Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
File: amy2jfouNjg5NN5oDtAlGsOu3Mo.mft (raw, json)
Hash identifier: YtnO/LsraIz3N0/bIyP+aTVVVmml8fTL04aw7ZtL4dw=
Subject key identifier: C3:14:23:DC:25:90:2C:C2:AB:D4:02:1B:06:FE:DF:05:A7:3F:C3:E6
Authority key identifier: 6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
Certificate issuer: /CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Certificate serial: 019A7149EEE045A983387EC0A5BBF53C7C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
Manifest number: 0123
Signing time: Tue 11 Nov 2025 05:01:01 +0000
Manifest this update: Tue 11 Nov 2025 05:01:01 +0000
Manifest next update: Wed 12 Nov 2025 05:01:01 +0000
Files and hashes: 1: amy2jfouNjg5NN5oDtAlGsOu3Mo.crl (hash: UkOcJqheclBywMYKOKTsGDbjfdlbM7d/Awr73NrLK2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ee:e0:45:a9:83:38:7e:c0:a5:bb:f5:3c:7c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Validity
Not Before: Nov 11 05:01:01 2025 GMT
Not After : Nov 12 05:01:01 2025 GMT
Subject: CN=c31423dc25902cc2abd4021b06fedf05a73fc3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:c3:87:cb:00:03:c2:37:64:39:d3:7d:0f:
64:2b:81:ad:fb:b7:74:c5:20:9c:50:d2:28:96:40:
15:1b:26:2f:b8:b2:1e:d3:2e:e3:ad:72:6c:70:63:
76:50:59:c9:3b:71:2a:97:c2:20:47:4d:7f:62:03:
59:9f:00:5c:7c:2c:2d:7f:6c:53:24:f7:5a:b8:fa:
8a:c3:8e:e4:94:04:33:27:36:28:ca:7d:99:df:1c:
f3:58:4a:d3:8a:bc:85:b8:cd:33:b5:e3:41:69:62:
8a:61:64:11:3c:fd:8a:44:da:f5:e0:55:17:2d:a6:
a9:e6:55:d1:17:b7:6c:c8:7c:b8:fb:a0:89:30:d8:
f1:e6:c8:6c:56:3b:73:ef:58:cb:18:d7:9a:56:67:
a0:40:13:b8:97:73:4d:a0:6d:e1:8d:a0:3f:ff:ee:
2d:17:28:b0:d9:97:2a:de:4b:9b:07:66:65:b6:5e:
bb:47:92:2f:5b:cd:ca:8c:71:58:54:78:d1:6c:5f:
7e:ea:a9:68:77:7d:d6:1a:0b:00:02:ef:9d:58:b7:
3b:10:cf:f4:18:d5:67:43:bb:45:c6:e6:f0:a5:5a:
0b:c3:a9:01:fa:20:9c:9f:e2:e8:4e:43:96:89:a9:
56:7f:59:74:3b:df:47:7d:08:02:12:00:d6:38:17:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:14:23:DC:25:90:2C:C2:AB:D4:02:1B:06:FE:DF:05:A7:3F:C3:E6
X509v3 Authority Key Identifier:
keyid:6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:55:42:5f:e5:06:81:9e:e6:09:f5:f4:6f:0c:06:fa:ac:79:
cb:d8:5d:f0:d0:69:95:a4:1a:7c:d1:af:36:ab:d8:69:75:63:
6f:fa:3e:0b:dc:fb:cc:30:3e:b2:26:be:7e:0a:96:f6:cb:2d:
a0:28:8f:48:05:6b:05:35:93:2b:ef:9d:88:40:0a:1f:25:a0:
91:fa:f9:8b:e7:97:4c:72:10:30:98:d6:06:cc:b1:9a:cd:c8:
9e:97:89:0b:85:30:f6:be:d4:04:8e:2c:96:ad:71:60:0d:a3:
49:08:66:f6:bf:81:40:34:49:25:75:e6:f2:8d:7c:e2:a4:a2:
68:77:da:e4:c1:f4:8a:aa:e2:7a:1a:f1:19:6b:43:2f:27:2e:
56:ff:43:f4:47:9e:93:7e:97:58:0e:22:a9:03:16:d5:24:71:
49:12:a4:da:aa:ab:c0:46:1e:2e:6c:03:5b:4c:ec:05:5f:64:
3e:02:2b:a3:14:50:94:a3:56:32:d6:02:44:0c:8f:bc:91:36:
d9:02:36:66:65:62:82:19:f8:da:1f:47:11:4c:eb:d7:b8:14:
30:16:12:96:04:e9:22:8b:1a:9d:95:71:0a:17:85:1e:93:30:
11:c6:05:25:b6:d1:19:c0:7a:e0:65:b9:ea:13:f6:d4:35:6b:
42:7c:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:50 2025 by rpki-client