Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
File: AMAJiEz5L9xqDS6hJ7619MyMDcc.mft (raw, json)
Hash identifier: 8X8dMPRbcGphug3V/upeC+dMJGiHG4PuypJLs3CXh3Y=
Subject key identifier: 52:83:65:8F:EA:DB:70:54:74:2E:70:01:14:A2:98:EA:F1:ED:1A:55
Authority key identifier: 00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7
Certificate issuer: /CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7
Certificate serial: 019A7112EBAA853C14D064292E3D7F47CBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
Manifest number: 167F
Signing time: Tue 11 Nov 2025 04:00:56 +0000
Manifest this update: Tue 11 Nov 2025 04:00:56 +0000
Manifest next update: Wed 12 Nov 2025 04:00:56 +0000
Files and hashes: 1: AMAJiEz5L9xqDS6hJ7619MyMDcc.crl (hash: 6hjxbsf5AvB0knfhkCjEy7jem7pPOvLKujchdrXkjF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:eb:aa:85:3c:14:d0:64:29:2e:3d:7f:47:cb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7
Validity
Not Before: Nov 11 04:00:56 2025 GMT
Not After : Nov 12 04:00:56 2025 GMT
Subject: CN=5283658feadb7054742e700114a298eaf1ed1a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:1d:9e:77:ef:6a:36:8a:a0:0f:b0:83:c9:
dc:16:de:f4:ff:ad:ce:71:13:79:f4:e7:07:5d:79:
50:92:32:8e:05:2a:2d:d7:e8:79:f4:7e:0c:e6:21:
d6:a9:ae:26:fd:6b:6f:41:4c:10:3f:5d:bc:c0:62:
3b:43:33:c9:86:3f:c7:4f:53:86:34:5b:47:c6:7c:
0f:e6:13:3c:47:8f:5c:0c:ef:60:01:47:2e:4b:0f:
33:9e:73:0f:2f:87:1a:dd:bb:cd:a4:c1:7c:9d:41:
1b:8f:c7:1b:11:e4:67:e1:62:01:87:8b:86:c6:c8:
6c:a2:29:16:31:e8:96:da:84:31:fd:38:80:c7:bc:
74:ef:78:74:ae:f7:69:1f:1a:e2:27:aa:35:d6:6a:
4c:c6:f1:c6:01:ab:a8:7d:89:eb:99:de:0d:27:30:
15:d4:76:10:e4:ad:18:c4:99:17:b5:2c:f3:cc:03:
bc:71:ba:ff:de:f1:79:44:6d:ef:89:8d:95:c9:99:
c4:82:f2:b9:ec:e0:77:7f:a3:6a:6b:e7:dd:8c:93:
c4:6e:f2:f1:a0:e1:5b:76:7f:4a:fe:76:38:37:0b:
c0:ff:ef:00:20:fa:ab:65:14:a0:c9:e5:6f:27:55:
36:21:32:02:54:2f:9e:32:6d:d5:32:84:6b:2a:45:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:65:8F:EA:DB:70:54:74:2E:70:01:14:A2:98:EA:F1:ED:1A:55
X509v3 Authority Key Identifier:
keyid:00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f7:08:93:3c:bc:35:0c:62:c7:3c:ca:1e:46:eb:7f:dd:d6:
7c:59:10:1c:24:5e:91:a1:55:fb:20:31:5d:ab:fc:2a:9f:1e:
13:65:c2:03:52:f2:e5:c7:34:3b:9e:3a:25:78:e1:e7:c7:45:
ba:b7:d6:36:c9:50:f0:dc:b5:77:50:bf:56:9f:1e:e5:18:8c:
e2:aa:8a:e2:11:54:08:3e:39:f1:96:e5:c2:a4:36:9b:80:aa:
65:71:d2:99:52:b1:cb:5d:e5:25:ea:1e:33:01:c7:26:c2:e6:
ee:1c:cc:8e:bc:06:e3:cb:9f:06:0c:57:a5:41:33:9c:8a:c8:
98:19:30:ae:34:2c:2f:63:9d:87:52:31:30:ea:7f:d9:28:5a:
5e:89:f5:74:e8:3d:f5:b4:ee:d5:bb:97:5d:dc:77:87:cb:39:
ec:c6:ac:1d:97:47:24:5b:26:8c:af:69:c2:04:c5:57:91:98:
ad:66:8c:13:1c:bc:82:8a:09:c5:aa:a1:79:40:7f:df:cc:1f:
f2:bd:d4:af:39:28:97:cd:61:9e:4e:67:29:4f:e1:6c:ef:5d:
14:4b:04:d7:a0:9a:03:d2:2d:e3:63:bd:aa:99:51:42:b7:77:
1a:20:31:0e:d6:cb:5d:f4:eb:5f:fa:4b:40:82:a7:dc:0f:db:
2f:4a:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:22 2025 by rpki-client