Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File: ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier: +BOC+f9yVXUEPii/KaBdK0P/X2dvhVCL+Tenps/gwVY=
Subject key identifier: 02:8E:AD:3D:A0:E1:B1:A8:6E:43:91:07:50:7F:E3:9D:15:20:52:35
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 019873E294C52A4189ACC1F0B5859D3CBBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number: 1373
Signing time: Mon 04 Aug 2025 07:01:25 +0000
Manifest this update: Mon 04 Aug 2025 07:01:25 +0000
Manifest next update: Tue 05 Aug 2025 07:01:25 +0000
Files and hashes: 1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: LUkU5xu83b4yKFdH5Z5C7TmAh7XbsX/ERk+tufjF4Yo=)
2: Yp_lUqP28vEyFCPRb80UtGDXNsg.roa (hash: ywVUWmL4GSGoY6WsMRyetGJGnvc6akPYgfQXjeu4wCo=)
3: jA79aGVqPI-PvZSOlUeJ0j64c1Q.roa (hash: cpbrUzoeXFWleCog+F05RG8Xxbfmz0h5Ia9JXBRNANY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:94:c5:2a:41:89:ac:c1:f0:b5:85:9d:3c:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Aug 4 07:01:25 2025 GMT
Not After : Aug 5 07:01:25 2025 GMT
Subject: CN=028ead3da0e1b1a86e439107507fe39d15205235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:ad:b9:df:62:ce:5d:d2:90:a6:27:d9:5d:
eb:68:f4:fc:3d:e9:66:34:55:d0:51:5d:ea:dc:db:
85:3d:a1:53:1a:8b:7b:66:d5:c8:2f:72:6e:08:c3:
26:22:b7:89:97:09:81:f6:5f:70:af:36:7c:a4:97:
e8:9c:d1:63:db:53:b1:dd:7b:84:da:ce:35:55:5a:
f9:fc:a7:9b:d7:6d:76:c7:d9:87:1b:a2:6b:3b:2e:
60:ea:41:11:27:ab:6a:d3:2a:0d:0a:16:4c:3c:5f:
bb:34:ad:e9:10:a1:0f:db:44:e7:09:93:be:e1:52:
5c:42:f1:7d:9b:48:20:a9:46:1d:fb:0f:e6:4d:79:
97:f8:2d:8e:54:72:11:64:a1:90:b5:99:28:97:17:
dd:d4:da:8d:92:15:b3:f3:d2:1c:75:59:2e:3b:b8:
f0:55:96:51:2b:3b:57:c0:7e:65:4d:12:70:e5:8d:
98:0d:c3:e6:7c:77:06:15:c8:58:5e:0a:7c:c0:cc:
c2:31:da:bf:37:83:d1:18:f4:fa:ee:f6:0a:94:55:
69:d6:10:4b:a2:c1:a4:63:83:b9:cb:3b:1a:02:70:
43:9b:54:ac:61:b9:6d:60:93:02:8c:e1:6b:ac:88:
a8:7c:34:d4:5f:63:15:2e:4c:74:6f:cb:1e:77:b6:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:AD:3D:A0:E1:B1:A8:6E:43:91:07:50:7F:E3:9D:15:20:52:35
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:72:83:17:0e:91:59:62:f0:05:10:7f:d3:1a:f1:2f:6c:e9:
50:f6:5e:dc:c3:7e:72:8e:eb:c4:90:84:ff:82:e2:25:b3:e5:
93:02:af:a6:11:66:85:fd:58:56:11:22:3f:45:f4:4a:99:ca:
5b:24:98:ec:8a:16:5c:92:73:cc:92:fa:2b:6f:0e:de:c5:8f:
7f:6a:6f:7f:90:cc:03:56:25:d5:93:12:eb:77:b2:bd:5f:19:
43:55:06:24:c0:e7:31:f2:1b:bc:9d:7b:04:47:84:43:cc:7e:
6f:54:c3:f1:6b:d4:88:c6:2f:31:6a:f4:78:89:bd:6a:8c:a3:
eb:f2:62:43:81:bf:c4:e8:ba:35:fe:dc:2b:70:02:ab:72:dc:
5c:95:5c:1c:c7:aa:06:23:44:ef:e5:c9:5f:9f:3c:10:09:ae:
6b:33:46:40:80:92:88:f5:5d:ed:2f:a7:8e:e9:c1:6b:33:f5:
ef:f9:18:04:5e:06:d9:3f:51:17:fc:df:cc:77:3b:ea:15:39:
f8:da:e9:d6:a1:7e:6c:ed:1f:e1:84:98:5c:f2:2e:26:31:ac:
58:cc:5e:6a:49:7b:e9:1f:00:2e:a2:ba:e8:c9:13:11:90:d7:
8b:37:87:f6:20:07:9f:1f:63:13:53:23:da:8a:b2:80:ce:1f:
66:74:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:20 2025 by rpki-client