Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: 04TN27oEn02oUiKWRXBpxIZJfBj+0ZUUhFsvf5Sg2/k=
Subject key identifier: 2E:6C:E6:08:60:E8:A7:73:A0:D0:48:64:6D:C0:89:C8:7E:92:B7:05
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 01969FACAEDFE60F55F1B33825F021AC55E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0CCC
Signing time: Mon 05 May 2025 09:00:16 +0000
Manifest this update: Mon 05 May 2025 09:00:16 +0000
Manifest next update: Tue 06 May 2025 09:00:16 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: J6wKVWLqLB8tDHspqKKy2ZbFr0MEZta/2C2EiN6aWmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:ae:df:e6:0f:55:f1:b3:38:25:f0:21:ac:55:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: May 5 09:00:16 2025 GMT
Not After : May 6 09:00:16 2025 GMT
Subject: CN=2e6ce60860e8a773a0d048646dc089c87e92b705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:b5:54:5f:0d:29:59:84:91:17:98:69:35:
64:15:75:50:a4:39:c0:25:00:b9:46:ab:5c:33:fd:
75:91:b5:3f:52:33:e4:72:c5:ba:27:63:ff:fe:8c:
7d:ae:9e:8a:87:2d:dd:33:75:c9:45:c1:9c:04:58:
01:f5:17:94:62:dc:58:ae:8c:f3:36:ce:a2:78:16:
fa:19:df:a4:32:56:e0:f6:3c:ca:76:53:aa:06:0d:
b3:20:a0:3a:8d:cc:a2:b8:8c:11:c8:4a:59:eb:79:
c1:6c:95:d7:86:9e:cf:c7:a5:ba:cf:19:a5:9c:fa:
3a:21:e8:59:91:e3:d3:7a:22:c5:f9:11:73:92:51:
e7:43:bc:0f:7a:eb:5f:03:0a:95:33:9e:27:eb:ba:
a2:1a:34:db:71:d0:10:a0:28:aa:7f:b4:84:9b:47:
1f:fe:34:0f:14:bd:1e:2f:11:c4:29:21:2b:45:66:
9c:b6:94:a6:9f:66:85:92:d4:f5:b8:49:75:2b:9c:
f6:56:d4:e4:ef:ae:0b:ed:33:a8:87:61:09:1b:80:
15:54:fb:8b:a2:d6:fa:15:d6:6a:8b:24:2f:4e:58:
58:1d:d6:3a:76:6a:6e:df:78:ee:81:cf:5d:8f:37:
99:6f:5f:88:cd:58:fe:16:53:78:cb:fc:8f:3b:64:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6C:E6:08:60:E8:A7:73:A0:D0:48:64:6D:C0:89:C8:7E:92:B7:05
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:32:a5:96:09:bf:44:6f:54:60:a1:ca:c4:8d:23:b5:34:c0:
81:bf:43:c4:11:e9:6e:01:8c:8c:7e:78:a6:b4:21:5d:4d:31:
fa:57:39:b9:a2:ce:0c:03:4d:29:d5:9c:cc:1f:37:09:b8:0d:
3c:85:c3:5b:56:5d:9e:84:6f:d1:21:61:ed:d8:d5:f5:a3:ce:
b7:b4:89:b4:e6:97:9d:3d:4f:2b:5d:eb:2f:10:51:06:c7:a7:
cf:10:31:b2:e0:a2:06:cf:5d:9b:c9:7f:3d:7a:c8:17:40:cd:
a1:62:59:5f:17:64:89:d1:b1:08:cc:87:ee:5e:80:b0:3d:c1:
47:76:c3:d7:e5:ed:b9:35:f6:f2:4b:95:7a:10:90:75:d7:c6:
9f:be:10:73:9b:49:e2:f0:25:74:14:92:29:a1:df:68:81:6b:
f3:11:40:00:51:92:23:d2:5e:ae:80:f5:52:94:0e:7b:64:96:
54:74:c4:11:46:24:ad:28:aa:5b:6b:9a:61:62:60:16:a7:09:
db:04:10:9f:20:ec:86:f6:8f:b5:85:d0:3d:77:d8:17:4c:a6:
cc:17:6d:ce:13:6c:1e:e8:6b:8f:e2:ae:88:f9:34:63:3f:ad:
8e:1f:a0:bc:ae:45:a5:ca:7b:15:6c:e9:e5:10:09:28:eb:49:
81:58:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:35:40 2025 by rpki-client