Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: A2YcBMWhO3OXGF/NnGl8oTm9tOdz93uaS8bk3wtP/BU=
Subject key identifier: 4A:31:8A:CE:FC:94:88:5D:2A:BF:8F:74:0F:FC:A3:D7:EF:C8:B3:18
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 01993680F50DF690E9DF85C8DFFA081B2D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 02:00:44 +0000
Manifest this update: Thu 11 Sep 2025 02:00:44 +0000
Manifest next update: Fri 12 Sep 2025 02:00:44 +0000
Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: Gdk6wwKhaqEKXa8YBubSU3gcnVHet8SfhzkK9aXB+88=)
2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:f5:0d:f6:90:e9:df:85:c8:df:fa:08:1b:2d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Sep 11 02:00:44 2025 GMT
Not After : Sep 12 02:00:44 2025 GMT
Subject: CN=4a318acefc94885d2abf8f740ffca3d7efc8b318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6c:6c:bc:61:3b:21:83:bb:f0:96:33:4f:c0:
a6:a0:dd:5d:e9:9e:bc:bd:d3:35:50:05:02:ad:ac:
78:24:1c:15:b4:d3:27:85:f0:0c:04:e3:d5:8a:00:
c9:8b:46:89:e7:a7:1f:77:8d:e5:0d:b3:64:97:26:
22:0a:13:3f:a6:c5:9d:9d:c3:b4:78:60:94:93:54:
21:f6:cd:1b:b6:bd:e4:7f:93:64:02:69:5e:24:e5:
1d:a1:b5:98:b3:7b:8c:49:1c:25:4a:6f:6e:a7:f0:
34:39:35:5a:c7:2c:70:79:ea:8e:00:93:71:f8:4c:
a4:8b:b9:c0:04:70:a0:9d:35:33:1c:50:44:44:a0:
e7:19:0e:ad:bc:4a:a3:01:de:72:79:aa:43:98:00:
c2:d6:0c:df:9c:5a:21:c3:ec:bc:5c:54:22:76:76:
bc:e7:6c:8d:d7:5d:68:c5:5d:bf:da:a6:0b:43:f1:
10:4e:dd:f2:79:8e:b6:95:4f:c9:f2:35:65:73:07:
63:a4:b2:bc:61:df:da:be:c8:9d:d7:44:e9:62:05:
c3:4a:cd:09:83:17:61:fb:21:b6:d9:75:12:5b:54:
f7:ea:f4:dd:fa:b4:2b:97:b3:df:39:2d:79:b8:cd:
de:7e:f0:02:63:97:a0:2b:e0:01:e0:20:03:06:c6:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:31:8A:CE:FC:94:88:5D:2A:BF:8F:74:0F:FC:A3:D7:EF:C8:B3:18
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:55:7b:b9:ae:aa:bc:59:c2:7a:d4:26:64:29:a5:fb:79:18:
3b:d1:a5:0e:ef:17:ae:aa:81:d3:b3:2e:70:aa:f5:35:52:29:
69:63:7b:33:c0:5b:4f:de:ac:50:a9:6d:f4:3e:9c:a3:bb:a5:
b8:d4:17:6f:93:f2:4d:a5:c7:03:ad:2b:60:f4:f9:d5:21:c3:
35:cf:f9:77:7f:81:5a:f9:09:41:9b:96:97:84:ee:90:29:b9:
d5:22:2e:f0:ac:35:7b:94:4b:6e:06:a8:25:da:11:c8:29:46:
2f:e2:0b:05:9e:87:6e:66:61:91:44:3e:63:b2:ab:8d:11:94:
a0:61:c2:f3:5e:48:30:7c:7d:a6:75:66:ba:5d:f0:67:14:48:
23:81:1a:d3:3e:83:14:cb:74:50:f0:30:bb:d8:bb:d7:ac:db:
4d:72:f1:0e:e2:41:4e:d4:79:b5:09:6d:67:14:2d:84:48:68:
38:21:8d:33:9a:34:86:5d:e4:10:e0:be:27:15:ef:97:dc:2c:
10:30:40:9d:63:d5:c0:e1:fd:43:5f:61:02:e6:93:c1:69:de:
27:96:4e:3f:72:9a:af:4e:0d:97:34:80:cd:60:b8:b4:14:d2:
cc:f7:7b:02:c3:48:d4:0d:43:c3:ff:a5:fb:3c:e0:44:99:e5:
ac:53:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:56:39 2025 by rpki-client