Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: mpjOmGP3XziYhTlBpBHDRpeY78arTacOjo+sy8Bci5g=
Subject key identifier: 64:AB:D6:83:25:2B:37:2F:21:C3:66:13:48:4C:B1:60:38:87:68:78
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 01976DABEB57B07E92BACB97FD1464E445E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 12AB
Signing time: Sat 14 Jun 2025 09:01:12 +0000
Manifest this update: Sat 14 Jun 2025 09:01:12 +0000
Manifest next update: Sun 15 Jun 2025 09:01:12 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: 5lJDLmjpmcD+WI7ertXAtMxIQKA0KFwOMA4EU5aLpfg=)
2: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=)
3: w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa (hash: wDr5pC8ALwDb+JSgX5rgKPXkUmbOaUgv+fsaXxbR3wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:eb:57:b0:7e:92:ba:cb:97:fd:14:64:e4:45:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jun 14 09:01:12 2025 GMT
Not After : Jun 15 09:01:12 2025 GMT
Subject: CN=64abd683252b372f21c36613484cb16038876878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:48:bf:fe:0e:f9:e3:a9:39:aa:a1:9d:f9:
43:7f:ed:99:c2:83:7c:c4:e8:fb:60:44:2c:fb:b0:
70:b3:33:0b:c1:54:98:2b:fb:0e:8e:bb:c4:43:27:
37:8a:c0:d4:c6:2e:d9:af:d3:bf:fc:d8:a8:c7:7f:
e4:eb:f4:2e:08:f3:89:cc:80:f6:88:ad:24:df:58:
c3:aa:20:98:02:08:0d:50:d8:b1:81:4c:45:3e:1b:
45:40:14:22:65:57:e6:18:ae:17:fb:dc:71:07:dd:
69:1c:39:cc:98:35:a6:62:cf:f0:50:ba:2c:fa:01:
6a:e6:0f:0b:0f:0f:03:de:a1:91:7a:3b:5e:e0:22:
4a:2a:46:f2:ba:dc:f7:23:d1:51:64:05:1c:de:8c:
22:35:2e:54:d1:ff:7c:6e:7c:23:15:be:e8:c9:5c:
2e:51:6b:9b:b1:93:67:91:6a:58:f5:65:64:fa:53:
88:e7:b6:bc:df:0b:b5:3b:73:14:a5:19:fa:7d:12:
e3:36:26:00:db:c1:f3:dc:34:b8:1b:14:44:99:7b:
38:91:ca:66:e2:f8:9c:35:a2:f4:7d:7e:21:02:9c:
b5:4f:48:4b:5d:3e:51:0a:b2:e7:10:42:c8:ea:a5:
db:bb:26:84:2f:e9:8a:79:60:04:50:21:df:69:1e:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AB:D6:83:25:2B:37:2F:21:C3:66:13:48:4C:B1:60:38:87:68:78
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3a:03:1e:1a:4d:bf:b4:5d:06:fa:7a:b1:f7:69:27:83:8b:
43:9e:51:f7:09:af:c3:76:e7:23:5e:13:c6:14:65:af:19:83:
38:a7:86:ea:97:92:a2:6b:2c:07:cb:bb:3c:dd:c8:d7:69:0b:
fa:68:79:7b:7a:e2:d6:af:9b:7b:ee:a3:d2:ee:d7:32:63:10:
d2:1f:f6:ba:a3:c0:0e:c6:90:a2:66:45:02:8b:07:25:19:a8:
d4:7d:5a:fe:9a:1a:da:a4:f4:74:9b:43:c0:40:b0:66:8d:02:
5d:81:78:f2:7e:3c:a3:12:da:ff:fe:b1:1a:fe:77:92:8c:67:
a5:d0:1f:c5:5e:da:80:3b:54:25:1c:c6:29:fc:b9:eb:26:7b:
c2:8b:f6:e0:ad:e3:a3:cf:5a:49:08:a8:ae:85:2c:f7:7a:b5:
0a:84:d4:62:f6:a3:34:53:07:ef:2d:20:6c:2d:b5:35:c3:55:
b2:af:fc:70:be:f4:1f:88:76:ef:9b:e1:d5:e5:ef:be:df:9f:
c5:22:f6:05:4b:74:6f:6c:91:83:f9:02:5f:d1:08:66:dd:7e:
66:b2:80:03:7e:9c:aa:bf:29:0f:0f:d5:c1:3e:73:dc:8d:fc:
b8:d9:24:07:d1:d2:8d:41:3e:93:d2:96:24:77:c7:f5:51:ba:
1c:e7:82:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:04:12 2025 by rpki-client