Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: SmVJwxCczhCq8h+NMMFWVkS88SQONXqMST1kR3zDCJs=
Subject key identifier: 8F:BA:5E:87:1F:2F:29:49:7E:07:B7:4E:CF:CA:FF:6F:2D:27:EB:CD
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 01974A0CB6234CC1BC1C1DA784C89A005990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:36 +0000
Manifest this update: Sat 07 Jun 2025 11:00:36 +0000
Manifest next update: Sun 08 Jun 2025 11:00:36 +0000
Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: HExya139skGuA0w4Z7qKx9+Xp0XBfoEXNVLHf11SZnE=)
2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b6:23:4c:c1:bc:1c:1d:a7:84:c8:9a:00:59:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Jun 7 11:00:36 2025 GMT
Not After : Jun 8 11:00:36 2025 GMT
Subject: CN=8fba5e871f2f29497e07b74ecfcaff6f2d27ebcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:8c:02:f0:da:54:fb:90:9f:b2:00:e3:c6:
9e:7b:0a:de:fc:d1:41:f5:cb:98:a4:4d:a3:e2:9b:
8d:36:8d:ad:f8:fd:44:a3:a8:64:8c:40:5a:b9:e7:
b0:17:df:98:88:60:bd:d7:59:64:08:42:34:41:b3:
88:6c:48:db:85:7a:08:4f:f0:36:17:0a:03:77:d4:
c0:cd:eb:7c:77:05:3c:b9:a9:c8:7e:b1:59:13:aa:
7e:aa:bf:b2:4a:34:c9:69:2e:f2:25:cf:0f:d8:0a:
20:bd:f6:7e:b8:6e:60:7e:ec:cb:54:78:2c:ec:14:
59:7e:2b:b2:07:a1:8e:c8:f5:9e:d2:77:8d:0e:8b:
96:b7:70:59:cc:03:1d:17:6b:23:d1:39:6c:d7:9e:
a5:24:9d:32:e2:06:0f:1d:42:7b:ec:39:9d:b7:a4:
a7:b1:9b:93:4e:2c:5a:e8:61:68:25:19:12:ca:10:
b8:78:40:22:7b:53:bd:9d:9f:80:b8:4b:e5:ae:5b:
38:26:1e:24:87:e6:aa:1f:5a:da:93:10:de:04:5a:
7d:df:ad:16:d4:9b:50:36:84:e0:13:06:bf:90:91:
95:9a:f8:74:a4:e7:5a:4b:f2:01:c4:ac:3c:43:21:
8c:f5:9d:88:30:8f:17:81:da:cf:6c:89:8b:e5:4a:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:5E:87:1F:2F:29:49:7E:07:B7:4E:CF:CA:FF:6F:2D:27:EB:CD
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d6:98:32:cf:44:7e:53:63:f8:8d:62:7a:3f:43:c4:63:2a:
33:b6:45:1d:a7:74:50:c8:54:46:f7:25:97:47:e6:4f:80:8a:
4b:4e:45:2a:e9:6f:69:5c:25:88:83:76:36:91:3a:38:f7:49:
b2:0f:54:c9:62:ff:71:58:49:fb:48:f8:f6:10:ab:33:0b:9d:
9d:d7:4f:b1:3f:64:5b:ca:b2:26:82:1c:81:73:8d:2c:a8:a1:
5c:d2:6b:eb:bf:0b:b1:38:bd:9a:64:fa:db:cb:ad:6f:ce:e6:
1e:ca:8e:32:95:e1:8a:64:53:4f:b9:ca:95:ee:92:82:9f:b5:
e7:c0:ff:39:df:c7:36:ac:9e:a8:e3:8e:f8:d3:2b:1a:8b:61:
03:57:5a:e8:cd:59:fc:28:42:d9:36:43:59:c8:91:22:59:85:
4e:2a:75:03:ad:75:18:78:b2:a5:7b:dc:64:68:e1:49:b2:9b:
3e:66:83:f7:af:d8:7f:fb:e0:ef:21:80:52:12:ef:d7:c3:dc:
c1:ff:41:1f:f9:54:58:52:84:5e:d7:c4:38:30:d2:69:41:4d:
f6:ee:63:dc:7b:01:3f:ec:14:52:f6:1b:60:26:99:89:1b:8b:
9f:f8:bb:1a:b5:16:a9:93:22:9c:a3:49:48:c8:4b:ca:7f:21:
c3:7b:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:47 2025 by rpki-client