Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: UJcPkFqmGWs95rYctmr075y/+ay2v7j6QDhB35NRsu4=
Subject key identifier: A0:20:FC:93:70:E6:1B:E8:C2:C7:D8:8D:94:1F:77:46:A5:51:66:3E
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 0197B5C502552D40FDC92AC2C451E6F96627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0D5C
Signing time: Sat 28 Jun 2025 09:01:16 +0000
Manifest this update: Sat 28 Jun 2025 09:01:16 +0000
Manifest next update: Sun 29 Jun 2025 09:01:16 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: Vcc8qr90mXp10pRvkXEuXjMp2has1fZjVnL4DMBOax4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:02:55:2d:40:fd:c9:2a:c2:c4:51:e6:f9:66:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jun 28 09:01:16 2025 GMT
Not After : Jun 29 09:01:16 2025 GMT
Subject: CN=a020fc9370e61be8c2c7d88d941f7746a551663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:9c:31:75:79:de:5d:8c:69:e1:74:b0:46:
5d:78:61:d3:75:3e:8e:57:40:21:72:67:c3:94:ee:
dc:45:0a:05:96:bd:38:46:bc:5a:34:3a:33:5f:c8:
3d:14:55:56:00:62:16:ce:70:29:89:bd:2c:c2:64:
6e:c8:0e:3d:f7:53:0a:f6:4a:42:90:67:d4:0b:90:
81:20:3b:f6:31:1f:d7:01:90:ee:85:68:09:ef:9c:
a5:98:36:50:b1:0c:58:63:5c:3a:23:36:d2:ea:83:
be:fb:ea:17:da:d0:39:13:87:bf:26:9c:03:09:d4:
39:63:f1:26:e2:fd:bd:1a:fa:c2:eb:79:b0:35:ca:
37:cc:be:ac:d5:ee:c2:b1:82:de:1d:cd:97:48:c2:
e2:ef:72:01:4f:07:9d:22:69:44:c4:5e:c3:76:d3:
49:6b:ef:23:b0:0d:82:e8:cc:83:43:74:6b:88:7d:
c2:59:28:6f:aa:77:43:d7:90:6b:c8:cb:c8:47:b0:
0b:0e:e2:3b:dd:8c:53:4c:51:ec:cb:e3:14:72:c3:
27:0d:15:01:7a:90:12:af:31:db:47:60:ff:de:84:
82:d6:6b:c2:3d:47:a9:01:c2:ce:c6:9f:d2:5b:89:
ce:7f:8a:a9:ee:70:6d:70:a9:2d:42:a9:0f:20:7b:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:20:FC:93:70:E6:1B:E8:C2:C7:D8:8D:94:1F:77:46:A5:51:66:3E
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3b:11:35:71:d3:4e:3e:86:55:b0:89:be:c9:84:62:23:ae:
6a:05:c1:24:17:04:66:71:d6:52:ac:4a:2b:09:0a:02:c8:36:
d0:81:c7:45:0f:56:54:73:47:75:65:c6:58:38:44:2d:b7:a0:
77:ca:26:47:50:6f:4c:6c:49:c3:6b:6a:2f:61:5d:74:f3:f9:
c2:99:59:df:22:02:33:21:e1:a6:b9:92:b3:e9:e1:cc:db:d3:
4e:d3:d4:a9:16:91:92:04:d8:d0:75:77:92:b2:48:18:ff:37:
34:0e:47:ec:28:d3:2e:28:68:f1:93:d0:fb:88:77:55:22:3c:
b9:8a:33:d3:c4:29:0c:56:23:44:f9:14:1a:98:f8:43:2c:22:
2c:c4:5c:88:3f:68:99:dd:8b:be:27:b1:a5:ca:17:1a:21:41:
60:cf:0c:cc:95:f4:96:03:96:c9:ab:2d:3a:96:b8:0c:36:8f:
84:b0:4e:c2:dc:e4:6c:32:1e:39:e9:ef:f0:a8:47:ec:e6:69:
92:35:0d:f7:f2:a6:45:1f:b9:bf:8f:3e:d3:ad:88:42:a9:2d:
81:a9:9d:92:81:ee:a6:f7:ba:22:c1:cf:89:78:92:96:09:f1:
84:78:42:9f:9c:6e:1f:57:79:50:aa:4e:d1:4e:0b:a7:76:63:
3d:19:b5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:05 2025 by rpki-client