Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier: F/WDX1V3QbOzst4JE9GACs0cOFs4uU2CtTiXwFNt/5Y=
Subject key identifier: 45:68:B5:B2:35:AB:72:42:48:80:FF:83:FB:AA:62:0F:F0:D5:FC:A2
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 01963F8B5956C0616E51ED0E6486CCA6A93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number: 01D6
Signing time: Wed 16 Apr 2025 17:00:19 +0000
Manifest this update: Wed 16 Apr 2025 17:00:19 +0000
Manifest next update: Thu 17 Apr 2025 17:00:19 +0000
Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: bTX56oVmKaGJ482bD8wHf9NZgiAcJScXqKAgNvQa0XM=)
2: VHRVXn6aDGinTjiE7BA05enfH2Q.roa (hash: HWebi466PogM3Mfy4s/kKB9Ol8sTTEX1NAe07QPFw7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:59:56:c0:61:6e:51:ed:0e:64:86:cc:a6:a9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: Apr 16 17:00:19 2025 GMT
Not After : Apr 17 17:00:19 2025 GMT
Subject: CN=4568b5b235ab72424880ff83fbaa620ff0d5fca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:30:cd:f5:54:fa:3e:9e:db:b1:90:0c:a4:
a1:bc:7a:4d:17:7b:9e:7f:77:7d:c9:27:19:7d:78:
90:7f:96:7a:23:cb:42:55:2c:13:78:c2:b0:79:d8:
59:b7:6f:bf:7e:b5:f6:32:aa:80:25:c2:21:d9:be:
54:37:52:85:99:c9:53:a5:92:f8:f7:dd:e8:e8:5f:
f8:c8:c9:a3:13:d2:79:ae:0d:df:d9:9b:25:6b:84:
89:87:4b:6d:5f:9f:d1:39:4e:0c:d5:b0:75:e9:bd:
da:f6:a1:01:74:87:af:61:55:2a:67:18:e9:10:f6:
fd:61:87:3b:ab:d4:05:50:fa:f5:0c:e8:af:a3:d2:
71:0d:e7:b3:fb:8b:16:52:f9:07:92:e4:e3:b0:a0:
57:fd:86:a4:fa:03:39:38:10:7a:39:77:7e:51:e3:
e3:6d:6d:52:ea:d3:9d:b8:80:d3:5e:a6:3b:97:84:
36:b9:da:f9:65:ee:62:7c:46:49:4b:dd:47:40:71:
7a:f5:bf:6c:b1:ba:ec:03:18:b7:af:15:6a:e2:00:
99:2c:4d:0f:29:89:27:d6:f0:0f:81:f7:6e:3f:b2:
7f:49:c8:c0:b2:ab:b5:8d:ee:e2:6d:83:43:20:50:
05:74:0b:51:a0:ef:63:6d:84:4e:f9:1f:2e:8f:8b:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:B5:B2:35:AB:72:42:48:80:FF:83:FB:AA:62:0F:F0:D5:FC:A2
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:57:cd:8c:1f:94:51:51:c1:af:d5:f5:cd:e7:d2:21:0b:e3:
da:8a:03:26:13:88:88:d1:b3:cc:fc:1f:50:13:81:e5:ec:ef:
fb:19:26:0e:ac:c3:37:1b:d2:5c:a3:5f:89:89:39:8d:35:b8:
e5:18:5b:49:36:05:f5:79:05:e6:fb:06:6f:e4:30:eb:9b:3a:
a1:55:6c:03:d5:64:a3:ea:23:5e:60:47:b8:48:7f:68:86:96:
ac:05:bb:c5:df:8a:6d:61:8f:f8:c2:07:be:ac:4c:f8:6b:25:
45:74:d0:08:39:d0:c2:d9:7d:0b:ff:73:cd:35:f2:4a:50:77:
e4:ee:3f:c0:c8:b6:3c:df:d2:59:5b:e7:d5:24:48:fd:31:53:
c9:60:00:dd:0a:e3:f7:94:a5:54:f9:32:0f:b8:71:ab:0e:a7:
e8:2a:66:f3:86:9c:c5:9f:6e:4f:b3:d6:9a:16:cc:b3:65:65:
e6:68:0b:ce:cc:fe:1a:89:c3:1a:f8:74:f9:af:ab:10:ad:54:
e3:0f:a7:47:43:82:5e:bf:af:54:29:6c:5b:96:87:53:06:e6:
1b:3b:4d:d5:d6:94:98:28:73:e5:89:0b:15:91:65:17:49:1c:
94:19:b2:77:a5:f9:a2:7e:82:25:22:9f:3d:a0:9a:c0:85:1b:
de:d7:f8:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i1lWwGFuUe0OZIbMpqk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx
MjYwMTgwHhcNMjUwNDE2MTcwMDE5WhcNMjUwNDE3MTcwMDE5WjAzMTEwLwYDVQQD
Eyg0NTY4YjViMjM1YWI3MjQyNDg4MGZmODNmYmFhNjIwZmYwZDVmY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbYwzfVU+j6e27GQDKShvHpNF3ue
f3d9yScZfXiQf5Z6I8tCVSwTeMKwedhZt2+/frX2MqqAJcIh2b5UN1KFmclTpZL4
993o6F/4yMmjE9J5rg3f2Zsla4SJh0ttX5/ROU4M1bB16b3a9qEBdIevYVUqZxjp
EPb9YYc7q9QFUPr1DOivo9JxDeez+4sWUvkHkuTjsKBX/Yak+gM5OBB6OXd+UePj
bW1S6tOduIDTXqY7l4Q2udr5Ze5ifEZJS91HQHF69b9ssbrsAxi3rxVq4gCZLE0P
KYkn1vAPgfduP7J/ScjAsqu1je7ibYNDIFAFdAtRoO9jbYRO+R8uj4teYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVotbI1q3JCSID/g/uqYg/w1fyiMB8GA1UdIwQY
MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct
MjliM2UxMTFkY2VjLzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj
LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlfNjB+U
UVHBr9X1zefSIQvj2ooDJhOIiNGzzPwfUBOB5ezv+xkmDqzDNxvSXKNfiYk5jTW4
5RhbSTYF9XkF5vsGb+Qw65s6oVVsA9Vko+ojXmBHuEh/aIaWrAW7xd+KbWGP+MIH
vqxM+GslRXTQCDnQwtl9C/9zzTXySlB35O4/wMi2PN/SWVvn1SRI/TFTyWAA3Qrj
95SlVPkyD7hxqw6n6Cpm84acxZ9uT7PWmhbMs2Vl5mgLzsz+GonDGvh0+a+rEK1U
4w+nR0OCXr+vVClsW5aHUwbmGztN1daUmChz5YkLFZFlF0kclBmyd6X5on6CJSKf
PaCawIUb3tf44w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:57:14 2025 by rpki-client