Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: +KvagnP71YLbaHo4C27NkQ+/mejcFWVNErTibDaYacE=
Subject key identifier: AF:86:19:D2:F3:73:EE:AE:05:E0:88:09:34:58:51:2E:C7:A6:DF:5A
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 019910F46A880952D114FE44AF5B85338B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 010B
Signing time: Wed 03 Sep 2025 19:01:17 +0000
Manifest this update: Wed 03 Sep 2025 19:01:17 +0000
Manifest next update: Thu 04 Sep 2025 19:01:17 +0000
Files and hashes: 1: iwQbkJtBuAm_xcfzDuJT6i57BjY.roa (hash: RmTZJ40kwHa9kbSdBRPYJl4skgdfEXdZGrx35wy6Kio=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: x8o7SMig1tBquirBhro5pY2DdMWiOcPb+Vh61CZp9K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 18:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:f4:6a:88:09:52:d1:14:fe:44:af:5b:85:33:8b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Sep 3 19:01:17 2025 GMT
Not After : Sep 4 19:01:17 2025 GMT
Subject: CN=af8619d2f373eeae05e088093458512ec7a6df5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:43:0c:76:22:fe:16:5d:b3:8d:85:8e:2a:
f6:d6:af:d5:6a:46:f3:01:56:ae:80:f1:51:ab:bb:
73:2b:38:66:3c:cd:b2:d7:0a:b2:8b:1c:5a:52:b5:
54:75:9e:fd:4e:dc:32:3e:e4:fc:3e:e9:06:4b:96:
55:48:8d:74:54:ad:4c:c1:13:53:65:ae:8d:89:ec:
e6:44:f1:11:ed:73:c1:19:59:55:5c:3d:5d:78:22:
2e:65:99:f2:a1:86:2f:47:47:3d:da:aa:e3:8b:64:
e6:b9:73:93:d5:4b:70:e0:a8:a1:1d:19:04:ff:48:
56:d5:f6:b4:d2:d3:92:23:ac:53:4d:f5:f0:f0:df:
81:25:c5:7d:03:56:01:07:5f:0d:5a:c0:97:df:a5:
90:8c:ff:6a:c0:f3:9b:99:c1:e8:44:20:af:90:5f:
f4:64:8e:dc:97:47:de:c8:dd:ae:14:29:d8:3c:d3:
be:ab:b5:47:5d:e2:aa:a0:1e:cc:46:ff:7d:af:d2:
a5:9a:ab:a4:8c:53:1e:8a:fe:6d:74:15:37:59:1a:
b7:ea:61:2a:0f:d8:4b:53:9a:39:2d:e3:f6:0c:ac:
e0:92:45:f0:51:69:f8:64:27:5f:a9:94:ce:b3:f4:
7c:ce:74:11:4b:0c:fc:0c:6a:3e:89:2d:11:71:ea:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:86:19:D2:F3:73:EE:AE:05:E0:88:09:34:58:51:2E:C7:A6:DF:5A
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1f:07:51:7d:f4:d4:69:ac:f7:df:52:fc:2f:f6:25:18:1b:
73:1a:14:1e:61:a6:d3:07:73:b2:e4:2e:84:e3:cc:5d:d9:40:
6c:7f:b1:e5:11:86:9f:ca:70:0b:55:5d:18:fb:79:da:20:30:
2d:96:16:97:29:5a:6f:78:9e:8e:b2:52:24:47:f8:e3:62:bd:
78:80:27:1d:8e:4f:f3:c9:c9:2c:29:7b:22:48:01:34:25:27:
ed:9c:79:01:87:ed:48:7a:89:c3:59:fd:54:67:6b:e0:7a:4b:
38:ef:59:cb:c5:f3:2f:39:1a:e3:08:37:8a:f9:6e:06:46:94:
e3:55:a9:ac:fa:0f:a3:41:47:59:2f:47:4d:fc:7a:7a:62:c6:
8b:51:52:0c:f0:1c:9d:57:3c:ed:ef:08:89:aa:f6:19:33:5c:
91:8f:2c:51:a7:b5:24:b6:2f:88:18:fd:a4:10:36:a8:bd:0c:
eb:b7:fa:e4:f6:7b:d4:a9:cd:dc:fc:80:e1:49:a0:a1:74:94:
32:90:b9:1c:6b:1e:1c:51:5e:bd:a4:a1:df:2e:fe:dc:ae:10:
e0:8f:ec:50:34:a0:a2:56:dc:22:6d:c1:86:a2:82:91:98:98:
e3:8c:f3:c8:b7:f3:2e:08:93:a7:70:43:dc:9f:29:a9:15:88:
b6:7e:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 01:49:55 2025 by rpki-client