Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: whsmYfgXt6DRc2/+s/vyUKtXBmYsgJTB07JjeF+rkBk=
Subject key identifier: C8:86:1B:6A:0E:8C:5C:9E:7E:D8:E8:A6:59:11:13:E2:09:C4:48:98
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019A240A2334CE64B3549FC104BA577BB1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 05:00:35 +0000
Manifest this update: Mon 27 Oct 2025 05:00:35 +0000
Manifest next update: Tue 28 Oct 2025 05:00:35 +0000
Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: zEEKg2ZEXWy5MfWPxdrN+ZqtKMqJUbkMTeaSmAOpPi8=)
2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:23:34:ce:64:b3:54:9f:c1:04:ba:57:7b:b1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Oct 27 05:00:35 2025 GMT
Not After : Oct 28 05:00:35 2025 GMT
Subject: CN=c8861b6a0e8c5c9e7ed8e8a6591113e209c44898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:82:10:25:03:5b:ef:8b:7b:f3:b5:d6:20:a7:
c1:03:6b:1a:f8:24:72:ab:a6:be:f7:9d:7e:f6:5a:
b8:ad:03:05:4b:21:30:5f:da:22:f3:44:d4:13:97:
7c:53:04:e1:7a:b8:1e:68:c2:5d:02:39:1e:0c:58:
59:88:52:92:4f:5b:18:d6:e5:fb:67:0a:ca:ff:d4:
41:c5:83:fe:e6:ec:41:8e:ea:e7:36:d0:06:35:12:
b7:da:6a:01:32:05:1e:5d:64:9d:9f:e5:50:f4:56:
a7:88:58:0c:75:4c:b2:71:9e:67:68:7d:bb:ea:da:
33:90:65:e0:00:09:10:5b:18:4a:5f:9a:b4:98:3a:
65:76:81:c0:a0:09:e2:e1:03:58:d4:24:26:a3:65:
a8:fc:9e:fe:41:6e:88:81:81:11:e3:17:c7:47:d8:
e1:e2:db:e2:1c:41:86:5f:ce:e2:d4:9e:aa:e3:ba:
7b:b8:f0:03:df:00:44:4a:a7:e3:a3:42:cf:01:14:
f2:93:4b:e4:92:67:7c:ab:24:ed:09:5e:95:37:7c:
e8:10:3f:c2:f6:ec:73:6b:ac:c7:3b:7a:ef:8c:1c:
9c:c3:22:13:d0:11:2b:63:5e:ac:e9:4a:4a:dc:ac:
ef:4c:b0:ff:c8:b2:92:49:ca:58:3f:cd:17:a7:0b:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:1B:6A:0E:8C:5C:9E:7E:D8:E8:A6:59:11:13:E2:09:C4:48:98
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:68:5f:56:07:70:3b:73:40:b0:06:6f:5c:4e:36:43:76:
7f:e4:17:da:1c:88:3a:b7:a2:a6:6b:34:d0:bb:ce:c4:27:1a:
e0:8b:14:8a:1b:c3:2f:d3:54:a7:8e:2f:9c:32:98:10:19:b5:
52:f3:f6:17:43:da:b8:cc:82:eb:5a:17:f8:94:07:ba:ac:d1:
2a:3c:ca:4b:ab:10:6b:d1:2f:24:fc:41:8a:02:c7:43:eb:59:
5a:05:91:d2:02:f5:4c:15:e9:d2:d3:55:c3:59:2b:59:b8:22:
38:8c:25:bd:31:26:62:4f:da:09:84:35:f3:97:c4:74:fe:99:
19:65:ed:e3:c5:e4:cc:70:d5:76:da:c7:69:47:07:5e:d3:a7:
b6:e4:15:41:69:1c:f7:0e:ad:02:f8:dc:7f:a1:06:fe:f7:7a:
2c:7e:fe:85:7d:c3:0a:98:77:28:e3:85:da:bc:3c:8a:02:10:
ea:87:f1:e9:03:4f:f0:d3:1f:a2:5d:df:af:15:43:bd:6a:47:
ba:80:26:8c:3a:7a:4f:2d:a1:6f:d4:bf:1c:42:94:a5:16:d4:
da:6e:08:99:e4:a6:9c:df:cf:bd:9a:38:64:88:6d:2f:21:d1:
7a:d8:1b:e9:90:0e:86:a4:7b:dd:e2:0f:73:c9:26:5e:63:2d:
e6:bf:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:40 2025 by rpki-client