Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: VK30Iqqhlh5rptOvzp9TeAWtfy9x5nysW/C8xs3ZCvU=
Subject key identifier: 10:2C:B9:9C:6C:CB:C4:0A:C7:89:F9:FD:74:AC:AA:27:CA:B8:AE:14
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 0197711AF3B7DF3D6F8FC487F550EAE98F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0CF4
Signing time: Sun 15 Jun 2025 01:01:21 +0000
Manifest this update: Sun 15 Jun 2025 01:01:21 +0000
Manifest next update: Mon 16 Jun 2025 01:01:21 +0000
Files and hashes: 1: GmqA8QHCC_5l1aRwm4_AA_zKBr8.roa (hash: //VrfLrjXO7Yeg38MyrhRoEusnw2871AyCYLfx6ldsE=)
2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: 4T4olwYlzktvqBa60dQb5Dhq9nycedH7SDiU360LLCI=)
3: tVfNb6vANMjkCnwkn_zqjQ9R46g.roa (hash: sIFbcv+pjLFEVXCoeuZdGPtO8JDvf+xPKrDKXkHq+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:f3:b7:df:3d:6f:8f:c4:87:f5:50:ea:e9:8f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Jun 15 01:01:21 2025 GMT
Not After : Jun 16 01:01:21 2025 GMT
Subject: CN=102cb99c6ccbc40ac789f9fd74acaa27cab8ae14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:aa:15:e2:08:02:ac:55:60:d6:79:a2:ee:
c8:2b:87:69:d4:4e:61:e7:6b:c7:df:40:32:f4:9a:
4b:80:0f:81:41:0a:b3:9d:6a:e2:d7:b3:b5:c2:bd:
9e:ea:e2:b4:0c:14:08:2c:6e:f7:a4:dd:db:43:cb:
ac:5f:86:7e:40:a7:d0:90:6a:cc:48:54:8d:33:ea:
4a:f2:f5:0f:17:d2:f8:a4:a4:a1:70:91:50:0d:e0:
b5:75:24:15:ec:31:21:cd:a9:09:e7:30:76:32:fa:
2a:01:81:67:67:3f:bd:6b:89:ae:b7:79:85:64:66:
36:c1:b9:7f:ea:ca:45:97:97:ed:14:8b:6c:3b:17:
4b:84:04:6a:7f:a1:d2:1b:32:de:6e:51:60:45:f3:
14:10:0f:b9:58:d8:63:1b:38:22:3f:81:72:f3:c0:
de:d7:b6:4d:ad:94:65:26:8e:2b:3c:6d:e8:f2:db:
ed:8c:67:b8:ec:30:d0:d8:9c:a9:a5:ab:ed:ba:2a:
ef:41:dc:88:51:75:14:82:70:11:40:81:36:d8:14:
b8:1d:b1:8a:61:95:0b:22:b1:ea:b2:72:2f:98:5a:
f0:fe:2c:3d:90:9f:92:f7:b5:48:54:95:37:f3:92:
7b:3e:fd:b8:38:6d:a2:1f:eb:95:36:5a:50:e8:68:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:B9:9C:6C:CB:C4:0A:C7:89:F9:FD:74:AC:AA:27:CA:B8:AE:14
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:de:b2:f0:15:ed:1e:5f:e9:6d:ac:4c:fc:09:66:ed:b8:c8:
c7:b0:5d:cf:61:c8:93:2b:ff:14:e9:82:8c:6d:b4:4c:37:7c:
7e:38:65:8a:7e:c6:6a:3f:4a:7a:5f:88:ae:0a:0e:5e:d5:7d:
eb:3f:40:45:20:6d:c5:67:4d:86:e4:31:79:16:68:2d:6b:a0:
fa:9c:da:7b:a0:9f:1d:c3:77:7d:ed:e4:13:4c:2f:80:30:3f:
4e:b9:79:02:8f:be:93:fe:59:2e:72:21:5c:88:aa:fa:01:a0:
77:f3:af:0f:b1:6c:3f:58:26:1c:67:09:f0:e0:a8:35:88:d9:
01:c7:b7:7b:30:58:ac:79:22:83:9a:a7:b9:27:4d:18:f6:c3:
9e:84:ba:1f:6f:47:37:cd:f6:f4:74:5f:4f:0f:ff:70:82:77:
11:a3:6d:d5:98:61:fd:28:dc:c7:a7:81:6c:77:b5:5e:20:d3:
72:9c:ba:a4:32:c7:9f:a9:97:a1:6d:9d:f3:14:80:ab:d5:f2:
37:05:ad:de:62:75:65:1a:b3:f0:3e:f5:17:5d:ff:6e:0a:67:
39:c7:0d:7e:d6:7a:5b:8c:d1:75:c0:8b:55:63:02:00:1d:1f:
27:00:39:89:a0:47:90:2a:23:9b:a8:82:e9:58:36:81:15:1a:
c6:19:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:12 2025 by rpki-client