:4c:3f:0c:06:cc:c3:42:07:3b:63:89:1a:cb:
2f:78:ba:28:83:6d:a0:61:5d:96:03:14:ec:d8:ee:
71:a8:a7:25:d5:a3:50:ae:a1:eb:7f:a3:9d:66:8a:
62:fc:95:c3:8d:0b:58:fe:d3:95:df:9a:9c:e9:15:
02:ad:63:b8:ad:68:1e:a7:c4:0f:d2:0e:a0:d9:8d:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:9B:15:96:76:B6:83:24:DC:40:9D:EE:B6:A1:CF:2F:0C:95:44
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:32:ff:83:88:7c:8b:4f:1f:eb:2f:14:b2:7e:11:81:ca:2d:
a3:6d:34:52:a5:8c:d7:c9:29:fd:bf:fe:25:ad:da:72:d3:f5:
3b:e8:41:76:fa:20:6a:4a:05:bf:a1:17:b3:41:05:a8:71:2e:
e7:e2:4f:51:df:3e:a7:44:b4:b1:de:a6:60:96:1d:b2:fa:19:
b4:ac:fc:8e:76:ca:cc:fe:37:f9:4a:0c:c1:8c:bf:c2:3c:ab:
b9:69:3d:98:b7:69:d8:81:23:57:be:bc:05:7a:92:ad:aa:d4:
d7:a3:c2:f0:f8:64:21:de:84:7f:de:d1:9d:92:b0:63:d0:bd:
58:55:f9:c7:cf:dd:30:57:e8:ef:63:b7:13:2e:2b:56:32:c1:
64:e4:1e:da:b4:1f:c3:36:2d:e8:af:97:60:64:04:1a:32:04:
de:d3:ee:f8:fc:c0:9e:e4:05:df:e3:87:82:0d:7d:f2:2b:1b:
38:f3:ef:84:ca:1c:19:96:44:14:fe:cc:94:4a:ce:9c:f0:bf:
30:6b:09:bb:4d:7e:f1:a5:49:09:c5:3b:e5:24:4a:e2:49:8e:
aa:02:23:7b:7d:4d:fa:e6:ab:db:77:f4:02:b6:9c:5f:22:3e:
7e:3a:f7:95:e8:c1:73:34:ad:31:f5:aa:da:6f:99:04:e3:85:
57:30:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:09 2025 by rpki-client