Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File: paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier: sUWvAzC7rvp+rXcgHNzZFIF7254jL5Io+H1n4LOWnB0=
Subject key identifier: 6D:1C:F2:D6:7F:77:C3:9D:40:74:02:EC:00:7A:05:0E:78:00:80:A9
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 01969C3DD8BCB249E0FEB9E611834BBD3B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number: 060B
Signing time: Sun 04 May 2025 17:00:20 +0000
Manifest this update: Sun 04 May 2025 17:00:20 +0000
Manifest next update: Mon 05 May 2025 17:00:20 +0000
Files and hashes: 1: 6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa (hash: ZMfa+VC1JK7r5J2BdtywNHEZxOWql9OfKZrNLteanPw=)
2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: SDsm56ygcs7X7vP2Km8a8M4SMGv7Vs6VStJ4b7x9FQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:3d:d8:bc:b2:49:e0:fe:b9:e6:11:83:4b:bd:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: May 4 17:00:20 2025 GMT
Not After : May 5 17:00:20 2025 GMT
Subject: CN=6d1cf2d67f77c39d407402ec007a050e780080a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:a7:28:3b:a1:cb:92:64:de:b4:fe:91:3d:
a2:e4:bd:7b:0c:c1:26:89:98:9f:04:38:70:7a:5b:
49:6c:40:98:99:2e:7e:2c:00:36:66:58:d1:e3:cd:
ee:c6:e8:2a:9a:9f:00:b8:7a:7c:e1:31:ab:25:ae:
4f:ed:f6:1b:a7:e9:2d:3d:41:cd:a1:7a:e7:bb:b9:
94:a1:e7:b9:2d:5d:2b:c1:a0:2a:90:93:09:ee:7e:
1b:ef:74:0a:94:f1:54:10:54:91:df:f7:aa:d9:ea:
95:52:1f:85:15:58:ef:10:48:0e:78:97:72:0b:1e:
a0:99:87:15:c6:7f:11:27:91:28:c4:64:49:6b:4c:
91:ce:5b:7b:df:69:d9:91:51:8d:20:7f:a2:d3:3c:
c3:a6:ea:c9:94:53:66:19:bb:14:5f:6b:80:4a:3b:
a5:dc:3b:ca:51:13:04:51:a3:4e:ef:31:9f:10:84:
ca:a1:c9:6e:ce:f9:3f:18:a3:42:20:c8:3d:73:95:
59:b9:03:54:33:dd:ac:f3:35:cf:96:ff:5f:b0:d1:
2f:1e:63:21:2f:ce:c5:ff:2e:4c:55:9e:17:df:74:
67:36:67:3b:92:a6:21:06:c2:fa:af:7f:f6:11:ff:
e4:3c:3c:53:4d:48:2b:53:80:85:c4:47:24:1a:73:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1C:F2:D6:7F:77:C3:9D:40:74:02:EC:00:7A:05:0E:78:00:80:A9
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:52:b4:27:da:37:88:b1:0b:a9:d6:d2:15:a6:00:0e:7f:bd:
dd:05:db:c5:60:cf:22:85:9a:c3:19:fd:df:b6:b6:56:f6:9e:
b5:6b:da:9a:5d:89:9f:91:c8:df:e8:17:ab:3d:ba:03:71:d7:
15:12:1b:4c:f3:83:f5:2f:4b:be:68:40:b8:22:e3:b9:a6:c9:
bf:f6:8b:30:45:aa:7a:46:e4:bc:41:ad:c9:44:cc:91:33:e6:
5d:65:47:43:bf:eb:0a:0c:9e:ea:1f:7c:89:24:6b:9b:7b:99:
94:6b:95:4f:76:80:a9:21:63:94:8c:e2:7c:97:9e:bc:74:9f:
27:7f:20:5d:7a:50:53:22:38:ba:ad:48:31:c6:0f:fd:f5:ac:
ba:01:1d:99:61:c0:b9:db:e5:0e:bb:4f:df:0e:56:08:5d:a7:
4f:70:bb:b8:15:ea:a1:dc:df:5a:99:55:9b:b5:9e:ca:2d:be:
de:ce:e0:b9:b4:15:9d:f5:e4:68:87:9d:48:20:61:06:38:ac:
b3:64:c1:d6:12:66:47:77:13:c1:4c:1f:0c:09:8b:b8:9f:fb:
68:3c:bd:5d:e2:78:b0:d2:e0:86:1a:03:e2:27:7b:f4:a1:2d:
66:20:bd:dc:88:77:27:6f:dd:8b:02:71:1f:2f:c6:aa:72:c5:
01:81:4c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:24:00 2025 by rpki-client