Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: kOCQuoatdsKdLBhUCVlihap5AYwzUsXoRQADAmowDbk=
Subject key identifier: 19:20:C4:A6:BE:90:30:F6:DF:E2:16:3F:5B:AF:C2:1B:99:39:6B:08
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 019A71B92B31D54E080BB4093905C9E25359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: ngrDIWDrYbNKaIhwUl5TL6ONGRkFBAA8axusx0POvto=)
2: ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa (hash: A+6pCmvRh21bff+k990m7MW26aQWM6C7J37zdRTRafw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2b:31:d5:4e:08:0b:b4:09:39:05:c9:e2:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=1920c4a6be9030f6dfe2163f5bafc21b99396b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:96:d7:a9:65:40:df:44:52:56:6b:16:ad:
19:6d:de:09:d6:3e:0a:e7:75:3c:4b:73:3f:ba:5c:
45:fa:4d:56:19:98:53:f5:a4:b0:5f:f2:17:25:8c:
0f:e1:dd:3f:56:35:44:03:e5:9e:41:74:58:0c:0f:
62:80:e6:0b:5d:e8:f4:16:e2:18:1b:b4:9a:29:7f:
fd:8b:48:17:16:30:73:b7:1b:53:28:2f:cc:e7:bb:
28:9f:08:64:b1:51:1a:3d:55:db:07:21:0c:37:71:
97:3b:cf:77:6e:e7:d3:be:24:8b:04:c4:54:a8:2b:
75:2a:b3:cf:f5:c9:5c:07:9e:1a:fd:59:25:60:28:
ef:05:0b:10:9a:52:7b:83:1b:7e:70:71:bb:28:03:
01:79:c1:6c:d2:ae:1b:ef:21:24:16:8d:86:ae:0e:
0d:91:c8:d1:fd:95:09:9a:39:b6:cb:8a:94:43:03:
75:fc:28:ec:69:1d:23:45:8e:55:40:e9:a8:21:27:
6d:58:3f:e0:aa:b9:01:d0:05:3e:4a:6b:51:c5:99:
8b:cb:63:29:c4:32:14:5f:4e:b1:01:61:4c:cd:de:
fc:30:ca:cf:c2:7b:b0:58:0f:70:53:30:be:7e:d1:
d0:9a:49:0b:f1:2c:5d:3a:44:25:61:86:7e:42:46:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:C4:A6:BE:90:30:F6:DF:E2:16:3F:5B:AF:C2:1B:99:39:6B:08
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:01:f4:f2:3c:f8:3e:47:f3:ce:7f:a2:7a:4b:47:e6:97:13:
53:67:14:89:a5:0a:8c:5f:35:f7:d5:fa:2c:8f:55:99:ba:81:
e9:a6:a4:30:fb:97:cd:38:15:cd:22:64:97:99:af:a8:f9:21:
f8:18:b0:8a:a6:c4:bb:7d:22:24:22:64:45:30:90:38:e0:c4:
a4:78:14:2c:70:43:f3:bb:88:91:f2:80:f9:10:78:46:06:18:
a5:b5:e1:db:43:24:24:e2:09:4f:ea:0c:32:72:57:90:dd:5b:
c0:2f:78:9d:1f:be:5a:21:cd:e6:b6:28:0f:d2:f9:74:8e:80:
17:34:ad:6d:d4:da:1a:42:e5:20:ca:44:4b:0e:d1:8d:b6:94:
e6:4a:23:98:ef:53:34:20:22:b5:ae:13:a7:d8:b6:dd:ad:6d:
d7:64:a0:4c:78:6d:4a:16:87:33:d2:9f:3b:48:67:47:e9:d9:
d6:f7:f7:4b:f2:61:81:13:c8:7a:36:49:5e:02:16:1c:81:7e:
3b:9c:68:73:0f:ae:5d:2d:2b:fb:56:a9:5e:db:9d:e9:d1:5b:
86:79:aa:eb:72:38:19:87:f3:91:d6:42:b9:07:e1:6c:2c:17:
9c:01:cc:5f:87:92:58:86:1a:f4:90:5a:c7:cc:fc:f3:c6:51:
37:f1:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:13 2025 by rpki-client