Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: A7mLCg+gNPjZN5hO8MY9DymoEhe8a1bNVOJTOKwGVCc=
Subject key identifier: BF:FA:A9:F6:A6:31:68:52:56:F2:C8:B4:17:06:B7:64:1B:4E:C0:86
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 019747429B891E919500D10C7EBE37170281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 22:00:36 +0000
Manifest this update: Fri 06 Jun 2025 22:00:36 +0000
Manifest next update: Sat 07 Jun 2025 22:00:36 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: 5XEbwP5Sit69zFtW302CUOXbN5wV8bFdJKZBZWrsTRU=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:9b:89:1e:91:95:00:d1:0c:7e:be:37:17:02:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Jun 6 22:00:36 2025 GMT
Not After : Jun 7 22:00:36 2025 GMT
Subject: CN=bffaa9f6a631685256f2c8b41706b7641b4ec086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:fb:78:fa:eb:52:9f:ed:4a:9e:8f:87:19:
cf:38:97:fb:0f:0f:7a:ab:1d:6a:c9:80:92:d7:34:
0a:b9:66:cf:16:c1:2b:5a:7a:92:cf:32:b5:bc:37:
7d:16:8a:13:5a:1b:f1:35:ac:2d:a2:2d:88:80:53:
4c:d2:a2:1c:d1:36:1a:0c:a3:55:22:4d:50:37:17:
69:50:0b:c3:59:26:78:34:f9:46:d7:83:6e:f0:9a:
ab:19:65:af:87:88:75:18:f2:e3:ff:9c:ba:51:ad:
22:50:28:29:4a:18:3d:43:8b:c8:da:40:5c:ea:b9:
fa:22:4d:3a:05:dd:7b:ab:c6:2b:ae:e2:09:94:ee:
ad:0f:ae:c3:e7:8b:4f:0b:85:ae:90:0a:8c:a3:68:
aa:2a:52:24:49:a2:b3:67:a0:40:9c:60:46:2d:e5:
93:77:77:b9:48:98:0d:65:e0:fa:d0:aa:d6:9f:53:
7c:7e:ca:4c:fc:09:58:70:f3:07:f9:d7:93:63:4d:
6c:6b:5b:d2:58:e4:c3:bf:a7:5c:31:63:f7:75:ca:
78:a8:ad:11:14:09:9f:c1:f0:09:e0:5c:43:14:0c:
41:9d:cb:8e:da:20:ba:78:0b:97:ce:e9:e3:ed:54:
36:bd:28:84:92:27:eb:6a:c7:f8:09:8a:cd:2c:85:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:A9:F6:A6:31:68:52:56:F2:C8:B4:17:06:B7:64:1B:4E:C0:86
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ca:e1:81:25:3c:e1:43:07:8b:62:81:2b:87:47:74:50:58:
a0:45:0f:cf:14:b0:d6:6d:a4:07:20:cb:d4:f7:e9:4b:15:5f:
ea:72:aa:9a:7d:fc:ee:30:ee:79:49:eb:4e:a2:5c:f3:8f:c5:
7d:12:4f:ad:2d:90:bf:8a:86:57:ec:b7:a2:e2:68:1b:c9:50:
de:4e:68:26:bf:75:e8:30:da:ab:45:40:b8:f1:cc:29:cd:95:
af:50:26:0f:6e:6a:47:f5:61:38:6b:f1:ab:39:a4:42:4d:ff:
f4:39:88:7a:8e:52:e5:7f:b8:2e:79:ea:ce:8d:70:58:32:46:
e4:cd:34:42:39:a0:85:4a:5a:e8:88:62:77:31:14:2f:d6:e8:
e3:23:14:60:bc:eb:eb:af:0d:74:73:91:6b:0d:82:20:7f:92:
11:03:0e:60:75:de:32:00:62:9f:7a:e8:5e:b4:5c:4a:fa:65:
ef:3d:6b:bd:5a:6d:04:95:a4:25:18:d1:dd:40:15:86:d1:6e:
32:b7:ba:81:6f:c0:97:51:5d:d7:e4:2f:4c:db:54:1e:8a:1c:
fd:ce:b0:52:98:3f:2e:3e:e2:98:57:24:c6:97:30:bd:67:30:
1e:d9:74:22:37:41:78:a8:fd:f2:00:ef:2a:96:84:f1:8f:bb:
cb:b4:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:45 2025 by rpki-client