Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: Cn3DxGYGqF4Fr90trfOzguI/LLOfHM46G7RbAo+ZvIc=
Subject key identifier: 75:1D:97:C4:8A:C0:C7:C6:0B:43:94:D9:AC:32:1D:84:CF:4C:6C:25
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 01988FFE38C2957279CEB8B0CC26DE5C00D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 0271
Signing time: Sat 09 Aug 2025 18:00:59 +0000
Manifest this update: Sat 09 Aug 2025 18:00:59 +0000
Manifest next update: Sun 10 Aug 2025 18:00:59 +0000
Files and hashes: 1: HcN2gdm9gOEIgcHPMP-W9ZnlcUw.roa (hash: N+CqOXxB6Ih/1s1CE254m5auzMH5uFnT/go6OIZT6TM=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: 2QQuBajhKvBIeS7e9QJMtw+HRZTSy4rLoBeYHXjrvKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:38:c2:95:72:79:ce:b8:b0:cc:26:de:5c:00:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Aug 9 18:00:59 2025 GMT
Not After : Aug 10 18:00:59 2025 GMT
Subject: CN=751d97c48ac0c7c60b4394d9ac321d84cf4c6c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:af:c7:65:e2:0b:04:2b:9a:f7:d5:15:cc:
2b:5b:c6:f3:a8:52:a9:61:c7:36:77:85:49:98:c9:
48:91:94:42:23:d0:00:c1:af:00:38:54:4b:b9:61:
df:f0:c3:e5:a0:30:02:02:b4:6d:c5:5c:ce:fc:50:
ad:d7:b7:bf:59:54:12:d3:74:6c:3e:e6:d1:e0:5e:
9b:af:bb:f8:d8:4b:14:88:21:75:21:6b:ae:87:e6:
80:8f:46:99:bf:25:ac:c7:60:c3:7d:be:d6:ef:27:
0c:0e:17:77:9f:c1:53:bd:45:f6:0b:b2:df:ae:fc:
51:05:45:da:51:77:38:3a:3b:f6:27:21:9a:25:0c:
f6:87:f4:22:a0:87:56:99:49:d9:99:fa:8e:c9:3e:
02:b0:24:ba:ff:30:e1:d5:34:39:ff:8b:9f:4b:74:
1a:dd:d8:23:28:69:cc:f3:53:ab:b3:a5:e0:53:ac:
7d:dc:6b:0e:6c:57:10:6b:5d:ed:2b:f0:c8:d7:e2:
70:88:fc:d1:8b:ff:ac:00:75:ff:75:61:f2:ac:cc:
b9:0b:c0:d6:b7:fd:03:50:d6:b4:e9:3a:19:52:fc:
ce:44:6f:78:9c:26:87:87:8d:9f:b8:c5:dd:bc:53:
ac:66:ad:9d:fd:02:9a:3c:13:77:26:e5:16:cf:cd:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1D:97:C4:8A:C0:C7:C6:0B:43:94:D9:AC:32:1D:84:CF:4C:6C:25
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b7:0f:bb:21:9e:d1:b4:37:ec:2a:73:e4:2a:a6:e7:d0:3d:
5b:1e:3f:7f:2e:50:82:75:b4:2e:cb:bc:96:f9:44:e1:58:51:
29:c3:b4:a9:8a:a2:a1:7f:fe:10:ea:20:6b:bb:c8:f7:98:f4:
0b:0a:74:55:43:b4:c9:27:bf:ab:fa:4d:2d:b1:b1:2b:c2:c9:
d9:15:5e:96:9a:6f:12:a8:21:87:8b:e8:72:4e:d2:e1:7f:dc:
07:a3:01:81:44:a5:ab:2c:88:f8:dd:b5:5c:41:21:18:e5:dd:
c1:03:89:10:c9:61:f4:7f:cf:fd:c3:a7:c5:0d:c1:30:66:96:
65:d5:23:82:4a:b8:c1:3a:c3:ff:1e:6d:5a:4b:5b:10:d1:3c:
4b:7d:53:ec:5b:7d:7f:3b:fa:e8:14:cf:1b:4b:bf:42:5b:20:
30:b7:26:a3:cc:87:4b:95:c2:c8:39:11:6b:86:a8:05:6d:85:
42:4d:da:ff:31:27:04:6c:f5:94:4e:4f:08:33:d0:13:5f:17:
e2:d4:1b:18:42:72:9e:76:72:3b:0f:5a:31:3a:d5:03:eb:ee:
e2:62:4e:c5:7c:cd:0b:34:d8:97:5d:88:48:72:c5:d0:f5:1b:
c0:06:c4:ac:cf:24:43:37:27:53:e8:a2:63:89:26:e5:32:de:
a3:8f:ee:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:43 2025 by rpki-client