Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier: mEkfGhw0woTURce5Kmcb999gdUROc+humvOkhdtvEMU=
Subject key identifier: 1F:7F:46:B2:36:0D:12:F1:82:18:CA:3D:3C:2F:01:D0:60:BA:14:56
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 019A2409C97B4EC0DF0060B58077EF724A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number: 03DA
Signing time: Mon 27 Oct 2025 05:00:12 +0000
Manifest this update: Mon 27 Oct 2025 05:00:12 +0000
Manifest next update: Tue 28 Oct 2025 05:00:12 +0000
Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: pig1dv632BLPyXeAzL+lTi7xSsYYVr1sgEyXYGMlQqQ=)
2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:c9:7b:4e:c0:df:00:60:b5:80:77:ef:72:4a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: Oct 27 05:00:12 2025 GMT
Not After : Oct 28 05:00:12 2025 GMT
Subject: CN=1f7f46b2360d12f18218ca3d3c2f01d060ba1456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:fa:03:59:4b:0d:ee:2f:6b:8d:fb:b8:85:
e1:49:55:b7:ed:14:07:e4:67:e5:10:8e:94:1b:48:
0e:6e:06:dc:15:da:82:bc:c4:8e:90:71:cc:13:09:
aa:23:8d:7d:75:5e:62:d3:64:71:7c:39:55:96:aa:
e8:59:82:df:ad:cf:d8:3b:e3:27:a6:38:70:54:15:
46:52:a6:b0:4f:9e:b6:5b:fc:fa:bb:69:83:31:1e:
dd:b0:9d:1e:e8:eb:ab:1b:74:17:02:ce:71:99:df:
dd:0c:6c:ec:34:5c:a6:6f:5d:64:9d:cc:f1:96:b2:
f7:e2:fd:8d:3a:22:f6:0c:99:d8:76:82:c5:62:0d:
ee:91:2d:6a:9b:54:9a:a0:c3:15:59:a4:90:2d:e1:
cc:ef:c9:b0:af:4a:13:06:20:7f:0f:de:c1:2b:6e:
b9:a8:ee:65:e4:21:b0:fa:bc:08:66:9e:1c:c5:69:
c4:bd:93:b4:ce:c0:d4:83:bf:59:c2:8f:dc:ef:86:
06:68:1f:f3:30:14:02:da:b8:cc:cc:a4:5f:7e:a6:
eb:71:d0:04:68:fc:f2:38:24:b9:94:6d:93:47:4a:
35:1f:84:8a:86:06:c2:8f:ea:54:37:20:79:b7:a4:
54:5c:7c:57:46:ab:3d:fa:cc:05:59:f1:c5:04:0a:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:46:B2:36:0D:12:F1:82:18:CA:3D:3C:2F:01:D0:60:BA:14:56
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9d:8e:6c:a8:80:07:0c:23:40:38:07:f8:4a:be:d0:5f:43:
92:ef:73:49:8d:f0:e2:bb:32:e3:b1:09:23:5c:43:4c:1d:ff:
49:a0:ab:e0:f9:68:86:bf:34:d5:d6:7a:ae:56:00:02:19:43:
c3:15:e7:b5:e4:e5:4e:14:d0:85:41:25:53:a2:67:94:e6:10:
c4:d9:c7:9c:e0:bc:56:55:70:85:aa:1b:9b:aa:ea:76:cf:36:
58:66:6d:66:72:e9:f0:5c:30:ae:6b:9c:10:83:d4:0b:e4:0b:
f9:8c:29:4b:41:ba:38:99:57:0a:1d:92:02:37:51:38:0f:77:
ae:8f:5f:0c:2c:89:7f:a1:7b:28:e0:d6:62:ea:0a:64:ac:c3:
5f:a5:e5:d7:20:14:02:30:63:f2:b4:1b:76:1d:f5:4a:f7:c3:
8f:f0:48:9c:10:46:e1:0c:39:65:76:2f:f7:f0:fe:41:07:f5:
ee:fa:13:bb:1e:5b:c2:ef:79:3e:49:3e:96:27:5c:13:24:fb:
df:96:b7:dc:92:f0:56:4c:d9:24:93:40:9f:bc:a2:6d:0b:d6:
d8:6f:72:14:0e:46:69:c8:f6:db:73:7a:be:e9:b5:d4:8b:15:
47:f3:07:23:c7:77:48:ce:ab:8e:9f:d0:83:dd:5b:3b:8a:29:
05:64:a0:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokCcl7TsDfAGC1gHfvckpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx
MjYwMTgwHhcNMjUxMDI3MDUwMDEyWhcNMjUxMDI4MDUwMDEyWjAzMTEwLwYDVQQD
EygxZjdmNDZiMjM2MGQxMmYxODIxOGNhM2QzYzJmMDFkMDYwYmExNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKP6A1lLDe4va437uIXhSVW37RQH
5GflEI6UG0gObgbcFdqCvMSOkHHMEwmqI419dV5i02RxfDlVlqroWYLfrc/YO+Mn
pjhwVBVGUqawT562W/z6u2mDMR7dsJ0e6OurG3QXAs5xmd/dDGzsNFymb11knczx
lrL34v2NOiL2DJnYdoLFYg3ukS1qm1SaoMMVWaSQLeHM78mwr0oTBiB/D97BK265
qO5l5CGw+rwIZp4cxWnEvZO0zsDUg79Zwo/c74YGaB/zMBQC2rjMzKRffqbrcdAE
aPzyOCS5lG2TR0o1H4SKhgbCj+pUNyB5t6RUXHxXRqs9+swFWfHFBArjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9/RrI2DRLxghjKPTwvAdBguhRWMB8GA1UdIwQY
MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct
MjliM2UxMTFkY2VjLzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj
LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ2ObKiA
BwwjQDgH+Eq+0F9Dku9zSY3w4rsy47EJI1xDTB3/SaCr4Plohr801dZ6rlYAAhlD
wxXnteTlThTQhUElU6JnlOYQxNnHnOC8VlVwhaobm6rqds82WGZtZnLp8Fwwrmuc
EIPUC+QL+YwpS0G6OJlXCh2SAjdROA93ro9fDCyJf6F7KODWYuoKZKzDX6Xl1yAU
AjBj8rQbdh31SvfDj/BInBBG4Qw5ZXYv9/D+QQf17voTux5bwu95Pkk+lidcEyT7
35a33JLwVkzZJJNAn7yibQvW2G9yFA5Gacj223N6vum11IsVR/MHI8d3SM6rjp/Q
g91bO4opBWSgCg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:05 2025 by rpki-client