Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: x3W8Z2/ziyheLwRoCm+rorpI+Bvcq3iafjFXI56zKSA=
Subject key identifier: E0:FA:72:3C:91:54:EF:24:82:F3:D9:54:48:F0:30:A9:20:8B:46:CF
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 0198D773CBE75B2A53A8B9617DD29AE4A61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0DF2
Signing time: Sat 23 Aug 2025 15:02:26 +0000
Manifest this update: Sat 23 Aug 2025 15:02:26 +0000
Manifest next update: Sun 24 Aug 2025 15:02:26 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: ELRuY4Dl/If6WaHuzR1csFZkdjPdBm8ZkfkTEJI/R6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:cb:e7:5b:2a:53:a8:b9:61:7d:d2:9a:e4:a6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Aug 23 15:02:26 2025 GMT
Not After : Aug 24 15:02:26 2025 GMT
Subject: CN=e0fa723c9154ef2482f3d95448f030a9208b46cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:1c:39:d1:cf:f4:dc:3c:5c:1b:07:d7:6b:
0a:e3:c6:69:18:ba:5e:b7:79:26:1f:fe:8e:df:3b:
a3:80:72:66:31:9f:9b:77:c5:36:f5:00:02:7a:57:
b0:c0:04:4d:13:0f:df:a5:29:52:82:aa:2b:8c:ca:
a5:db:f8:73:04:53:a0:d0:a6:7e:b4:99:50:ce:74:
74:fb:63:36:7d:a7:ec:c3:a2:c7:68:87:44:c2:9c:
4c:16:b2:56:4c:a6:1f:96:cd:7c:4c:85:f6:53:b3:
1f:39:8c:c4:60:05:4f:0d:3a:8b:81:8e:ed:25:8f:
db:7c:9c:00:7b:f8:b3:b5:0a:ad:89:e4:67:7f:64:
a7:bf:80:d4:59:62:11:f7:1a:20:ab:c1:3e:c8:60:
b2:e2:0e:9a:4d:a3:29:cf:8b:30:b1:0c:c8:83:31:
2f:41:35:0a:2f:4d:77:09:dc:3d:93:0f:0f:fb:c8:
ab:aa:71:35:c8:09:e6:5d:56:be:7e:0c:83:c9:a5:
f5:99:a2:2b:40:3f:29:33:55:53:78:e7:16:30:d8:
f7:c8:fc:a1:7d:39:3a:f5:bf:5f:66:85:9d:5f:07:
15:cc:e5:e2:66:2e:92:19:22:a5:1d:6b:dd:ad:12:
91:ad:da:60:eb:02:06:c9:e5:8c:11:da:3d:9f:3c:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FA:72:3C:91:54:EF:24:82:F3:D9:54:48:F0:30:A9:20:8B:46:CF
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c9:bb:6f:be:cc:4b:05:ca:57:65:58:4d:20:b8:5b:8b:02:
53:85:e8:2b:e1:76:4e:1a:07:1a:7f:70:af:e5:87:53:19:0e:
1f:95:b1:7a:1c:0b:cd:28:70:b8:55:07:a7:79:2d:80:bc:bc:
31:83:40:21:06:cc:1e:74:1f:db:6b:99:83:51:0c:3e:90:ce:
b0:3e:e8:b8:05:8a:fa:12:5d:28:7f:32:47:d2:c4:b5:4b:82:
09:e1:3d:62:6f:eb:b1:6b:85:e6:b6:64:b5:38:63:78:dc:88:
d4:6c:47:4b:b5:94:2c:14:8d:21:e5:bd:80:e0:37:cf:33:1d:
e9:64:93:98:d7:53:65:55:b5:d4:cd:d7:4e:4f:07:3c:24:56:
3c:80:08:12:6c:d3:10:3e:d6:85:4a:2d:32:0d:98:c4:38:0a:
e9:56:e3:91:70:e8:da:3a:ef:73:c4:14:fc:14:13:8c:3b:03:
1d:e8:ba:56:63:f1:f3:c4:7d:db:b9:50:f0:77:72:6f:b4:c8:
19:02:17:21:e7:d1:ea:e5:a1:43:cd:47:62:59:60:03:9c:e3:
12:bc:ab:cc:9a:57:c9:db:13:e6:07:7d:8b:ca:71:d4:0e:2e:
1d:a0:d4:35:98:d4:52:51:5a:82:11:08:6d:b6:c8:26:25:fb:
12:6f:82:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:23 2025 by rpki-client