Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: vcoXECh9MCjDPGFfw/XeTJDRICEZQ39Xkisr4OgEN0c=
Subject key identifier: 99:75:13:07:3B:53:B6:E0:3B:33:73:07:A0:EC:91:CA:D4:BD:88:42
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 01987306BD23473C6D05AEC3C93DB5F14DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0DBE
Signing time: Mon 04 Aug 2025 03:01:18 +0000
Manifest this update: Mon 04 Aug 2025 03:01:18 +0000
Manifest next update: Tue 05 Aug 2025 03:01:18 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: FdON8nb/Wu98o+PaDhd0nYyIwVMByq1zh8+hrOOy6FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:bd:23:47:3c:6d:05:ae:c3:c9:3d:b5:f1:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Aug 4 03:01:18 2025 GMT
Not After : Aug 5 03:01:18 2025 GMT
Subject: CN=997513073b53b6e03b337307a0ec91cad4bd8842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:23:2e:99:22:54:32:5d:56:42:8d:d6:9d:
46:f2:f6:fd:b5:5e:1b:ec:8b:20:e1:57:e4:23:fb:
c7:1e:e1:54:8d:ef:8e:85:64:76:88:60:54:bf:06:
4c:71:23:77:92:39:17:20:a4:72:d7:b4:61:7a:6b:
5a:97:34:2d:0b:80:29:5b:e0:06:9a:0c:58:e7:52:
0e:0d:09:7a:5f:67:7d:dd:fb:85:b0:db:c9:23:59:
c3:fa:3c:30:8d:4b:79:04:49:27:49:18:f2:80:58:
75:4a:cd:bc:33:9f:7b:ce:af:ea:e0:51:4b:21:0f:
89:b8:d7:3f:9f:78:79:ce:50:28:43:fe:59:e0:91:
20:b4:e8:48:a2:f2:67:ed:9b:b5:1a:bb:65:d1:c3:
b9:c5:11:89:3a:cf:d4:c6:63:a5:1d:01:92:4b:7f:
86:71:79:fa:36:0b:f7:c8:e4:7d:02:f1:e3:98:c8:
45:ac:89:8f:84:0d:40:a3:11:bb:8a:fe:cb:f4:44:
b0:c7:a2:2a:45:62:3f:f8:4b:24:bc:8b:8f:49:51:
47:b1:b1:c4:ee:11:0b:a0:a0:7c:e6:50:53:0a:f0:
35:7e:5f:46:45:b5:11:f6:29:1c:56:0a:6c:98:19:
85:c5:93:d8:eb:b4:c5:43:a1:4e:72:09:59:9f:d9:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:13:07:3B:53:B6:E0:3B:33:73:07:A0:EC:91:CA:D4:BD:88:42
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:da:c8:b3:e6:06:aa:42:c2:41:e8:c5:a8:f7:ab:52:38:a0:
c3:16:1e:41:91:a9:7b:2c:20:a2:46:57:fa:13:a6:b7:61:95:
0e:35:16:cc:1c:63:01:93:86:84:8a:62:68:48:d3:d7:8b:0d:
65:02:a7:6f:4a:c3:3d:4b:b6:20:e2:ee:1e:c7:fe:88:84:82:
f3:91:cc:bb:86:05:9a:62:35:d6:36:ce:1f:e8:c3:58:55:dc:
a5:e1:3a:ba:25:ef:8c:60:1e:18:05:ac:ca:d9:ca:c6:be:62:
04:26:6f:e3:35:c6:5d:5c:29:f8:f7:57:20:8d:2d:57:3b:7d:
03:4d:5c:b1:27:fd:03:86:b7:ec:12:96:59:c5:31:2a:20:74:
58:5c:14:63:41:3c:e8:e6:0b:54:cd:e0:5b:52:78:5f:0c:41:
94:8e:3d:17:31:41:80:a2:11:8a:b4:35:d1:96:49:1f:73:34:
18:81:09:33:04:d3:0a:00:5c:bb:2d:d2:eb:39:f2:55:09:2a:
1d:3d:db:bc:24:97:4a:fb:79:77:b4:a6:19:b0:e0:5c:97:4c:
8c:ad:28:c0:82:b1:0a:42:c1:53:a6:f8:c7:8e:ed:01:0e:c6:
ff:81:af:44:0d:d3:9a:4b:e9:15:3f:a7:c8:a8:ea:48:36:46:
33:6e:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:48 2025 by rpki-client