Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: xerYWHsWL97agb/E3krl3/3GIrgtineqjSRLOyJTTq0=
Subject key identifier: 13:13:F8:D4:1A:75:5B:9E:2A:99:60:9C:A5:7A:6D:E7:FD:CE:9B:0B
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 01968D6F6A6405428DEC64360B26EAEE00F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 0163
Signing time: Thu 01 May 2025 20:00:11 +0000
Manifest this update: Thu 01 May 2025 20:00:11 +0000
Manifest next update: Fri 02 May 2025 20:00:11 +0000
Files and hashes: 1: 7wo8i41Up9XbCW4B5tKeIytyMsA.roa (hash: yirWyb5pij+onS9AdwvB/WtmePzfdhsn+x4XqsoWk2E=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: hdRlyRyxTEx4iR/U6GBAtcUiY4MFkJ4Z6wibIu4pPK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:6f:6a:64:05:42:8d:ec:64:36:0b:26:ea:ee:00:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: May 1 20:00:11 2025 GMT
Not After : May 2 20:00:11 2025 GMT
Subject: CN=1313f8d41a755b9e2a99609ca57a6de7fdce9b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:17:55:c2:02:5a:dc:be:66:de:0f:d3:7a:47:
70:32:71:ab:11:73:ad:45:06:89:fb:43:52:53:51:
08:b7:05:2b:e5:df:94:56:6e:27:e4:20:46:df:5b:
35:43:96:ab:16:34:ab:82:11:eb:f0:23:dd:8b:63:
45:8b:4f:d8:92:2d:98:36:a8:65:a5:aa:80:4d:00:
f1:36:96:0d:92:16:93:f4:fd:e5:0a:f5:48:fe:de:
5c:34:b6:f1:40:8f:56:b2:bc:cb:bf:c6:d3:1d:40:
32:59:73:4d:1e:c6:36:43:62:2d:e9:27:36:7d:a6:
1a:6b:e8:94:dc:99:a4:5e:f3:d7:e8:bc:b7:1c:00:
a7:cb:76:44:53:81:48:79:5e:cc:2b:23:b4:ca:d9:
94:ba:ee:2d:0d:ac:d4:49:5d:4f:48:ab:f3:d7:82:
84:56:12:e6:49:7e:ab:c3:17:56:8c:90:67:36:60:
b9:93:f8:66:2a:66:fd:f4:24:d2:ac:7a:6a:71:d5:
5e:5c:2f:c9:f5:eb:bd:3b:74:98:2f:69:1c:53:b1:
dc:01:67:9d:75:ef:91:b5:8d:4a:fb:c5:1d:af:d4:
5f:6c:80:c8:51:61:5e:fe:25:f5:04:4d:37:66:c1:
18:08:a3:87:d4:26:e1:7c:4e:96:cf:cc:a6:e1:b8:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:13:F8:D4:1A:75:5B:9E:2A:99:60:9C:A5:7A:6D:E7:FD:CE:9B:0B
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:46:f1:3e:ef:36:0c:8f:a4:d3:c4:8b:e5:c8:f4:9b:13:52:
53:4a:d6:fa:38:b5:de:7b:ab:21:64:b0:90:72:87:0e:5c:76:
eb:1d:8f:f4:2b:3b:87:50:d0:79:32:33:34:e4:c4:f1:11:df:
12:b1:6c:a5:fa:e1:92:e0:83:91:ef:a2:4a:f0:96:bc:7f:dc:
3d:ce:0c:9d:04:70:fb:51:5c:04:e4:69:64:ae:55:96:08:12:
b7:83:67:26:a6:f7:1f:f5:30:1d:2c:c8:62:95:16:2e:98:19:
7c:80:aa:3c:f0:b2:c6:69:a7:a6:ce:44:9a:7c:3c:d7:20:87:
5d:d2:fb:29:32:6e:de:40:73:ff:c9:bd:5a:46:7f:d2:70:9b:
a2:fc:4e:04:ab:d1:7a:a9:41:2e:90:1a:90:f0:fc:31:c6:75:
ec:fb:f9:3c:90:38:3c:11:a0:d9:24:c8:06:0b:2e:f4:39:bd:
1e:31:46:f4:79:07:c9:69:8f:f7:dd:fd:70:ab:72:3f:9b:b2:
ff:b7:eb:bf:a4:63:12:a4:fd:7f:ba:7a:74:1f:77:28:71:56:
35:a1:27:b8:56:fe:bd:2c:60:12:28:34:66:16:7a:7e:ed:3b:
31:d9:1a:8a:0a:78:2c:d3:d2:5e:a1:96:fe:a2:74:84:be:bc:
00:8e:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:05:17 2025 by rpki-client