Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
File: AMAJiEz5L9xqDS6hJ7619MyMDcc.mft (raw, json)
Hash identifier: eOLp9Q8IUq5U2HfwcVpYOQdjw41S1CzNS3EpNh7jtd0=
Subject key identifier: 03:D9:6E:79:07:69:9A:D1:21:B3:5F:1E:BC:0F:83:D3:DB:0F:0A:2E
Authority key identifier: 00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7
Certificate issuer: /CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7
Certificate serial: 019922FA9B3425D7DDB5795CA002E7465F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
Manifest number: 15D2
Signing time: Sun 07 Sep 2025 07:01:12 +0000
Manifest this update: Sun 07 Sep 2025 07:01:12 +0000
Manifest next update: Mon 08 Sep 2025 07:01:12 +0000
Files and hashes: 1: AMAJiEz5L9xqDS6hJ7619MyMDcc.crl (hash: 3uaOCufK/ZhXRUAm36guidjeg/5ZzRRAzap9BwO1txk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9b:34:25:d7:dd:b5:79:5c:a0:02:e7:46:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c009884cf92fdc6a0d2ea127beb5f4cc8c0dc7
Validity
Not Before: Sep 7 07:01:12 2025 GMT
Not After : Sep 8 07:01:12 2025 GMT
Subject: CN=03d96e7907699ad121b35f1ebc0f83d3db0f0a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:f6:03:46:45:6c:44:ad:2b:72:0d:19:29:
32:0b:92:34:a0:a4:ea:74:26:a1:eb:7f:56:f8:09:
b4:df:ae:08:bf:cf:5e:87:95:c8:7d:e7:bd:aa:81:
6d:92:80:f5:3a:28:bb:7b:6d:51:e8:6a:53:2d:16:
00:cc:7f:f4:7e:13:a4:fb:9c:2d:b8:32:76:df:90:
4a:93:c9:ac:c9:e0:f4:bd:79:53:4d:64:e9:22:6d:
a8:47:a0:dd:f5:cb:32:f4:30:b0:19:e1:1c:68:70:
ca:80:56:6f:fc:73:7c:1d:4d:89:ee:ef:be:ea:8d:
2c:6d:3f:64:87:a2:8b:8c:a8:d6:0f:a7:02:04:62:
e6:fb:5d:47:24:d5:42:83:17:d2:ec:22:da:59:23:
d2:79:81:b5:14:87:1b:70:04:e3:aa:61:da:24:73:
0b:f2:7e:44:0c:95:4f:f4:59:30:3a:10:2e:19:63:
78:60:88:30:eb:ea:b9:25:60:4c:a0:08:f1:63:83:
97:12:2f:ed:98:99:3a:65:8c:0e:16:e9:8f:9f:0a:
1e:75:55:3e:b1:c2:e8:67:4a:5c:7e:5a:89:b2:55:
3a:58:99:aa:4b:99:0d:21:69:23:9e:4e:3f:20:2e:
66:58:6f:7b:bf:18:c2:46:40:6a:93:a4:aa:16:df:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:6E:79:07:69:9A:D1:21:B3:5F:1E:BC:0F:83:D3:DB:0F:0A:2E
X509v3 Authority Key Identifier:
keyid:00:C0:09:88:4C:F9:2F:DC:6A:0D:2E:A1:27:BE:B5:F4:CC:8C:0D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMAJiEz5L9xqDS6hJ7619MyMDcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/277548-ddbf-409a-82ce-dc66cb92967c/1/AMAJiEz5L9xqDS6hJ7619MyMDcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:49:c3:22:cb:04:71:7c:fa:a8:7d:0b:5a:9a:2b:be:61:ae:
9a:66:5c:75:e1:03:c5:b6:ca:b2:c1:1c:60:56:c4:c7:82:d8:
35:ea:77:69:49:cc:b8:32:1b:0b:1a:da:ba:42:49:1a:f4:38:
ff:74:98:09:82:b2:9e:c0:d8:3e:4e:94:39:01:7b:7a:7e:36:
1d:f0:0c:2f:d2:92:2d:fc:9a:60:d4:c3:45:bd:e5:e8:3d:e2:
42:0b:eb:77:e9:84:35:a2:05:a8:74:c0:f5:5d:ba:e5:95:0a:
25:7a:65:97:24:e8:b3:11:f7:24:a8:16:49:8e:3e:9d:24:43:
59:ec:af:c2:80:64:55:6b:8d:15:ff:94:fc:0e:33:b6:90:35:
df:a2:ef:46:d1:02:9a:64:8a:a5:c2:dc:86:37:83:2c:60:2d:
e7:82:ff:45:30:ee:8f:be:a9:38:77:9a:12:16:6f:ef:8f:f1:
32:54:c1:25:31:4b:e5:a8:66:31:6d:a0:c0:5a:12:ea:4a:08:
6d:4c:3f:bf:21:a8:53:6b:ec:12:df:92:64:75:f3:9c:3a:db:
17:63:e0:98:7a:53:1f:a4:95:4a:93:38:5a:90:11:75:86:00:
9d:7a:87:56:78:ed:f6:e1:fe:aa:3c:30:3d:76:7a:be:58:05:
23:90:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:58 2025 by rpki-client