Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: NDtmtILlmPygneb5AkQjpamOyp80XxWSnkyjmTfrPtA=
Subject key identifier: FC:36:9F:59:A2:F3:74:53:F0:1C:29:A2:96:6B:AA:9D:9B:74:5B:D7
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019A0781047E165001417112A81C2A73B8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 13EE
Signing time: Tue 21 Oct 2025 16:01:27 +0000
Manifest this update: Tue 21 Oct 2025 16:01:27 +0000
Manifest next update: Wed 22 Oct 2025 16:01:27 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: jXny8DYl4lB+8CSrBhk3sjiMxFjCt/wEdd9uJQS1WG8=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:81:04:7e:16:50:01:41:71:12:a8:1c:2a:73:b8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Oct 21 16:01:27 2025 GMT
Not After : Oct 22 16:01:27 2025 GMT
Subject: CN=fc369f59a2f37453f01c29a2966baa9d9b745bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cc:f3:ee:a1:2f:d7:2f:0f:89:13:12:6a:9e:
c7:09:ab:78:59:24:df:9c:cd:aa:65:91:0d:e4:df:
f1:6c:d1:b3:5e:f3:72:3e:e0:d8:03:0b:e4:26:1a:
da:9d:a9:e7:54:d9:a6:43:19:c0:47:cb:38:30:87:
28:d5:17:26:bc:8f:0a:c4:fa:c7:d8:98:5a:12:f3:
a6:f5:86:31:b8:d0:d2:02:f1:db:57:41:01:fd:90:
64:b5:a2:6a:9f:16:fb:2f:b3:e5:c3:48:23:3a:fe:
a8:bf:c4:3f:3e:0e:c7:16:57:e8:1b:c3:c8:75:d0:
42:a2:4a:44:3e:cd:80:e9:0a:a0:9b:a1:7e:a4:34:
44:19:bc:02:8f:e5:5c:73:18:71:9d:4b:4c:3c:94:
96:d1:d1:54:41:c0:53:7e:bd:c8:42:f9:28:95:59:
08:c2:f3:54:5f:e3:f7:4c:7c:70:be:7b:a8:64:ac:
9b:82:6b:46:7b:c6:4b:96:ea:ab:e6:2e:e4:b4:81:
b7:c3:7e:4d:5c:c5:35:93:36:a1:88:59:fa:4e:12:
3c:d4:9a:42:34:5d:32:19:20:fc:a8:2a:78:1d:72:
a4:f8:23:8c:af:45:1a:67:0f:d0:26:bd:6c:e4:b8:
fa:f1:4c:c6:3c:e1:ed:7d:56:73:cc:b4:8a:80:06:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:36:9F:59:A2:F3:74:53:F0:1C:29:A2:96:6B:AA:9D:9B:74:5B:D7
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1c:b9:21:ea:7d:3b:c0:40:43:4b:1f:03:64:fe:04:cb:b2:
8a:ba:31:40:0d:10:48:9b:ba:81:e2:e7:47:70:97:49:36:32:
0e:5a:af:f5:0a:3f:d0:38:fa:0d:6b:c5:8b:7f:06:08:2f:95:
36:6b:e4:19:65:7f:8f:5e:bd:b9:7b:00:10:d6:7f:83:41:13:
08:c1:6e:09:4b:16:dd:cf:15:d5:74:16:25:38:33:c2:1f:c7:
50:75:54:21:ae:15:99:8e:65:97:7e:5a:44:86:d5:e1:42:e4:
88:9f:99:43:1f:5e:b9:32:37:7b:09:34:f4:e9:7a:9f:c1:1c:
42:81:58:c1:52:fb:c6:d7:89:ac:24:98:87:4d:33:37:f3:1d:
3a:fd:ed:a0:f4:f7:22:8b:6d:75:9f:1f:be:f2:b1:84:e5:1a:
01:38:ab:a1:a1:29:83:a3:4f:db:ff:0f:fc:d0:54:bb:82:c0:
91:fa:a9:b2:0c:b2:42:95:91:e7:78:13:37:b2:36:e6:98:09:
73:a7:65:39:10:51:7c:fc:c6:5a:2a:47:79:2d:82:e9:04:47:
99:a4:8b:68:89:4c:53:0b:74:b2:32:5c:1c:3a:cb:09:e4:15:
a6:7c:84:33:2d:3a:e1:bb:02:86:85:3c:de:8e:61:31:33:9b:
ee:a1:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:07:20 2025 by rpki-client