Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
File: amgjORLYCZ5O3U5ZBtsfxiOubPk.mft (raw, json)
Hash identifier: uzkVovIDAeV8YmK7yhfsARIpZL2iDdMSXvQXFBJWCgk=
Subject key identifier: D6:A3:5B:EB:71:C8:DE:9E:1C:B4:2E:91:88:6B:18:38:1D:29:2D:C7
Authority key identifier: 6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
Certificate issuer: /CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Certificate serial: 019A71B82E4DF169541D1DD47456344C1D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: amgjORLYCZ5O3U5ZBtsfxiOubPk.crl (hash: V0+iHn5/AFpoNaHfigUVhICEyK+ygedOtVljW3ZrqS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2e:4d:f1:69:54:1d:1d:d4:74:56:34:4c:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=d6a35beb71c8de9e1cb42e91886b18381d292dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:91:c8:97:a7:98:d9:30:cd:2c:f0:36:76:
db:e3:e7:ae:6c:34:1c:99:f9:fe:23:8b:f9:b6:86:
8d:68:21:fb:06:58:97:2b:c8:bb:db:75:98:95:80:
1a:bf:d2:b3:d8:39:72:8e:d5:23:fa:34:c6:83:e0:
a8:b3:dd:58:a7:a9:53:78:8b:f2:ed:b6:9b:fb:a5:
ed:0f:20:ae:a6:ba:59:65:a9:e4:12:d3:8b:d6:92:
48:c1:6d:57:e6:04:8b:40:24:82:e1:74:21:73:59:
c1:2a:8f:54:49:7d:a1:70:30:94:bf:ba:56:3a:79:
1b:2c:8e:c4:01:df:37:86:4c:b9:4c:30:c7:39:94:
49:1a:91:94:a5:21:ed:f4:40:09:75:07:2f:a3:e4:
03:b6:43:92:4d:89:7d:84:33:4a:30:e4:ac:82:91:
20:a7:b8:86:6f:3e:0b:ac:bd:cf:c8:2e:c2:72:7c:
6f:8d:59:5d:45:70:c1:8f:ef:75:e4:fa:6f:29:5a:
80:24:5c:52:f9:92:c5:90:06:00:52:dd:46:5e:c2:
74:bf:21:99:ab:11:da:8c:3c:01:12:54:98:0a:c7:
31:86:f7:ea:9e:38:1a:1c:a2:6b:f1:38:ce:41:47:
5a:f8:5b:b0:69:63:46:1e:23:0e:a5:7f:23:45:e1:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:5B:EB:71:C8:DE:9E:1C:B4:2E:91:88:6B:18:38:1D:29:2D:C7
X509v3 Authority Key Identifier:
keyid:6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ca:8d:30:aa:eb:80:69:da:4e:29:4f:25:a7:11:f4:0a:a4:
5b:26:4a:37:62:38:35:c0:b2:ef:45:ce:52:f7:35:e7:48:82:
da:0d:f2:33:7e:85:be:72:56:2f:e7:3d:97:05:c5:60:bb:02:
25:2a:14:a2:b2:4b:e8:1f:96:09:55:42:0b:5e:15:10:fd:a1:
5d:52:8c:db:b9:09:40:12:38:77:25:ea:e0:cd:90:19:3d:20:
92:b4:b8:2e:5c:e9:e7:8f:2a:d1:9f:0d:ca:47:96:68:04:a4:
84:2f:57:98:49:e4:b5:03:93:6c:17:e9:1b:02:46:d4:28:5c:
a2:76:66:d9:9d:64:21:f8:95:01:72:0b:2e:d7:53:ec:04:05:
91:7c:38:97:f2:42:82:c5:3e:c3:a2:83:a8:23:2b:24:9f:62:
a0:c4:b6:d3:b9:9a:94:aa:b3:6b:3a:ac:00:ee:5d:cb:08:de:
c6:b9:85:73:1c:b3:ed:b6:aa:f0:c2:7e:0c:9f:b1:56:ce:eb:
df:be:56:d7:d4:09:55:fc:4e:de:26:1e:59:f2:24:b7:ce:d8:
d3:de:5c:9b:8c:df:38:c3:6f:c1:10:8d:21:df:0f:d7:a5:d6:
b4:71:47:de:d2:ea:32:b9:07:2e:7f:fe:f4:d5:da:f7:c9:74:
8d:e8:5c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuC5N8WlUHR3UdFY0TB1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNjgyMzM5MTJkODA5OWU0ZWRkNGU1OTA2ZGIxZmM2MjNh
ZTZjZjkwHhcNMjUxMTExMDcwMTI3WhcNMjUxMTEyMDcwMTI3WjAzMTEwLwYDVQQD
EyhkNmEzNWJlYjcxYzhkZTllMWNiNDJlOTE4ODZiMTgzODFkMjkyZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO6RyJenmNkwzSzwNnbb4+eubDQc
mfn+I4v5toaNaCH7BliXK8i723WYlYAav9Kz2DlyjtUj+jTGg+Cos91Yp6lTeIvy
7bab+6XtDyCuprpZZankEtOL1pJIwW1X5gSLQCSC4XQhc1nBKo9USX2hcDCUv7pW
OnkbLI7EAd83hky5TDDHOZRJGpGUpSHt9EAJdQcvo+QDtkOSTYl9hDNKMOSsgpEg
p7iGbz4LrL3PyC7CcnxvjVldRXDBj+915PpvKVqAJFxS+ZLFkAYAUt1GXsJ0vyGZ
qxHajDwBElSYCscxhvfqnjgaHKJr8TjOQUda+FuwaWNGHiMOpX8jReFFWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNajW+txyN6eHLQukYhrGDgdKS3HMB8GA1UdIwQY
MBaAFGpoIzkS2AmeTt1OWQbbH8Yjrmz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW1nak9STFlDWjVPM1U1WkJ0c2Z4aU91YlBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZTA2MzAtYjJiMC00Y2IxLWIyZGQt
NzQxMTg4ZGZhMjdkLzEvYW1nak9STFlDWjVPM1U1WkJ0c2Z4aU91YlBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iZTA2MzAtYjJiMC00Y2IxLWIyZGQtNzQxMTg4ZGZhMjdk
LzEvYW1nak9STFlDWjVPM1U1WkJ0c2Z4aU91YlBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsqNMKrr
gGnaTilPJacR9AqkWyZKN2I4NcCy70XOUvc150iC2g3yM36FvnJWL+c9lwXFYLsC
JSoUorJL6B+WCVVCC14VEP2hXVKM27kJQBI4dyXq4M2QGT0gkrS4Llzp548q0Z8N
ykeWaASkhC9XmEnktQOTbBfpGwJG1ChconZm2Z1kIfiVAXILLtdT7AQFkXw4l/JC
gsU+w6KDqCMrJJ9ioMS207malKqzazqsAO5dywjexrmFcxyz7baq8MJ+DJ+xVs7r
375W19QJVfxO3iYeWfIkt87Y095cm4zfOMNvwRCNId8P16XWtHFH3tLqMrkHLn/+
9NXa98l0jehcWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:35 2025 by rpki-client