Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
File: AmWtlOeXE1kGs-EahHyOr9CU50U.mft (raw, json)
Hash identifier: cfNGc8HDp6M9wWrGEjwLowCmnPx7/Wi91zmp+lIjHVk=
Subject key identifier: BB:66:10:E6:32:04:5F:57:AF:8B:25:4C:78:0F:3F:75:AF:B3:3B:EF
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 0197722D41E7F2C43A3006CD3E4A61D62C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 06:00:57 +0000
Manifest this update: Sun 15 Jun 2025 06:00:57 +0000
Manifest next update: Mon 16 Jun 2025 06:00:57 +0000
Files and hashes: 1: AmWtlOeXE1kGs-EahHyOr9CU50U.crl (hash: jC9RH8r4f5vcM2u0uFWvgMKYdLpmPkAoxd82ur/ycfU=)
2: SZBAF2HXjdb03PkJpOVysksT_8k.roa (hash: Krg8gvZLzhIMGcL+cCXvbm4nAV3yJmkdyGbkdVJo2Lc=)
3: ubILPtIGLcaC5tdulnfQHq0BdoU.roa (hash: BJYBDA5/MNdL6MG7ef+wXgyzjJiGCTkzcJs87HpsXHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:41:e7:f2:c4:3a:30:06:cd:3e:4a:61:d6:2c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Jun 15 06:00:57 2025 GMT
Not After : Jun 16 06:00:57 2025 GMT
Subject: CN=bb6610e632045f57af8b254c780f3f75afb33bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:35:fa:8f:76:53:b0:a2:e8:7b:2f:c2:ba:
d5:da:4c:a9:2a:53:ac:37:07:cc:46:17:f5:a1:cb:
28:4e:cf:3f:29:39:8d:e5:c6:c8:a1:20:95:d0:61:
58:40:68:87:ee:d1:00:95:cc:d6:a4:46:5f:53:06:
41:87:7f:30:5c:30:13:8d:f2:57:99:60:b0:6f:d8:
43:66:a1:66:48:db:e4:1c:eb:75:df:ea:31:c4:f4:
a6:89:b9:79:52:f1:a0:93:f5:f7:d0:f7:3b:ba:13:
81:85:72:dd:8c:c8:6a:62:89:17:29:b7:9e:ea:f5:
74:7a:b7:e4:07:1a:8d:fe:59:cd:e7:9f:79:31:c5:
22:2f:b7:87:ff:0d:1a:b4:ef:d1:75:d7:26:21:f5:
0d:5c:da:fb:df:79:a1:ed:70:1f:da:7f:51:76:93:
0a:3c:17:d5:5b:0f:9c:e7:89:a5:ce:a1:27:64:c5:
e0:84:bc:26:e9:39:d9:84:8b:a1:6f:26:d4:8c:b7:
5a:b1:d6:c2:95:c9:2b:4e:67:27:65:9a:f3:9e:e2:
8c:f7:07:fb:e6:e8:1b:77:5c:e7:a6:a6:41:d4:81:
5e:57:12:a8:73:fc:e1:ee:85:72:f6:8a:14:a7:42:
f2:48:be:53:ca:e6:14:14:0f:a5:ab:6d:28:ca:84:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:66:10:E6:32:04:5F:57:AF:8B:25:4C:78:0F:3F:75:AF:B3:3B:EF
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4e:36:00:ec:ae:7d:99:d9:8e:fe:27:1c:c2:73:cd:6f:b8:
21:c8:60:bf:12:9b:48:49:51:c2:6f:f5:b8:46:e1:7a:06:d8:
ee:a0:ff:26:0e:41:74:48:a5:b0:59:43:c1:00:41:a8:d3:e6:
e9:87:80:3c:4c:f5:df:cc:a4:22:6d:61:91:9f:5a:0e:b8:52:
32:2f:cc:83:59:bc:91:19:68:47:4c:f7:01:4a:01:a3:77:d1:
e8:ae:f3:3a:b3:2a:cb:83:5f:f2:49:d7:7c:42:70:97:0b:1b:
ce:7f:02:32:ec:62:53:d2:f0:b0:d3:6a:1e:64:7c:19:cf:17:
f1:01:f3:47:4c:17:75:b8:4d:f7:ea:09:d5:85:49:77:ee:00:
a2:d8:0d:e5:87:c7:38:bf:34:57:f8:5a:19:90:30:d8:55:90:
c5:25:21:f4:51:a8:87:8a:fd:f3:f5:af:72:0c:45:89:e5:a6:
ea:78:fa:2a:0e:d3:b6:21:d1:a6:a2:3e:89:02:ea:78:93:4c:
9c:79:e9:37:04:4d:d4:c0:0b:3b:3d:b2:ff:54:58:1e:b5:b7:
54:d8:0d:5f:0c:9e:46:b5:6a:61:02:23:fb:85:cb:27:9e:9f:
7a:63:70:79:2b:17:ce:09:ea:bf:9d:4d:f0:72:ee:23:ae:4f:
6d:78:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:52:51 2025 by rpki-client