Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: 6viJd5NQ5wHrWykXIQn4ncWcuRVH3RqvQskMwKKaD2Y=
Subject key identifier: 4E:3C:10:20:78:74:ED:84:19:D2:99:8E:37:CB:F7:24:4D:5E:E4:86
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 019A51F58948A5A3E2E8BBEEB0A8CA1BE245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0EB6
Signing time: Wed 05 Nov 2025 03:00:37 +0000
Manifest this update: Wed 05 Nov 2025 03:00:37 +0000
Manifest next update: Thu 06 Nov 2025 03:00:37 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: p19rj7MdgCqSRiCdXLSlbZn5LAnPA9RALGtKs4A0IUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:89:48:a5:a3:e2:e8:bb:ee:b0:a8:ca:1b:e2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Nov 5 03:00:37 2025 GMT
Not After : Nov 6 03:00:37 2025 GMT
Subject: CN=4e3c10207874ed8419d2998e37cbf7244d5ee486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:65:b1:c5:ed:aa:c5:fb:3f:db:84:80:a5:
7b:e4:d8:32:2b:a9:c2:d6:c4:c3:2f:6c:1f:0f:ba:
a9:14:66:27:9a:39:e4:96:25:35:c4:03:2e:83:5b:
56:4e:46:70:af:cd:9b:de:f1:67:77:8d:3e:e1:41:
5d:1c:7b:77:79:9d:be:fe:1f:c8:6d:96:26:2f:d5:
2a:b0:65:f8:94:62:51:1c:78:63:3a:8e:15:3e:39:
d3:b5:53:36:30:ef:9d:95:7a:72:80:71:d6:a8:89:
ec:82:b4:2a:1b:55:b1:b8:be:44:0f:d3:64:f6:22:
7e:50:5b:79:c5:81:b9:62:c6:58:5c:d0:e7:0e:55:
08:ec:85:f3:74:d2:2c:73:13:41:bb:f1:e9:b6:87:
46:a3:62:82:d6:98:44:1a:9b:fa:43:50:a5:86:ec:
67:f3:25:67:5a:3d:5e:ff:f6:ec:dd:5f:eb:a1:d1:
3f:1c:d1:8a:c7:ed:6e:7f:20:52:13:06:e1:df:56:
59:46:39:04:11:78:66:7f:a6:03:ea:24:79:81:4b:
ff:d2:14:7c:46:85:1b:b3:e9:8b:55:12:6d:23:77:
6b:a2:d9:75:55:b9:f4:ca:02:4e:7c:93:03:05:e3:
fa:2b:06:d5:a7:65:56:e6:e7:aa:82:16:57:08:a2:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:10:20:78:74:ED:84:19:D2:99:8E:37:CB:F7:24:4D:5E:E4:86
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:72:d4:06:66:a9:e9:cf:aa:77:0e:90:a8:e4:36:19:4a:
87:f0:c8:77:67:b7:ae:d1:d5:c4:8b:65:30:d3:61:ba:a6:4c:
51:70:af:eb:72:a0:02:34:79:f4:dc:65:af:bb:e8:67:44:17:
95:85:ef:6e:3c:e9:bb:52:7a:e2:b4:0c:b2:be:55:43:e0:4a:
33:28:62:8b:8e:4a:ab:a9:a4:ec:a4:46:8f:9b:a0:36:c3:95:
e6:4e:65:d1:ae:60:e2:13:00:9c:57:1d:e0:fb:29:fb:be:b8:
78:47:8c:83:77:7d:c2:da:b0:55:cc:fa:9a:fd:67:a1:e1:56:
0b:df:ef:f3:93:86:8e:62:79:0c:1f:22:81:2e:26:ce:0b:f1:
3e:09:00:d2:0b:c1:ef:6e:24:0c:17:3f:1f:44:54:73:a8:7c:
94:5f:33:76:60:14:8a:a8:8b:3f:c6:2d:f7:bc:f0:08:01:00:
5d:42:e5:3c:9e:5d:e6:e4:51:5c:2d:06:70:69:0b:88:81:56:
c4:e5:b7:5e:ba:b4:37:af:47:a7:14:0e:4e:6b:e4:ce:c8:89:
bb:32:31:4c:79:aa:39:65:6d:c4:ec:a7:a8:3a:d8:ce:58:83:
15:a2:96:20:58:86:17:b8:8e:3e:e4:20:d1:bc:86:a1:52:15:
d4:c4:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:25 2025 by rpki-client