Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: 45KaTknKwvlvuOCzekiL/T2sFfzBg17+RmNhrc8XiWY=
Subject key identifier: 49:64:F8:8F:E2:38:A3:A1:FD:58:A8:1F:EB:A5:15:82:76:7E:61:66
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 01992BFDAC7E397E376F7C877B2845FDF07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 1675
Signing time: Tue 09 Sep 2025 01:01:08 +0000
Manifest this update: Tue 09 Sep 2025 01:01:08 +0000
Manifest next update: Wed 10 Sep 2025 01:01:08 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: qKcW4Di/qGRroxaMz/dUmxpdAu2lHW3VtubP/EPGWZI=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:ac:7e:39:7e:37:6f:7c:87:7b:28:45:fd:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Sep 9 01:01:08 2025 GMT
Not After : Sep 10 01:01:08 2025 GMT
Subject: CN=4964f88fe238a3a1fd58a81feba51582767e6166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:66:94:40:71:73:e5:86:d5:c4:69:c0:6c:
04:5e:3c:a0:65:99:9d:a6:0d:50:cb:8b:65:42:28:
b4:cb:71:7c:6f:8e:d0:1b:5b:07:de:3c:2b:8d:a3:
68:6e:d1:29:bc:33:ac:de:59:57:bf:36:70:20:fd:
f6:93:6f:04:68:f8:9b:8c:d5:1c:1d:0d:da:14:5e:
50:f1:08:d8:05:eb:35:c3:e2:42:b5:bd:1e:40:b4:
fc:ef:a6:e1:b3:59:a1:25:e3:81:8b:73:6f:13:df:
78:21:d1:d8:c4:22:75:81:b6:de:6a:f7:fc:60:ca:
d3:b0:03:7c:7a:7f:26:01:3b:9e:80:07:3b:a3:ee:
d2:a9:e9:3b:60:3e:db:4c:ff:dc:1c:a7:9a:85:96:
8b:99:58:3d:b1:92:ef:69:1d:cb:c9:f7:52:f6:e0:
51:67:3b:ab:72:76:2e:2f:3a:e9:be:62:ad:13:c2:
ee:bc:67:63:6c:2b:08:31:a6:29:d3:07:6f:b1:af:
a5:eb:57:ea:c3:b5:c5:8f:cf:5d:fc:89:a9:59:5b:
bc:a6:64:ce:da:7c:8c:78:ee:97:a5:52:56:09:98:
e2:9c:f4:4d:1d:33:ad:55:75:01:74:bf:7d:1b:bf:
68:d8:dd:22:07:11:bd:ab:16:97:f7:9c:f9:25:21:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:F8:8F:E2:38:A3:A1:FD:58:A8:1F:EB:A5:15:82:76:7E:61:66
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3e:fb:61:d9:47:3f:ff:af:c5:f4:de:08:40:9a:2a:d6:e4:
ba:bf:8c:ea:39:02:73:4f:e1:da:05:2d:c8:8d:65:a5:2b:40:
ae:a5:8d:32:94:28:8b:c4:95:ed:a2:05:eb:fa:4b:ec:7d:b7:
e9:46:9c:0e:70:cc:04:9d:b5:87:bd:f5:37:ae:45:44:a5:20:
2c:31:0a:de:43:55:d1:71:26:dd:4a:ad:ec:3b:b4:9c:a2:26:
5b:fd:1d:7d:61:72:ed:9a:ab:23:39:d8:6a:f1:e8:a6:e1:8c:
be:8a:58:26:69:84:50:08:b0:b7:9d:6c:21:91:eb:7b:fd:65:
5e:73:b2:b8:28:1b:69:ba:f7:7c:21:17:7c:62:7a:a5:0a:47:
4e:cd:95:38:f6:bb:10:ad:f2:66:d6:f3:54:24:c9:20:d2:54:
08:e2:9e:e3:7f:5b:63:01:f0:a6:37:b8:b3:04:29:c1:d2:2f:
03:9c:b4:87:1c:f4:04:99:d9:ca:61:dc:4c:30:3b:1b:aa:5d:
d5:4d:11:42:a3:42:94:a1:58:77:bf:4b:c6:fb:4e:79:55:31:
b1:fd:0d:f8:5a:00:f7:0b:b4:1e:b5:32:9e:e2:bb:d7:a2:9e:
56:68:81:70:15:ac:8b:9d:21:55:7c:97:e0:e3:d6:e9:bb:c3:
26:87:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:09:11 2025 by rpki-client