Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File: AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier: vldURKB/ZmJSBASE25P/D39YyceTaPuSO8Q46FJaG1I=
Subject key identifier: 26:FF:FB:4B:C9:F0:F7:2F:63:F0:71:9A:67:F6:62:D1:9D:26:22:9B
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer: /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial: 019754230394B7E266599D1D5965CF76B0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 10:01:10 +0000
Manifest this update: Mon 09 Jun 2025 10:01:10 +0000
Manifest next update: Tue 10 Jun 2025 10:01:10 +0000
Files and hashes: 1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: Us7BZNqGXziUuohgznQsww3eb+/HvQEoxwjdRPkv2/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:03:94:b7:e2:66:59:9d:1d:59:65:cf:76:b0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Validity
Not Before: Jun 9 10:01:10 2025 GMT
Not After : Jun 10 10:01:10 2025 GMT
Subject: CN=26fffb4bc9f0f72f63f0719a67f662d19d26229b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:22:ce:87:5d:e7:bc:0f:07:00:49:df:4e:
08:d9:49:4d:2c:1b:67:94:a8:05:6f:8c:d9:ac:3d:
d1:2d:fc:05:83:1a:00:eb:c4:7e:b5:44:83:d1:9e:
b9:1f:c8:8e:6c:8a:f1:26:d3:8c:b7:63:87:ce:d0:
da:83:1e:af:c1:cb:67:ef:f6:df:0b:4c:80:fd:dc:
f6:77:0d:46:5a:22:53:2a:9d:72:97:22:65:e5:ad:
b8:26:64:7b:36:33:d1:04:06:75:99:e1:1c:50:55:
ef:0a:22:2e:d9:eb:e0:cc:b3:bc:e8:8e:35:30:b7:
a2:8c:73:bd:71:45:a4:bf:07:0a:4b:55:27:d7:3d:
73:05:23:c2:3e:cd:16:e8:87:df:cf:61:b5:c5:73:
9c:2e:b4:03:07:f6:c7:bf:65:8a:71:87:bc:f9:9c:
11:a8:34:da:95:68:83:cf:31:8f:b5:50:b1:2e:7d:
b0:9c:1e:97:10:88:76:c6:ef:ad:6b:9d:00:ff:bf:
f2:b1:d8:31:3d:3a:55:36:eb:ad:a0:3a:5f:e7:de:
b4:55:a6:25:d6:a4:19:ac:70:8d:68:78:1e:6a:a2:
32:b8:0a:5e:f9:bf:e1:30:b7:e3:c1:14:1d:da:cc:
7a:20:4f:fb:11:fd:ad:d3:0f:0e:5b:80:e3:02:80:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:FB:4B:C9:F0:F7:2F:63:F0:71:9A:67:F6:62:D1:9D:26:22:9B
X509v3 Authority Key Identifier:
keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:42:66:1e:88:37:97:11:52:d3:14:09:5b:92:23:cb:7f:0c:
f6:79:ff:21:38:8b:ae:fd:1a:f1:8a:85:f1:cd:ff:4e:69:b4:
71:0f:e8:a9:00:2c:45:e5:b6:83:ed:35:b3:b7:97:83:22:0e:
3e:7f:f3:4a:f6:ea:d2:a9:af:82:d9:24:f1:2b:92:22:b1:72:
2f:17:e2:ca:3b:e1:50:ee:67:f8:1d:3c:50:90:04:74:3b:f0:
c7:12:75:79:97:0c:09:d5:e5:c1:57:89:63:b0:92:27:5a:f4:
84:df:7b:f8:d6:e3:70:02:ab:9d:25:bf:8a:a9:7a:d2:87:cb:
fa:08:c1:1e:a6:b0:e0:a9:98:2f:81:63:1c:af:73:43:71:32:
ae:06:86:a4:36:92:cb:df:91:e4:c8:d7:a9:fc:92:06:ff:e4:
e3:d0:1a:c3:6a:9e:eb:9a:d5:3b:a9:01:38:e1:8d:fd:88:48:
7d:09:b9:2a:58:59:61:4a:29:42:64:ed:be:f5:c4:32:b2:10:
56:9a:2a:66:fd:9d:6b:54:ec:49:f2:4f:e1:60:20:95:b0:9a:
8b:df:48:81:5b:5b:92:1c:60:83:d1:53:22:02:f2:9f:18:8c:
ad:d9:2b:ce:f4:5d:c0:54:3d:8e:08:66:9f:e5:d2:26:42:51:
2f:ef:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:36:54 2025 by rpki-client