
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: 8aFldNmM8W3Vrskf79e6Xfg3Q9VjU8ONPAhP/qs9gWY=
Subject key identifier: A1:96:E4:7C:AD:70:91:3E:16:D3:37:EB:22:9C:CA:A7:DA:EC:45:8C
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 01976E504BB2BF19727D8E694969AA9202C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0D37
Signing time: Sat 14 Jun 2025 12:00:45 +0000
Manifest this update: Sat 14 Jun 2025 12:00:45 +0000
Manifest next update: Sun 15 Jun 2025 12:00:45 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: nL/D6nuACjgajsuhT4dlkOGZ1ZwbOi3HUIM48YgkBuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:4b:b2:bf:19:72:7d:8e:69:49:69:aa:92:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jun 14 12:00:45 2025 GMT
Not After : Jun 15 12:00:45 2025 GMT
Subject: CN=a196e47cad70913e16d337eb229ccaa7daec458c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3a:7a:b0:a5:5c:b6:d0:0f:aa:4a:a6:98:a3:
9e:aa:25:57:04:27:29:a0:31:c6:8c:27:36:6d:84:
a2:c2:0e:f0:ee:f8:b7:ce:ad:14:f1:52:93:14:5a:
5e:7c:47:90:84:56:66:22:27:39:2f:53:a0:09:c1:
be:fa:bd:fa:25:67:d9:88:69:5b:b8:73:10:a4:c2:
f2:70:8b:a4:11:6d:fe:82:ed:29:da:fe:43:b9:d6:
fc:15:94:a1:5a:07:81:97:1e:58:81:52:3f:fd:9e:
71:66:08:1c:dd:59:12:a6:58:c6:50:9f:f2:a5:11:
f5:11:42:2f:a4:32:38:20:c7:0b:c2:c5:a7:34:71:
ce:17:7f:02:a6:66:fa:12:a2:ff:c5:75:2c:12:e1:
3e:44:87:ed:1d:10:78:f0:22:9c:12:07:09:d8:1f:
65:08:6a:08:8e:5a:c2:15:86:de:cf:3d:3e:44:f5:
9f:eb:e9:a1:b6:bb:9d:2c:2f:55:f3:c9:08:7e:b5:
41:a4:e2:36:61:b3:73:04:50:70:b8:e8:b8:6d:77:
a6:46:1f:41:5d:79:96:f6:0f:c1:51:08:31:ac:04:
fa:57:de:22:cf:15:0a:15:a6:a0:5c:8b:1f:e2:94:
d6:b9:23:10:59:f0:fb:59:88:7d:e4:b9:1f:82:c9:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:96:E4:7C:AD:70:91:3E:16:D3:37:EB:22:9C:CA:A7:DA:EC:45:8C
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:40:5d:f7:ba:f7:c2:8e:13:04:73:1a:76:48:36:d9:9a:1d:
aa:99:2e:95:28:96:7a:76:e2:1b:69:36:3d:04:da:91:8b:a6:
79:5f:a8:42:7a:69:00:75:b0:8c:f0:4d:a6:e8:4a:3d:c7:88:
36:57:99:b4:82:7e:00:2e:7e:71:db:5c:f8:70:89:3c:49:2d:
09:15:fb:32:a9:03:54:11:ee:66:51:14:97:72:85:55:13:5c:
84:57:30:f2:4a:b5:a5:40:9a:91:ea:51:06:15:85:24:9a:ce:
4a:ed:1c:a9:9b:7d:c6:0b:dc:c8:eb:f9:89:6b:d2:90:a4:08:
56:f3:e7:6b:36:5d:74:58:90:4d:a8:0c:f0:56:79:88:b1:d8:
ae:5e:c1:f0:41:82:67:eb:93:b8:23:5c:42:41:27:24:3b:c8:
4f:ae:bd:a1:3f:28:48:a3:67:77:89:8f:89:66:3c:3f:90:1e:
45:4b:6e:dc:19:b3:fb:4e:99:ad:11:03:15:31:da:a0:33:64:
fd:ac:57:5c:e4:64:a9:43:26:f4:8b:e8:f3:0c:49:53:98:24:
f8:b5:b2:6c:ef:f7:28:50:4a:18:b1:22:88:6b:98:fe:c5:54:
8a:e0:a0:16:1d:94:6c:4c:67:f2:3d:f7:bf:b2:67:1d:eb:1c:
51:f0:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:32:16 2025 by rpki-client