Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
File: AmWtlOeXE1kGs-EahHyOr9CU50U.mft (raw, json)
Hash identifier: YsSOg8KL8cyK9eL5zPTjJX7wfpZTQRQeAKasRZw6wHM=
Subject key identifier: 8A:BD:C4:1E:B6:2E:01:D9:BE:30:66:16:01:45:65:38:43:29:7A:C3
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 01975724080FDA6C21EAF3DE44A8E478C962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 00:01:08 +0000
Manifest this update: Tue 10 Jun 2025 00:01:08 +0000
Manifest next update: Wed 11 Jun 2025 00:01:08 +0000
Files and hashes: 1: AmWtlOeXE1kGs-EahHyOr9CU50U.crl (hash: D+Dgg0Z+aPRwS8x48DZ7bb2CtuMMMBkTvn81YnK4n7g=)
2: SZBAF2HXjdb03PkJpOVysksT_8k.roa (hash: Krg8gvZLzhIMGcL+cCXvbm4nAV3yJmkdyGbkdVJo2Lc=)
3: ubILPtIGLcaC5tdulnfQHq0BdoU.roa (hash: BJYBDA5/MNdL6MG7ef+wXgyzjJiGCTkzcJs87HpsXHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:24:08:0f:da:6c:21:ea:f3:de:44:a8:e4:78:c9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Jun 10 00:01:08 2025 GMT
Not After : Jun 11 00:01:08 2025 GMT
Subject: CN=8abdc41eb62e01d9be3066160145653843297ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:46:90:d4:e1:66:bf:ef:38:2d:a7:5e:0a:
68:3c:2d:6e:d7:27:c4:34:9c:78:40:cd:e4:50:83:
2e:f3:e3:35:ae:31:6d:50:c3:78:a2:94:0d:db:cb:
85:d0:eb:7b:32:3c:b0:32:45:ec:7e:20:06:1d:9e:
93:b4:b4:70:36:80:70:da:f6:2e:ef:e2:b7:e3:43:
d1:3f:3f:93:c5:61:82:80:27:b9:45:a1:42:da:a0:
fa:8f:d2:46:12:e0:ac:c0:10:92:63:06:75:7e:46:
60:69:59:4f:8c:bd:ce:57:33:b0:d2:de:ac:70:e2:
cf:80:36:0f:b9:1f:7e:61:af:86:7d:78:f7:b9:a3:
3e:34:ec:6f:f2:14:b0:1f:81:be:98:34:c0:7b:61:
2d:d5:05:9a:fe:3f:48:d7:37:72:f7:b0:d3:34:d5:
18:4f:1d:ea:4f:12:ad:cc:9e:34:66:bc:ed:ad:48:
9b:7f:3d:6d:58:af:9e:5e:30:6f:89:cc:14:13:e2:
81:6f:d9:66:16:3f:69:50:19:1e:fc:2e:41:0d:dd:
a5:9d:61:a0:60:b7:9b:28:8c:e3:79:7e:cb:f9:09:
af:e0:3e:64:73:eb:77:62:ae:ef:58:b1:2b:41:bc:
bd:19:db:0c:3a:d1:a3:60:8b:50:77:92:46:e8:66:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:C4:1E:B6:2E:01:D9:BE:30:66:16:01:45:65:38:43:29:7A:C3
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:f0:b3:85:8a:41:27:38:eb:fd:76:f2:0c:7e:c2:af:4b:
95:3d:99:b7:79:7c:75:1d:ab:a4:17:63:02:85:a8:5d:4f:43:
ac:da:12:2f:12:5f:8d:07:6b:f7:2e:47:49:05:47:ec:a3:5f:
f4:62:2a:e3:19:4d:5b:a2:88:40:d8:7a:c9:d0:b8:4b:86:e3:
a5:02:f8:6a:f9:66:5a:fa:6f:af:83:6b:64:21:8f:a9:fe:63:
1b:c0:ce:d8:79:43:23:5b:6e:56:c3:20:aa:d4:42:d8:5b:83:
36:a5:5b:91:a5:7b:ce:75:46:4f:65:34:5c:d0:63:fa:ca:77:
ce:00:f9:14:69:e5:c4:d4:ed:ba:15:cb:85:2b:48:a1:91:1d:
46:83:de:b3:30:ab:b4:32:d9:da:fd:ed:05:d7:85:90:35:e3:
f9:33:d1:b4:09:ef:41:06:1d:64:46:23:1b:15:44:98:7a:81:
b9:da:73:2e:b0:61:d8:13:30:17:21:34:1a:09:84:9c:3a:0d:
f9:49:1b:ac:44:25:59:cd:de:54:63:21:4f:c0:df:ed:07:17:
38:cc:5f:7f:ad:70:06:3a:c1:b3:7b:1f:10:a6:e0:37:d6:16:
52:ac:93:df:ca:ee:f1:6a:f3:9e:f2:aa:8f:cf:f3:64:16:7c:
44:63:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:29:54 2025 by rpki-client