Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: XU2YH8h3XvHHbd86f+kngD4NLb2UvHSmQhvd4eepXK4=
Subject key identifier: A3:91:46:56:9A:0F:C3:25:26:27:7E:81:D0:3D:40:14:BC:A0:BF:9F
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 019854FC1676B220EDDDE811465E74C42AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 07:01:03 +0000
Manifest this update: Tue 29 Jul 2025 07:01:03 +0000
Manifest next update: Wed 30 Jul 2025 07:01:03 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: Iqg0sYa6Mp32brPqmSnRFN+HZLQu4a0jxf3pjg90hoc=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:16:76:b2:20:ed:dd:e8:11:46:5e:74:c4:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jul 29 07:01:03 2025 GMT
Not After : Jul 30 07:01:03 2025 GMT
Subject: CN=a39146569a0fc32526277e81d03d4014bca0bf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:ac:2f:00:d8:cf:b7:5d:5c:81:3c:c6:fa:
4e:f3:0f:3d:ea:b3:45:44:db:f9:13:c0:5d:89:40:
a3:14:a6:b8:f6:c9:c9:71:a4:07:44:5d:0e:98:b8:
b4:a8:55:34:65:fb:ab:68:11:08:1b:1d:f1:39:44:
fd:b1:ae:63:08:57:ec:5e:9f:8b:34:fe:d6:c3:3c:
38:57:6a:ca:96:93:c9:09:b9:8d:b2:c3:43:7a:36:
ff:ea:d0:7d:3b:63:85:ba:e0:52:9c:28:74:a0:0d:
67:d8:ba:53:82:ee:87:68:51:43:11:ca:a4:1a:ba:
f4:a0:42:58:75:55:d6:96:a3:1c:b8:d8:e5:f5:6f:
85:ab:f4:3b:8e:8f:90:d9:39:b1:98:89:e9:2e:20:
17:14:cc:b5:c1:65:a1:6f:a6:16:e0:ba:84:4d:bc:
9a:3d:45:4d:27:c6:fd:10:f0:0c:66:39:a5:b2:c4:
1f:8b:ac:ff:c7:ce:cb:65:ce:0d:8a:6a:43:09:e3:
f1:30:a0:2b:b7:bf:67:ad:ac:64:4e:47:8a:bb:a0:
24:19:b8:fb:9c:e7:29:94:44:18:30:72:3e:75:ca:
08:86:9c:3c:e1:b8:05:84:42:e7:47:4b:d7:aa:de:
2b:28:40:99:a3:ae:38:76:14:43:6a:8e:7b:d5:b1:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:46:56:9A:0F:C3:25:26:27:7E:81:D0:3D:40:14:BC:A0:BF:9F
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:1f:60:d8:da:b1:a4:79:51:6d:80:37:31:2c:75:6c:14:
77:6e:dc:bf:70:57:b2:e7:5f:18:4d:89:c3:66:d6:50:de:6e:
a5:c8:14:7b:d9:05:75:69:ed:1c:28:08:e1:51:5d:c9:10:f9:
e0:29:74:01:8f:c7:12:5a:38:31:18:fd:c9:f5:39:e7:a1:bb:
cd:fa:37:70:54:0e:14:e8:0f:6f:6b:ff:51:62:b5:08:87:52:
ec:07:9b:1c:ce:ed:b8:45:57:36:46:05:dc:5c:dc:df:33:ad:
dc:f9:05:13:4e:2f:18:61:42:d3:07:a6:80:a3:76:2e:65:b1:
14:08:86:11:42:36:85:0d:83:61:4d:39:30:4c:fc:ae:d0:b4:
95:37:c2:0c:1c:b6:cd:04:2e:7a:30:83:7f:06:f8:eb:32:e3:
8c:8f:b4:a6:20:4e:e1:85:89:b7:f1:81:29:71:19:a6:c4:ca:
4d:37:04:2a:53:89:d1:18:60:9e:ad:8d:c1:fa:87:38:ee:6f:
63:10:ff:90:7d:fc:26:94:38:0b:14:96:4c:ef:c4:4f:91:55:
cf:20:c4:ef:89:c9:36:99:7a:9e:92:74:d4:90:a2:d0:c2:b2:
91:25:88:49:c5:8e:4d:10:59:05:2d:94:d2:92:17:d8:b2:a9:
09:df:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:04:00 2025 by rpki-client