Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: sJ906CpqcgccTdku6SWgyjHpQJUqBy4zhEGzfEpQ0Go=
Subject key identifier: 11:0F:7F:30:D1:B7:AA:3F:D6:1F:CD:E1:65:99:CD:C0:26:D7:7D:56
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 0197488C7C389FCD5F8F80A69CF80B3E5BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 1282
Signing time: Sat 07 Jun 2025 04:00:55 +0000
Manifest this update: Sat 07 Jun 2025 04:00:55 +0000
Manifest next update: Sun 08 Jun 2025 04:00:55 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: mdxvblwQYwJVToqJIIrgfQq8Stu/Fd2B4qRTqYZ0Tm4=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:7c:38:9f:cd:5f:8f:80:a6:9c:f8:0b:3e:5b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Jun 7 04:00:55 2025 GMT
Not After : Jun 8 04:00:55 2025 GMT
Subject: CN=110f7f30d1b7aa3fd61fcde16599cdc026d77d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:17:36:fa:5d:aa:6c:90:5a:5b:fb:ee:bf:
07:ea:38:9a:a3:34:c2:5b:04:ba:8e:97:b2:a9:75:
f4:aa:1a:c1:07:ca:d1:b6:23:d7:cb:c9:8e:fc:d5:
7e:35:3b:d8:c6:1c:9c:a6:00:01:c8:c9:00:38:66:
04:14:01:9f:b7:dd:7f:e6:cd:49:11:98:3f:96:ca:
79:bb:3b:69:82:13:ab:db:4d:45:33:1f:34:ae:fb:
65:77:30:4b:a0:6d:75:2d:80:b4:72:d4:41:c4:10:
c2:f3:22:12:22:4f:5e:55:40:36:6f:8f:ec:ec:32:
56:23:23:c4:69:3a:c7:28:88:33:01:d8:d8:b0:58:
55:43:00:45:14:4e:54:1e:fc:21:bd:f0:5c:47:64:
2c:f0:a8:b4:ee:e5:77:1a:da:2e:85:11:1a:29:2b:
3c:53:ea:93:70:34:8a:96:34:e1:6f:59:42:b4:c5:
c2:9e:e5:1d:23:b3:24:7f:ab:79:06:a1:0b:2a:8f:
c2:3f:e3:79:10:06:a2:a7:0f:9f:aa:c1:57:8e:4b:
41:20:49:ec:ac:fd:b0:e4:40:50:56:94:e5:81:12:
40:19:02:28:7d:e2:a0:7b:99:0d:84:5f:a7:54:88:
f1:c4:9c:6f:12:0e:a9:71:79:3f:db:ce:ae:99:9f:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:7F:30:D1:B7:AA:3F:D6:1F:CD:E1:65:99:CD:C0:26:D7:7D:56
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:c1:68:7e:6f:f5:16:d1:20:4c:aa:6d:2a:e0:a3:0c:56:
b0:e7:a7:8b:da:55:c9:1d:0c:28:55:87:e5:61:6e:e1:cb:dc:
86:97:a5:db:d5:4d:cf:c3:6e:de:fa:03:58:e0:a2:0a:10:91:
0f:a5:8f:a1:fd:a9:50:7f:3d:ac:20:f7:36:4a:f7:e3:e4:9e:
00:e5:80:e8:4e:2d:b8:b2:a7:61:1d:b7:32:d5:e9:2c:98:0a:
34:75:b8:66:43:58:aa:ee:5e:88:e5:70:af:f8:37:e9:f9:e7:
95:30:3d:09:9d:07:43:50:60:df:eb:de:d9:2a:3b:65:28:a2:
da:66:d5:89:56:e8:a1:6a:ed:11:9d:04:45:13:39:c5:52:20:
5d:e6:6e:05:f0:7b:fb:56:92:8d:90:e4:99:77:c9:06:46:95:
0a:4a:45:d4:cd:62:3a:3f:53:ef:d3:ff:cb:de:c4:03:b2:47:
8d:26:49:ba:75:6d:6f:53:a4:98:5a:a5:e2:ff:ac:ff:54:38:
36:e6:74:92:d2:9b:49:54:57:3a:c0:b4:0d:3e:f7:61:73:bc:
00:0f:ce:88:7d:9f:02:d0:72:0e:dd:59:3a:c3:c6:b7:f4:02:
f5:1d:a1:d5:b1:b2:f2:cd:38:69:ed:c4:fe:74:2c:7e:d2:df:
b3:83:aa:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjHw4n81fj4CmnPgLPlvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj
NDZjZmQwHhcNMjUwNjA3MDQwMDU1WhcNMjUwNjA4MDQwMDU1WjAzMTEwLwYDVQQD
EygxMTBmN2YzMGQxYjdhYTNmZDYxZmNkZTE2NTk5Y2RjMDI2ZDc3ZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1gXNvpdqmyQWlv77r8H6jiaozTC
WwS6jpeyqXX0qhrBB8rRtiPXy8mO/NV+NTvYxhycpgAByMkAOGYEFAGft91/5s1J
EZg/lsp5uztpghOr201FMx80rvtldzBLoG11LYC0ctRBxBDC8yISIk9eVUA2b4/s
7DJWIyPEaTrHKIgzAdjYsFhVQwBFFE5UHvwhvfBcR2Qs8Ki07uV3GtouhREaKSs8
U+qTcDSKljThb1lCtMXCnuUdI7Mkf6t5BqELKo/CP+N5EAaipw+fqsFXjktBIEns
rP2w5EBQVpTlgRJAGQIofeKge5kNhF+nVIjxxJxvEg6pcXk/286umZ+NdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEPfzDRt6o/1h/N4WWZzcAm131WMB8GA1UdIwQY
MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt
YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0
LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMk/BaH5v
9RbRIEyqbSrgowxWsOeni9pVyR0MKFWH5WFu4cvchpel29VNz8Nu3voDWOCiChCR
D6WPof2pUH89rCD3Nkr34+SeAOWA6E4tuLKnYR23MtXpLJgKNHW4ZkNYqu5eiOVw
r/g36fnnlTA9CZ0HQ1Bg3+ve2So7ZSii2mbViVbooWrtEZ0ERRM5xVIgXeZuBfB7
+1aSjZDkmXfJBkaVCkpF1M1iOj9T79P/y97EA7JHjSZJunVtb1OkmFql4v+s/1Q4
NuZ0ktKbSVRXOsC0DT73YXO8AA/OiH2fAtByDt1ZOsPGt/QC9R2h1bGy8s04ae3E
/nQsftLfs4OqNA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:14 2025 by rpki-client