Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier: c78fAdZ6cYETZLscRLzhgBRugNsPhlT8qmfINxnuNL8=
Subject key identifier: F6:1F:D2:78:A0:21:5B:7E:9B:DF:66:57:67:8E:89:B8:49:11:5E:C9
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 01988BEAF03FCA99C97BFBD0652B20F6D818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number: 10F3
Signing time: Fri 08 Aug 2025 23:01:26 +0000
Manifest this update: Fri 08 Aug 2025 23:01:26 +0000
Manifest next update: Sat 09 Aug 2025 23:01:26 +0000
Files and hashes: 1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: ZlcJQCXUbbVuWsuHnZ4XqFUOxj2Shpa4uP75OjB7GbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:f0:3f:ca:99:c9:7b:fb:d0:65:2b:20:f6:d8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Aug 8 23:01:26 2025 GMT
Not After : Aug 9 23:01:26 2025 GMT
Subject: CN=f61fd278a0215b7e9bdf6657678e89b849115ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:12:38:31:1e:f1:63:10:3d:34:06:a9:92:
b7:c1:d8:ce:ad:ca:47:53:2e:dc:da:23:9c:e9:5c:
8e:59:2f:0c:7f:5e:53:c8:a7:12:01:3a:bf:d6:3b:
54:10:7b:cb:e2:5b:fa:d8:46:97:55:82:d6:e3:d6:
51:59:93:42:56:a5:19:cb:93:72:31:08:e7:a2:c8:
33:f6:b0:f0:80:2d:a5:81:de:12:bc:30:c4:6e:af:
2a:39:46:ad:50:2e:e4:cf:40:ca:4d:19:42:fd:c2:
f3:bd:01:a0:59:21:e3:50:e6:c3:b4:1e:d0:de:a0:
3d:f3:dc:9b:a6:3c:9a:4d:2c:33:d0:ec:9e:25:50:
e5:74:c9:41:06:35:5a:5e:ad:e1:75:8f:74:06:db:
d5:1f:42:50:d6:41:90:80:6d:61:d6:33:7d:8d:bf:
c4:7b:70:78:96:18:d7:06:59:fd:fe:52:2a:9d:9d:
68:82:88:37:f7:ac:ff:f4:cb:16:91:9c:13:24:dd:
a9:df:4c:3d:6e:48:36:f4:dc:b4:ce:5b:4a:0d:fc:
c5:69:0a:77:22:00:40:f8:51:65:b1:a4:86:52:87:
2f:07:20:2e:71:09:2e:cd:fc:c0:ad:ba:15:7f:08:
b0:ad:d1:44:28:55:2d:3b:02:25:66:d7:d3:76:e2:
22:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1F:D2:78:A0:21:5B:7E:9B:DF:66:57:67:8E:89:B8:49:11:5E:C9
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3f:3b:63:57:f5:dc:40:ec:30:e1:69:81:fc:8e:2b:8f:8d:
65:6a:7c:04:34:32:2d:f1:f0:2c:8f:de:b1:d1:e3:23:0a:85:
e3:bc:5f:6e:09:64:83:dd:1d:96:92:ae:56:12:51:c1:c9:dd:
78:c6:4e:98:44:ce:17:69:a3:a2:52:e4:6d:81:78:c7:cb:84:
1b:c1:43:1a:82:25:c9:ce:b6:85:03:b3:e7:b8:67:fc:55:c8:
4b:6c:ea:c0:6a:d0:3b:fa:a0:88:02:f9:e4:5d:05:32:01:c8:
05:f3:f3:67:c9:d7:f7:c1:2d:ae:32:a3:7d:77:03:c0:0f:3c:
6d:77:19:ae:4f:50:25:36:d2:fe:ce:f1:13:11:a7:c3:0d:c0:
f5:c1:9d:7f:f0:61:96:cc:d5:41:c3:77:74:04:6f:2f:18:98:
fa:c7:ff:5e:e7:43:25:be:c5:7a:1c:fc:a8:9c:d8:79:87:19:
c6:71:9b:81:23:58:90:94:2c:db:c2:92:87:de:56:cc:3e:2a:
d8:5c:3f:9f:50:81:67:2f:80:19:0c:dc:3d:be:87:64:b7:76:
13:d2:41:1d:f9:db:64:88:15:ff:d8:f8:34:0e:09:ff:73:67:
3b:46:d0:53:92:33:10:4b:a0:63:da:ce:48:70:5b:ae:f7:b8:
91:34:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:50:02 2025 by rpki-client