Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: sxsmfj2cnqBfnLpSaHztFSuOC/aw/xwHXy0yRLgcBjU=
Subject key identifier: BD:89:32:02:6C:83:0F:75:E8:08:B7:4A:D8:B8:72:56:AB:57:6E:90
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 019A02C77C63FE2488FF0712DF764DE10DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0E8D
Signing time: Mon 20 Oct 2025 18:00:19 +0000
Manifest this update: Mon 20 Oct 2025 18:00:19 +0000
Manifest next update: Tue 21 Oct 2025 18:00:19 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: if8EigzTTIjfMbziGy9boeuIQS9UY1CJprrxD8Gc8Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:7c:63:fe:24:88:ff:07:12:df:76:4d:e1:0d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Oct 20 18:00:19 2025 GMT
Not After : Oct 21 18:00:19 2025 GMT
Subject: CN=bd8932026c830f75e808b74ad8b87256ab576e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:23:7b:ae:6f:4b:4e:9b:2b:56:ae:88:3d:
7c:77:ad:af:0b:8e:86:5f:82:a3:c4:ba:a7:33:ea:
3e:3b:88:4c:0c:f5:e0:9c:ec:41:ec:a5:12:0d:ca:
ff:4d:2e:0f:6e:91:b8:db:b0:c3:cc:b0:06:df:bb:
ef:82:29:fa:36:55:8f:b5:1d:52:82:84:1f:fd:59:
85:e6:35:9f:30:06:b2:fc:cb:ab:19:95:67:79:e6:
5e:50:74:47:41:5e:80:ee:cb:91:21:eb:63:9c:79:
ff:15:3a:56:f7:20:2e:62:f3:4c:8d:ec:c6:d6:c6:
4e:0a:57:0b:6c:b5:19:90:bb:87:e2:69:68:61:56:
06:14:d4:61:01:a7:6c:cd:35:f2:ab:c7:66:c8:ca:
be:07:f6:58:9b:0c:9c:51:98:0e:52:81:f6:89:e3:
ac:41:83:e5:81:bf:f0:0a:d5:93:4f:c9:ba:c2:34:
ff:99:a4:a2:dc:45:e1:ac:f0:cf:c5:07:79:8e:e2:
6a:64:7c:50:7c:bd:6b:c2:92:59:4c:e5:1d:9f:cf:
80:9e:a8:14:22:77:28:cc:81:eb:49:ea:1b:d6:fa:
07:12:79:76:5f:e0:ea:3f:c9:0f:47:ba:2c:ae:7c:
09:30:7f:64:5a:75:d0:05:e0:c9:07:fc:df:d5:e6:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:32:02:6C:83:0F:75:E8:08:B7:4A:D8:B8:72:56:AB:57:6E:90
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fa:89:ba:23:43:5e:20:4e:00:9d:49:86:2f:41:c6:33:e6:
17:6b:a4:43:a8:7e:ec:ee:2a:7a:42:9a:6b:5d:17:5b:cd:d5:
55:3d:d2:2b:79:74:6e:16:67:41:63:98:85:0c:45:cf:c5:fe:
eb:8d:3e:40:03:d9:99:30:13:f3:1a:e1:55:2f:8f:8a:72:9f:
d4:1c:94:ed:66:8f:d6:46:b7:58:ff:e8:bf:58:f0:0c:31:93:
1b:b8:e1:1f:e6:87:40:40:02:e6:56:d6:2b:8f:0b:9f:03:a6:
4c:a9:a6:00:26:53:ec:7b:50:4f:3a:d1:8b:f5:37:16:15:fd:
49:e2:4e:6e:46:d3:42:d8:71:5f:4a:cf:c5:31:61:d8:ca:a9:
24:96:66:df:fd:ff:0c:e8:34:1d:21:02:79:d6:ee:39:92:fb:
08:fd:76:88:2b:72:33:70:d4:e2:95:37:52:55:ac:fd:31:3e:
74:4a:47:7b:e8:00:6f:00:22:02:09:56:d0:fc:07:e7:40:2c:
82:67:7c:49:70:2a:5a:95:60:02:22:45:54:d6:b2:7b:25:e0:
7d:1d:e4:4d:51:cb:da:ec:05:c6:4c:62:64:e8:ff:0d:15:39:
ec:5b:13:f0:8b:21:fa:72:8d:fe:d0:98:18:00:14:92:45:69:
be:9a:e8:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCx3xj/iSI/wcS33ZN4Q29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzZhZGY4ZWVjYWJjMTA1MmUxZjc4M2QzYmNlNGExYzVk
YjU0MTAwHhcNMjUxMDIwMTgwMDE5WhcNMjUxMDIxMTgwMDE5WjAzMTEwLwYDVQQD
EyhiZDg5MzIwMjZjODMwZjc1ZTgwOGI3NGFkOGI4NzI1NmFiNTc2ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv0je65vS06bK1auiD18d62vC46G
X4KjxLqnM+o+O4hMDPXgnOxB7KUSDcr/TS4PbpG427DDzLAG37vvgin6NlWPtR1S
goQf/VmF5jWfMAay/MurGZVneeZeUHRHQV6A7suRIetjnHn/FTpW9yAuYvNMjezG
1sZOClcLbLUZkLuH4mloYVYGFNRhAadszTXyq8dmyMq+B/ZYmwycUZgOUoH2ieOs
QYPlgb/wCtWTT8m6wjT/maSi3EXhrPDPxQd5juJqZHxQfL1rwpJZTOUdn8+AnqgU
IncozIHrSeob1voHEnl2X+DqP8kPR7osrnwJMH9kWnXQBeDJB/zf1eZkTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2JMgJsgw916Ai3Sti4clarV26QMB8GA1UdIwQY
MBaAFGjGrfjuyrwQUuH3g9O85KHF21QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYt
NDc3M2I2NjY5NzE2LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYtNDc3M2I2NjY5NzE2
LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvqJuiND
XiBOAJ1Jhi9BxjPmF2ukQ6h+7O4qekKaa10XW83VVT3SK3l0bhZnQWOYhQxFz8X+
640+QAPZmTAT8xrhVS+PinKf1ByU7WaP1ka3WP/ov1jwDDGTG7jhH+aHQEAC5lbW
K48LnwOmTKmmACZT7HtQTzrRi/U3FhX9SeJObkbTQthxX0rPxTFh2MqpJJZm3/3/
DOg0HSECedbuOZL7CP12iCtyM3DU4pU3UlWs/TE+dEpHe+gAbwAiAglW0PwH50As
gmd8SXAqWpVgAiJFVNayeyXgfR3kTVHL2uwFxkxiZOj/DRU57FsT8Ish+nKN/tCY
GAAUkkVpvpro1w==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:18:23 2025 by rpki-client