Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: hmSTiBC/FnoYYX8tvMq+vHgWoFmoTi2iE38hmA5BDcs=
Subject key identifier: BA:23:C7:06:1D:D0:A1:51:AB:E9:1A:16:96:DC:A5:9C:46:91:3D:37
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 01988EED31F8850CBF2C6F3334DBEF693A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0CA6
Signing time: Sat 09 Aug 2025 13:02:46 +0000
Manifest this update: Sat 09 Aug 2025 13:02:46 +0000
Manifest next update: Sun 10 Aug 2025 13:02:46 +0000
Files and hashes: 1: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: 8ed685z9opGPgGF9bdo0UUY/dyKdeTAJXmkFO4edTNk=)
2: pUM6ACWqLcQahA0lg8mmij4I6d4.roa (hash: UbfUIFFNnl9kUqI4HdZKMmMa2NoguiRD4aW6tenaTi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:31:f8:85:0c:bf:2c:6f:33:34:db:ef:69:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Aug 9 13:02:46 2025 GMT
Not After : Aug 10 13:02:46 2025 GMT
Subject: CN=ba23c7061dd0a151abe91a1696dca59c46913d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:af:c1:17:a2:be:3c:11:65:72:95:fe:71:
b5:2c:78:3b:61:5a:07:93:46:63:c9:fe:30:11:69:
3a:a0:70:c8:46:f7:7f:dd:84:5d:fc:30:ec:22:e7:
5e:e2:bf:ff:42:14:28:66:49:c1:86:b5:7c:1d:d7:
d4:51:23:6c:97:03:cd:73:f5:50:7a:52:88:f5:17:
3b:21:ce:c0:19:06:e7:a2:e1:bc:1a:8e:17:7e:25:
e8:55:53:b2:d1:f0:d0:1f:5e:d4:d4:68:47:44:d3:
92:4a:b5:2f:7c:b0:5c:5a:c1:8d:0b:92:34:26:28:
23:cf:09:61:45:cd:f6:ba:ea:5e:af:fe:57:96:9f:
0e:9f:bf:a8:26:e1:ff:e7:78:e5:23:90:37:4f:f4:
a4:6b:b0:da:d0:83:9d:2a:52:9d:d6:f1:47:7a:4f:
f8:b4:45:b6:be:17:c6:95:26:ea:d9:97:ba:0a:17:
4b:78:74:60:ff:6a:32:19:77:04:5b:77:eb:65:df:
15:fc:da:04:51:42:e8:50:d0:28:e2:97:ad:18:64:
f9:3e:42:44:f0:e3:d3:6c:1c:44:7b:68:e0:cc:fb:
1c:fb:09:49:bb:47:96:c2:25:41:e2:f1:1a:4d:1e:
e8:4b:71:d1:90:78:65:e5:8f:16:df:89:b4:95:0f:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:C7:06:1D:D0:A1:51:AB:E9:1A:16:96:DC:A5:9C:46:91:3D:37
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:86:83:e0:cc:01:26:34:92:69:7c:90:ca:3f:4f:65:f5:0d:
f3:54:f6:8f:ce:fc:89:4b:97:04:fc:69:06:79:b7:3d:21:8e:
4c:02:e4:a5:ee:e8:85:2e:c1:03:bb:63:0f:c7:7d:fb:29:f0:
94:c8:9c:8d:13:0a:bb:3f:80:d0:b9:d7:33:c0:94:dc:67:32:
06:87:c9:ba:d3:db:d4:90:25:ca:78:27:f8:56:74:04:8e:7c:
68:60:f0:3e:d7:a1:5d:78:c9:89:96:a0:28:4e:ed:50:ea:49:
92:b3:f2:a4:6b:1a:36:a4:4a:97:11:17:e8:c1:86:a9:aa:de:
cb:1b:2f:e1:14:8c:96:7c:1e:79:76:de:55:a8:e3:e7:14:cf:
7f:61:e9:69:9a:6b:4e:7f:ea:0e:b2:95:f4:c6:7d:63:65:ab:
42:58:7b:ae:67:fb:ba:2e:c2:a6:54:1a:fa:8c:c1:dc:34:9c:
9c:99:33:1c:83:f8:5d:de:17:3c:bd:52:2e:46:78:c6:1c:e8:
0d:49:db:ef:c6:53:f6:d0:09:cd:85:75:67:17:db:f7:b9:d6:
bd:75:a5:2f:0e:39:73:07:3f:01:a5:17:db:e9:39:10:c5:0f:
d9:69:67:39:30:7b:51:7c:ce:6e:2f:37:2d:21:e1:fe:31:97:
93:4f:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:41 2025 by rpki-client