Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: oyEGOvAlr9xm00Eez6tmy9QADEgLsqY/+e44LzKrIzE=
Subject key identifier: 2B:89:5D:E1:BE:53:C2:9A:8E:60:9E:EB:F7:01:2D:C4:61:CE:67:07
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 01968F5E5EB76223F83C404FCF4B88D334D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 0164
Signing time: Fri 02 May 2025 05:00:48 +0000
Manifest this update: Fri 02 May 2025 05:00:48 +0000
Manifest next update: Sat 03 May 2025 05:00:48 +0000
Files and hashes: 1: 7wo8i41Up9XbCW4B5tKeIytyMsA.roa (hash: yirWyb5pij+onS9AdwvB/WtmePzfdhsn+x4XqsoWk2E=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: M2zWwNGOf19uQuO1WP16t2AJ8mUP0yrx5F/Nf/+Cwuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5e:5e:b7:62:23:f8:3c:40:4f:cf:4b:88:d3:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: May 2 05:00:48 2025 GMT
Not After : May 3 05:00:48 2025 GMT
Subject: CN=2b895de1be53c29a8e609eebf7012dc461ce6707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:c8:f4:58:58:c5:72:05:95:59:2b:69:ab:
a3:42:52:dd:46:d4:bd:0a:8a:cf:f3:c1:b8:79:92:
17:08:c1:25:39:c6:1b:da:d6:08:71:60:99:35:f5:
3f:2c:ff:a1:c8:1b:3f:d6:26:c9:cd:40:24:80:a7:
b9:ba:5e:39:b9:34:bf:7e:e6:1b:34:1b:86:56:a6:
11:4b:8c:44:26:55:76:52:6e:5e:69:b9:38:4a:cd:
14:4f:16:73:65:ea:70:f3:12:64:93:67:83:c4:4f:
8a:d7:27:48:cc:58:b3:73:c2:1b:4a:f0:01:53:e5:
66:70:1c:0a:7e:0b:74:23:97:4b:00:54:63:d4:2e:
8a:38:e8:13:63:a2:28:5f:5e:25:27:35:84:5a:4a:
2d:24:c6:65:df:1c:89:e1:1b:d2:19:be:d5:ac:ad:
a8:b3:cc:12:e5:43:b6:72:fc:d5:7e:c5:bb:77:9c:
c9:5f:ff:6b:b6:68:c3:bf:22:f9:dc:20:6c:7c:5a:
2a:f9:37:12:b7:d6:23:68:29:2c:da:1a:93:3d:80:
63:39:35:59:00:2f:c7:6e:0d:42:b5:65:98:1f:b9:
77:72:49:5f:f1:22:3e:6e:ae:15:f5:53:03:f7:c3:
0a:b5:3d:c6:5a:ad:9c:44:e4:7c:f2:ab:a8:c1:b3:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:5D:E1:BE:53:C2:9A:8E:60:9E:EB:F7:01:2D:C4:61:CE:67:07
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:98:f5:ed:15:d4:cb:e2:53:99:e8:9d:5b:02:79:f9:af:03:
be:d9:7f:c6:cb:b8:32:75:a6:04:e0:0a:8e:2e:85:68:06:40:
13:75:89:0f:71:0e:de:c1:b9:cc:3f:28:31:3b:db:5d:67:72:
1a:1a:b7:42:74:81:21:0a:fe:c6:01:01:e1:08:79:3f:41:b5:
4c:5b:34:0c:7f:55:ea:05:6e:73:19:f5:b2:e3:08:28:99:b2:
26:31:6b:94:d5:f6:2a:18:5b:3c:b8:8c:76:9c:ae:39:ad:97:
99:aa:d9:cb:51:ca:c9:ad:76:0a:8b:9b:fc:6d:7d:a3:f4:b1:
c1:a9:19:e6:86:5c:f9:75:fa:9f:90:c5:dd:12:74:9b:15:36:
e8:c4:09:76:2c:fa:f7:07:93:60:d0:12:ae:6d:17:04:5f:50:
f3:4c:d6:0a:4c:c4:d9:57:ee:23:ca:2b:0a:cc:f4:7a:f6:6f:
de:8b:07:df:93:d0:9f:e4:65:e5:1d:b1:88:9a:8d:10:eb:a5:
ae:98:88:82:25:eb:7c:27:66:5a:31:98:62:f9:92:c2:9d:07:
cc:19:4d:24:6a:84:d7:6a:51:af:2a:83:fc:7f:d0:56:c8:47:
a8:ef:9d:b6:ca:f1:4a:db:08:8f:91:63:ab:e4:12:40:1c:80:
52:91:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:35:07 2025 by rpki-client