Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File: paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier: Tika8Ft9lCbbNpA04PI1fG5vPcLTPrZktzjskamZcjI=
Subject key identifier: 26:11:85:F2:F7:7F:3D:73:ED:4D:16:16:3A:B3:9F:C8:00:03:2C:73
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 019898253BBA19EE4BC79F06C593E179E5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number: 0712
Signing time: Mon 11 Aug 2025 08:00:33 +0000
Manifest this update: Mon 11 Aug 2025 08:00:33 +0000
Manifest next update: Tue 12 Aug 2025 08:00:33 +0000
Files and hashes: 1: 6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa (hash: ZMfa+VC1JK7r5J2BdtywNHEZxOWql9OfKZrNLteanPw=)
2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: Lv4uRfqYwCBhEnWmmiiUPZfp3vLfYsPKxGbEonYUho8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:3b:ba:19:ee:4b:c7:9f:06:c5:93:e1:79:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Aug 11 08:00:33 2025 GMT
Not After : Aug 12 08:00:33 2025 GMT
Subject: CN=261185f2f77f3d73ed4d16163ab39fc800032c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:7c:78:39:f7:f8:2d:15:04:46:ae:9e:d2:
18:5e:6c:b2:8f:28:f9:47:49:70:1a:ba:80:53:0c:
bc:5e:0a:2e:e5:5e:4c:c1:ad:4f:70:d1:da:a4:30:
3e:64:31:8e:e2:2a:ed:70:95:9c:6b:5f:5b:4d:7e:
07:0a:d6:82:8a:e4:7b:21:3d:37:07:af:7e:75:0f:
4b:37:cb:8d:d7:d3:ea:07:95:eb:91:93:ab:d8:da:
ab:ec:e4:96:ab:4b:fb:04:36:37:f4:99:dc:60:0c:
31:76:45:6e:8c:0d:b8:bb:3d:62:67:51:57:76:00:
e6:2f:34:e7:d7:53:a9:5a:79:66:e2:67:da:1a:b2:
a8:3c:55:10:de:92:44:4b:15:9c:2a:bf:31:ff:d1:
1b:53:45:f0:f8:dd:d3:69:cb:49:80:d7:e5:62:a6:
68:0e:e7:21:a9:1f:c4:ec:b4:eb:34:4a:bb:64:5c:
59:33:63:9b:02:27:03:35:62:68:bb:04:3d:94:5d:
43:2d:6e:c0:aa:b7:a1:e7:4b:9e:3f:d4:17:61:bb:
e8:ed:19:eb:11:7a:1a:87:02:8c:41:71:18:bb:b9:
ec:c0:c0:05:a6:30:6a:e2:12:6b:ad:ef:e4:5f:ed:
16:e7:b7:6e:28:92:37:68:0d:a0:23:81:7f:fb:43:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:11:85:F2:F7:7F:3D:73:ED:4D:16:16:3A:B3:9F:C8:00:03:2C:73
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:60:21:9c:c7:29:ec:96:ae:bd:3d:38:26:0e:c6:c5:f8:6b:
72:27:8f:7d:ed:33:97:b0:a3:a1:92:b1:a0:09:76:02:4a:e3:
98:4e:ce:93:88:5b:2e:5b:6f:21:e6:1c:62:91:65:e3:ea:be:
68:a2:86:d2:c5:68:db:56:8c:f8:14:1c:2f:fa:22:3e:97:76:
04:0f:b0:d5:4d:c9:1e:16:f3:23:f2:53:45:b9:db:72:d1:1a:
8f:0b:61:e2:b1:b4:d1:04:bb:fa:80:78:33:d0:54:b9:78:f8:
d8:68:5e:39:69:dd:a4:ad:67:47:ef:48:02:27:a9:9b:8c:c5:
19:b2:68:04:a8:69:48:00:17:f2:ac:fa:66:92:b4:2b:44:97:
23:7a:16:fe:51:e6:f5:e6:d1:bf:ed:6d:00:5b:bd:c7:92:40:
9f:b9:d9:89:5f:2c:dd:e9:fe:00:b8:b2:ca:c7:17:ae:62:5e:
19:b2:67:de:16:91:15:c6:de:11:c9:2d:c5:1f:dc:41:96:98:
41:7b:09:75:6b:c8:ab:68:24:ca:50:73:6a:76:90:2b:4e:96:
e2:5d:8a:72:ff:a4:45:a5:90:63:fa:24:cd:c3:9b:4f:4b:cf:
f4:8f:ff:3b:67:f0:6c:ae:79:23:c9:f1:58:99:43:3b:98:ec:
a1:44:cc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:18 2025 by rpki-client