Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
File: amy2jfouNjg5NN5oDtAlGsOu3Mo.mft (raw, json)
Hash identifier: F8hI2cW5SA6fECS130wJgXvSHnrlh34Fmaby+WfsyDs=
Subject key identifier: D3:FF:91:8C:A3:7A:B8:D4:FE:EB:AE:A2:06:4F:ED:8A:28:4A:1F:CB
Authority key identifier: 6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
Certificate issuer: /CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Certificate serial: 01992330E1E7FA843F0CBD994D13DFDA9C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
Manifest number: 76
Signing time: Sun 07 Sep 2025 08:00:30 +0000
Manifest this update: Sun 07 Sep 2025 08:00:30 +0000
Manifest next update: Mon 08 Sep 2025 08:00:30 +0000
Files and hashes: 1: amy2jfouNjg5NN5oDtAlGsOu3Mo.crl (hash: bngFenvIJBatAeHQVHN1i/ESEV41Ujv9Or/VmbaB1dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e1:e7:fa:84:3f:0c:bd:99:4d:13:df:da:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Validity
Not Before: Sep 7 08:00:30 2025 GMT
Not After : Sep 8 08:00:30 2025 GMT
Subject: CN=d3ff918ca37ab8d4feebaea2064fed8a284a1fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:32:49:4e:89:7a:14:3c:4b:0d:53:99:ff:
6c:1a:d6:ce:4a:c8:34:06:fa:d7:53:23:91:0a:20:
cc:07:bd:62:65:32:d2:0f:ae:d8:69:36:ab:41:56:
7b:88:2d:e0:f4:68:9b:3b:9c:09:e0:2e:68:0e:a2:
44:e9:f5:99:27:9b:19:18:ef:cc:2b:26:1d:a6:60:
f1:05:25:e2:b0:a7:df:a2:a4:58:a1:2c:29:6e:da:
e4:88:f3:98:29:f6:9d:76:f4:57:8e:ac:6f:0f:a6:
9e:7c:17:cf:d0:5e:6a:a8:a2:80:54:b4:d1:c7:8c:
63:4e:71:3d:36:af:a8:87:9c:79:4c:17:01:e2:70:
1e:ef:80:d4:e0:69:fc:6f:3c:6e:a8:64:03:7f:6e:
fe:d6:6d:66:51:a2:56:e1:0a:c3:fa:55:ed:bb:70:
3e:17:4d:e7:24:3f:0c:98:4a:43:5d:98:70:c9:b7:
8f:1f:0d:d7:9b:1f:6b:52:8c:62:05:34:84:81:3b:
10:87:80:2b:a1:78:49:f0:aa:c3:82:ed:81:29:8c:
50:5f:cc:d2:ee:4c:8d:11:93:f2:3d:c2:0a:4d:fe:
6e:27:56:82:cc:f9:40:33:e6:e2:45:a5:1c:dd:2b:
d8:1b:fa:39:ea:e9:13:cd:ec:05:04:c8:87:0f:76:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:91:8C:A3:7A:B8:D4:FE:EB:AE:A2:06:4F:ED:8A:28:4A:1F:CB
X509v3 Authority Key Identifier:
keyid:6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c0:a6:b5:fc:5a:9c:28:30:2c:81:01:eb:3d:0f:b4:09:d1:
85:77:db:69:39:45:1a:1f:f6:85:a4:b6:49:fb:64:60:a5:56:
14:0a:16:d2:ae:6a:1b:77:5f:11:81:67:f6:76:db:83:c8:3c:
ea:50:f9:dc:8e:75:a5:42:56:a1:57:00:ac:03:80:cf:47:c0:
0b:68:13:2d:6b:06:da:ff:9e:7e:bb:9c:b1:10:b7:19:aa:43:
d4:08:35:20:4b:fd:07:ef:27:2d:cc:3f:70:0c:71:2d:83:1a:
15:71:a6:c8:95:51:bf:a0:48:b5:e5:a3:e9:a5:d4:04:58:1c:
4b:ea:7d:c7:3b:97:b0:1d:03:58:73:f0:4c:27:d3:c5:0a:6f:
f3:76:4d:f3:f9:29:41:4f:e4:b2:e5:97:d3:e1:c2:d8:79:0f:
c0:38:49:ef:b4:7b:34:bd:27:47:ed:be:73:e0:4d:a1:1f:f0:
b9:d2:86:2e:9a:1a:34:b3:d6:3d:42:3d:fa:17:36:7c:01:f4:
23:ae:2b:79:1a:8c:f9:86:8b:16:10:a5:bf:81:12:67:06:82:
9b:44:98:3e:00:63:00:c0:00:15:09:6b:c2:76:47:b5:33:e5:
fc:cb:48:24:a6:b9:24:57:99:45:9c:42:9b:b0:37:36:d3:42:
d6:26:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:19 2025 by rpki-client