Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: Xhf7ylM9QaMvrrd49yl60wMZlyAv3urd9qs8Ilb4Hf4=
Subject key identifier: E9:73:B1:21:5A:AB:3B:4F:5F:21:38:F9:F0:04:31:C0:5B:24:6A:78
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 019745C273B8FE27CDE61011008BD4565291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0D22
Signing time: Fri 06 Jun 2025 15:01:00 +0000
Manifest this update: Fri 06 Jun 2025 15:01:00 +0000
Manifest next update: Sat 07 Jun 2025 15:01:00 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: uvlTRyVZfqGx/MFf6PmoKKzpzCjX8tnyePJLhxJEX80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:73:b8:fe:27:cd:e6:10:11:00:8b:d4:56:52:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jun 6 15:01:00 2025 GMT
Not After : Jun 7 15:01:00 2025 GMT
Subject: CN=e973b1215aab3b4f5f2138f9f00431c05b246a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:9b:66:39:91:f2:3d:1f:f1:c8:41:7a:c4:
9a:0a:31:7f:51:ad:7d:aa:83:c0:47:1b:32:12:78:
9b:f9:b8:76:be:12:3c:dd:36:15:00:0d:b0:af:c1:
44:a0:70:fe:47:d3:b2:ca:af:b3:62:cb:8c:a2:a2:
18:b5:cd:ce:0f:0d:7a:e2:93:c8:38:8d:39:e7:3e:
6a:89:59:ed:9d:96:21:06:5c:14:b2:8b:62:0d:4d:
50:f2:9a:2e:f8:dc:2d:65:ab:9f:54:1e:fc:5a:06:
55:a1:fd:c1:5d:f6:50:73:90:73:be:fa:88:c9:db:
65:3b:89:bd:ab:90:10:5d:71:b2:c0:4a:af:20:ed:
da:49:c5:49:b8:9e:f0:94:46:98:98:00:2b:35:a3:
12:79:4b:0d:40:35:f6:3a:67:28:4b:f5:1f:ce:da:
7f:9b:b1:be:05:70:a7:9f:fe:fd:03:6c:2f:12:d2:
b0:6f:43:41:4a:84:f3:4f:a9:be:6c:cb:d5:fa:e7:
65:d5:f4:56:81:28:77:9a:91:f9:93:6c:9a:8a:ac:
50:b8:84:fe:aa:14:55:07:92:45:d1:18:83:68:dd:
f8:c0:46:9d:5b:bc:8b:3d:ee:4b:fe:9c:b0:bb:92:
60:62:5a:8d:35:fe:09:0d:b4:a1:f4:ed:bb:20:9d:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:B1:21:5A:AB:3B:4F:5F:21:38:F9:F0:04:31:C0:5B:24:6A:78
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a0:b6:1d:24:1e:35:a9:8c:89:61:dd:ab:aa:14:1b:54:2b:
13:5a:10:ad:56:99:0b:b3:86:81:32:58:d0:9b:5d:2f:18:3f:
94:f3:1a:1f:ca:9e:de:a1:49:50:57:22:f3:69:92:f0:ce:1d:
b0:40:dc:3f:ec:22:2b:a9:13:6a:fa:1b:69:60:26:07:c2:7e:
79:a8:01:4d:11:cf:f0:6e:87:a9:0c:87:85:3b:e0:d2:be:f4:
98:56:69:8e:60:66:65:87:05:0a:29:7c:19:e1:4f:48:65:3c:
0a:24:ef:b6:0a:83:40:0f:ba:c3:b5:d2:6c:36:bc:10:43:23:
d1:9d:6b:9d:47:ac:19:23:16:a5:36:fc:f9:28:97:7d:b2:28:
22:62:c0:cd:57:12:e7:36:94:59:7b:a7:8e:a8:d9:2b:25:21:
ce:7a:92:bc:40:d6:01:59:aa:e3:4c:cf:c6:ed:2e:08:8e:dd:
0c:7c:c7:30:c7:4f:db:eb:6a:c4:9a:19:28:36:86:4d:2c:b4:
c4:e0:b5:ae:1b:08:f1:df:7b:d2:5e:f9:ac:07:a7:ef:03:ea:
98:41:f7:32:e8:13:5f:bb:86:29:5b:3d:1c:b0:62:ac:f6:58:
2d:ed:ed:bf:71:35:e2:6e:e7:1c:54:55:36:c7:f7:e1:cd:af:
cc:73:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:22 2025 by rpki-client