Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: XPjHQ9a6EsoZU4LolnNzN9vRZwLkzda4p4yk+IU2iEg=
Subject key identifier: 10:BD:6A:13:FC:35:12:65:BB:5A:1D:34:5F:62:1A:6D:40:15:09:7B
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 019743D4107B343CE9144AF1C35DF158D089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 1C
Signing time: Fri 06 Jun 2025 06:01:00 +0000
Manifest this update: Fri 06 Jun 2025 06:01:00 +0000
Manifest next update: Sat 07 Jun 2025 06:01:00 +0000
Files and hashes: 1: KZpkhLSygow8v2JeRm5l6FtwdnM.roa (hash: kEG8Taeqqp1OFVs4WldwYvtT3+8GrXdXaDIEP4OfOTY=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: uBYSC9dyCRAWaVwnSlOopPRzwec7yXXVkqA2LzwRo1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:d4:10:7b:34:3c:e9:14:4a:f1:c3:5d:f1:58:d0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Jun 6 06:01:00 2025 GMT
Not After : Jun 7 06:01:00 2025 GMT
Subject: CN=10bd6a13fc351265bb5a1d345f621a6d4015097b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:52:b9:d4:59:3f:c5:81:55:93:d6:3b:7b:
73:5e:9b:ef:b3:97:cc:0c:b1:b4:b6:80:05:8d:7b:
97:19:59:c3:2b:65:a6:88:d0:80:bb:bd:5e:62:60:
93:53:4f:8e:2f:57:82:d6:cf:be:ea:9e:37:37:b0:
0d:42:07:f0:fc:ed:0d:07:7b:3f:5e:6f:95:47:b9:
e1:c0:07:f0:2b:56:fd:70:95:27:55:a1:63:c7:2b:
64:93:06:74:46:f0:99:75:18:e9:5f:0f:c9:bb:f9:
26:08:c1:d9:69:81:1f:94:4b:c0:79:fd:9b:7e:69:
4c:2f:67:dd:26:32:f7:ef:9e:40:69:ff:7d:96:fe:
09:d0:6a:cd:40:b6:76:c6:9e:da:96:2c:93:53:b1:
67:c7:ac:1c:5d:52:0d:0b:b9:fb:3e:fe:77:d2:74:
bd:3b:4d:bf:a0:01:07:0a:0a:c8:ef:d3:e5:0c:26:
40:66:bb:db:ad:6a:4a:5f:73:01:96:8d:25:6d:34:
e7:15:29:09:7b:96:d5:fe:1e:02:e1:2e:8b:2d:0c:
91:dd:6b:91:c6:07:04:be:47:4c:f9:49:43:1f:b8:
9d:aa:a5:46:e2:e2:10:17:b7:f8:16:55:16:69:b1:
65:37:cf:19:61:08:05:cb:02:05:4b:52:75:99:c1:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:6A:13:FC:35:12:65:BB:5A:1D:34:5F:62:1A:6D:40:15:09:7B
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:47:07:b5:23:91:4e:cf:b5:e9:cd:7a:3f:40:85:ac:34:54:
87:fe:93:8c:74:66:d9:53:80:59:8c:0e:8a:ad:a9:20:86:10:
e9:03:d2:76:f8:9d:46:b2:90:d8:22:a6:c8:02:ef:4e:88:18:
85:e6:47:0f:20:6a:74:88:87:bb:d7:64:f7:63:b8:ca:07:c2:
ea:34:c6:86:05:ea:49:99:02:0d:0c:cc:89:0f:66:96:72:ed:
95:84:69:57:9e:6a:b7:95:60:c6:6b:31:52:fa:ec:8c:6b:b4:
1e:6a:58:f4:a3:f0:17:ec:25:30:ff:93:b1:74:e7:87:f5:4c:
07:9c:58:45:74:ce:0d:23:09:a6:3a:53:9b:91:dd:ca:9a:df:
04:11:88:fa:53:c6:1f:c7:70:a9:31:94:4e:b8:88:d4:2e:0e:
79:2c:2e:6f:22:3a:34:69:f0:68:68:70:ae:c0:69:cd:f4:b7:
3a:81:8a:d3:8e:3c:da:4c:0a:c6:05:53:21:44:5b:05:d1:71:
b7:6c:1d:59:a4:ca:6a:25:83:c2:4f:2a:0b:88:8f:ec:77:01:
2c:85:9e:4b:00:61:4f:d1:cc:dd:18:6d:54:3a:c0:c2:8c:d4:
e1:cd:d0:95:57:22:e9:7a:3c:19:51:5a:f6:f1:44:2c:95:bf:
1f:15:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:43:46 2025 by rpki-client