Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File: paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier: l2HwizVdNJMB0mPH7XzJqPPqVO8Ai2HNrZZfnWPoLvY=
Subject key identifier: BD:FE:37:D3:39:C0:41:31:C1:73:59:9E:2A:9F:83:66:E2:48:6E:F7
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 019A4E86A2C9F876674B21F4364882BEFA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number: 07F5
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: 6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa (hash: ZMfa+VC1JK7r5J2BdtywNHEZxOWql9OfKZrNLteanPw=)
2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: rWPlsE1BTH09hw+7RZKMl+6mImbShs2osGJcQQRKIMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a2:c9:f8:76:67:4b:21:f4:36:48:82:be:fa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=bdfe37d339c04131c173599e2a9f8366e2486ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:ee:bc:fc:72:85:89:a4:67:57:8b:dc:b2:
f9:82:13:18:76:b8:d9:23:a7:10:c3:a4:33:70:dd:
8f:d7:7f:4f:a5:78:b5:54:e8:1a:f9:31:6b:84:3a:
e6:b4:c1:c1:26:14:19:62:7b:bc:66:e6:77:da:36:
9a:ab:b1:98:2c:b8:36:5f:20:64:36:50:96:ef:8b:
03:90:ea:a2:28:80:78:1e:d4:d1:3f:6a:5b:00:a2:
a2:a4:82:6b:03:00:64:0c:8a:8e:13:ab:02:57:3b:
a1:9c:85:d5:6c:61:fe:f5:3a:8b:0e:08:68:0d:47:
b8:98:13:73:9d:a3:f4:5e:cf:7e:e1:d3:08:fb:1f:
d0:75:d6:df:ab:50:ac:03:aa:33:cd:59:2e:78:30:
96:f5:ad:ab:9c:1a:76:49:82:25:89:ea:24:59:5d:
54:ab:af:df:b4:40:d0:e3:d0:91:14:72:2c:e5:ff:
52:47:1a:7d:3d:6a:c0:ac:45:6b:bd:f0:3c:5e:cc:
bd:6a:4d:d0:fa:b0:8a:20:fa:d8:9e:b3:f3:86:b1:
96:d4:3b:b7:9d:14:8b:a8:b4:3e:1e:02:4b:57:58:
77:fa:a3:2b:90:ed:f3:76:19:10:43:f8:20:87:a6:
14:73:ae:6c:41:88:4c:8e:9c:5e:ed:5a:cb:69:cd:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FE:37:D3:39:C0:41:31:C1:73:59:9E:2A:9F:83:66:E2:48:6E:F7
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4a:2a:1b:e4:c6:3a:9e:5f:96:7b:5c:1b:8b:97:77:4f:9e:
13:5b:7e:2e:a9:86:d1:99:d2:9f:89:eb:e2:15:72:f7:e9:5b:
fa:e8:97:90:e6:cc:3c:25:75:a4:8b:7e:1b:f4:6b:75:62:f1:
5a:d9:51:bd:dc:1d:87:ce:c7:3d:c6:ab:69:29:33:6e:c3:91:
83:bd:95:37:e8:82:31:ac:96:bd:84:22:5c:6c:ec:ad:98:79:
de:4d:95:56:ba:8e:b2:8f:13:ac:fd:1d:ff:84:35:41:13:34:
58:77:3d:96:fc:c0:e9:08:5e:6d:81:68:5d:03:31:9c:e6:09:
57:96:b1:f9:f0:c1:3d:3a:95:e1:d4:19:78:07:e7:fe:a3:91:
79:92:5e:f0:07:5e:d2:dd:68:c2:c2:15:4b:68:f4:0d:85:9f:
72:fc:cc:66:5e:84:d0:e5:35:b6:75:a6:01:ec:74:a5:10:ff:
7f:07:4a:e0:19:8a:68:f8:21:80:a3:1e:ac:f6:ef:7d:65:56:
5c:d6:cf:5a:c5:55:12:25:1c:4f:81:46:d3:a0:a3:05:72:42:
a2:77:18:3e:86:9a:2d:b0:fb:25:f9:38:f4:54:86:69:0a:0e:
92:5f:8f:a5:18:d5:8b:65:82:77:0c:b5:f0:c4:f1:c9:7a:55:
9c:0f:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:30 2025 by rpki-client