Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File: paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier: XafQ8PHcTuU/fJfMu7cvuscvFUlYXt1dGr8qWz697/c=
Subject key identifier: 7C:86:8E:B7:E4:E4:57:EF:81:82:BD:72:5E:D9:AF:49:EA:48:F1:85
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 0199FB7CBE0BFA7447FE649BE1939229BBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number: 07CA
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: 6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa (hash: ZMfa+VC1JK7r5J2BdtywNHEZxOWql9OfKZrNLteanPw=)
2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: sXwkwsu+2RZecLeLEWRQ0AmYV3eRDwsGm8I4ShE5NVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:be:0b:fa:74:47:fe:64:9b:e1:93:92:29:bb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=7c868eb7e4e457ef8182bd725ed9af49ea48f185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:82:66:8c:70:6f:c6:23:da:01:25:b4:60:
55:5e:10:08:fb:ab:15:ce:e0:8e:ce:48:40:bf:2b:
cb:af:37:a6:3c:43:8e:05:0f:05:db:70:10:95:35:
7e:3d:1d:26:ff:43:9a:5a:cf:71:bb:88:08:c5:7f:
5c:06:58:7c:94:ee:f6:b0:42:e5:5e:2c:50:66:55:
da:3e:d9:e8:33:0a:4d:8c:0c:73:68:cd:c0:d8:f2:
fa:1a:47:66:6f:db:de:3b:99:bc:48:0e:d3:14:5c:
36:f8:e8:55:3b:3e:2a:ca:98:75:4a:5d:31:f6:83:
72:11:89:af:1a:c2:44:46:1c:88:ac:96:6b:24:12:
ba:18:a6:e3:05:88:60:56:1e:87:db:0f:45:c5:05:
1b:76:e3:3a:05:a5:b6:2c:53:e2:3c:00:fb:7e:f4:
6e:60:d4:59:0b:58:70:f4:72:58:2c:8b:1e:5c:6c:
a8:6e:69:de:1f:68:8e:32:13:03:47:08:55:d8:a6:
e9:76:f1:61:2d:99:3a:86:da:fc:28:21:f1:21:16:
9c:92:e7:12:8d:78:e7:62:10:ef:a7:24:67:ac:a4:
f3:9f:86:ba:80:18:e0:b1:00:50:23:79:ed:5e:b2:
63:fb:a2:ac:74:13:ae:75:03:2f:eb:cc:29:2c:83:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:8E:B7:E4:E4:57:EF:81:82:BD:72:5E:D9:AF:49:EA:48:F1:85
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:89:20:bd:38:c5:28:f9:0a:06:2a:b6:07:c1:9b:7b:e1:
a0:11:67:65:7a:e0:39:bb:86:2b:50:a6:b5:d0:b7:38:6d:15:
9d:e2:06:bb:05:cf:fb:08:5f:9b:99:4a:91:ad:bc:97:79:48:
34:da:60:b5:5a:2d:2c:30:21:9e:b5:38:04:73:93:96:05:bd:
2c:2d:6b:3c:c4:fc:bb:25:68:b1:70:97:f0:7d:47:30:c6:ab:
8f:f4:14:21:ec:1f:f6:f9:88:bf:d9:03:de:4f:d4:4e:2c:c2:
87:66:8a:b2:2f:02:1d:77:18:d6:86:1e:9c:26:2f:61:72:c6:
e5:64:bd:48:2a:f2:19:9b:c1:ec:ca:f5:ee:a9:66:35:cd:67:
a9:4e:8a:a1:32:c5:d7:b7:2e:71:7b:fe:ce:03:1c:cb:b6:40:
fb:ad:53:af:75:84:1d:7d:4b:6d:9c:aa:0b:76:30:d4:77:e1:
63:96:6b:32:a7:37:d6:94:88:09:df:32:2f:74:32:5e:25:83:
3f:13:36:41:06:c2:75:1a:f2:e0:8b:c2:b4:63:23:68:50:5d:
79:cf:e8:c2:d6:2d:e8:08:83:fe:05:fa:60:d6:b9:c0:ef:2b:
23:6a:8c:66:bd:34:8e:1a:55:d4:5d:0f:bc:fa:28:e2:3f:30:
b6:f7:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:46 2025 by rpki-client