Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: 7GbuV8uyb70lcD6midzfHiI6ht1RtCyphwZoLlov+go=
Subject key identifier: 17:77:20:03:69:A4:C3:85:3A:64:DB:A0:E5:10:44:B6:D7:5A:91:E7
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 019846645FEA059D23B4CCC3D2638BE8E643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 11:00:39 +0000
Manifest this update: Sat 26 Jul 2025 11:00:39 +0000
Manifest next update: Sun 27 Jul 2025 11:00:39 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: HQuWtVBnk4X9Za1DOxliscAa4Om1jDMVYui69/Qezxg=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:5f:ea:05:9d:23:b4:cc:c3:d2:63:8b:e8:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Jul 26 11:00:39 2025 GMT
Not After : Jul 27 11:00:39 2025 GMT
Subject: CN=1777200369a4c3853a64dba0e51044b6d75a91e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:d6:36:43:a1:41:ba:54:4d:73:da:44:a9:
30:f7:af:c3:ae:80:86:b3:05:ee:86:29:ee:96:11:
90:f2:4d:c3:c7:bf:7f:e5:d3:2e:76:26:2e:ef:9a:
82:56:42:71:f9:c2:2b:0c:7a:27:0d:c8:8f:25:43:
c5:80:5f:56:a4:5b:74:bf:cc:c2:2b:1e:d6:d7:af:
dd:47:54:10:93:2d:c3:23:c0:72:b6:4f:32:bf:19:
ca:d5:6d:7c:1e:a1:b6:de:44:7e:52:f3:56:3a:82:
9f:24:4a:97:1d:65:d8:1b:2a:38:91:bc:49:4f:d7:
e3:74:a5:a4:65:68:01:d2:bd:f3:53:4c:5c:c9:c8:
e7:b4:84:da:91:76:fb:62:66:cd:9d:fe:5e:91:50:
e6:96:69:49:c8:3b:fa:48:b0:6e:5e:95:f7:d6:fb:
25:35:61:ce:cd:8b:d9:a9:62:24:3b:4e:74:99:36:
31:70:11:25:a3:3a:58:df:b2:7a:4f:d8:e7:eb:f1:
9f:eb:a9:e8:3b:97:b9:53:37:08:36:d7:a6:69:96:
76:69:a7:61:21:e0:d3:cf:55:46:a2:c6:cf:c5:50:
0d:d7:57:df:45:0e:60:2b:b8:cb:97:5b:eb:a2:74:
28:e8:37:fc:d9:63:97:07:76:de:d1:25:9f:e5:1e:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:20:03:69:A4:C3:85:3A:64:DB:A0:E5:10:44:B6:D7:5A:91:E7
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:18:ed:03:4e:32:23:35:2e:23:48:9a:70:8d:ab:75:3a:
d3:34:84:37:0e:0f:49:9a:1c:c2:42:5a:30:0d:49:a7:4e:35:
97:cf:15:94:86:1f:4c:b1:21:3e:a5:56:06:f3:e2:93:6d:fc:
c7:4f:7f:4e:29:11:f0:73:35:43:46:90:2c:76:3f:bc:f3:7b:
ae:52:f5:dd:3f:a3:d3:3d:be:71:22:2c:27:66:ce:19:b5:fd:
98:18:3b:01:a3:27:e2:25:24:bf:31:d3:26:8d:a7:d3:66:04:
6e:61:b8:9f:68:0d:2f:94:e5:f0:57:ee:ff:8f:c4:57:95:e2:
c2:01:4a:9e:bd:8e:a6:82:fc:d6:da:56:c5:d9:a7:07:75:64:
7e:88:0a:b3:f4:5f:9f:f6:b9:56:a7:9e:6c:0d:8e:e3:9d:14:
f1:ed:fd:68:13:69:38:b9:cb:11:39:e3:6d:ef:a3:bb:97:a8:
68:85:fb:be:3e:9f:f3:df:44:94:7f:65:91:e1:b4:25:d8:17:
d5:80:86:95:89:18:19:d3:e1:9b:81:e2:37:11:71:45:3b:f4:
3b:38:45:9a:bf:8f:11:2d:63:6c:d7:91:02:d0:b3:ed:15:c3:
2e:69:d7:ce:46:18:4d:09:ea:7c:9e:3e:2b:d7:17:0a:08:8e:
47:83:9e:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZF/qBZ0jtMzD0mOL6OZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGY4MTI2ODgyOTMwMWYzZDY5ZWI5NmY4YWM2MTdmYTI1
MjU2YTEwHhcNMjUwNzI2MTEwMDM5WhcNMjUwNzI3MTEwMDM5WjAzMTEwLwYDVQQD
EygxNzc3MjAwMzY5YTRjMzg1M2E2NGRiYTBlNTEwNDRiNmQ3NWE5MWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYTWNkOhQbpUTXPaRKkw96/DroCG
swXuhinulhGQ8k3Dx79/5dMudiYu75qCVkJx+cIrDHonDciPJUPFgF9WpFt0v8zC
Kx7W16/dR1QQky3DI8Bytk8yvxnK1W18HqG23kR+UvNWOoKfJEqXHWXYGyo4kbxJ
T9fjdKWkZWgB0r3zU0xcycjntITakXb7YmbNnf5ekVDmlmlJyDv6SLBuXpX31vsl
NWHOzYvZqWIkO050mTYxcBElozpY37J6T9jn6/Gf66noO5e5UzcINtemaZZ2aadh
IeDTz1VGosbPxVAN11ffRQ5gK7jLl1vronQo6Df82WOXB3be0SWf5R7xOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd3IANppMOFOmTboOUQRLbXWpHnMB8GA1UdIwQY
MBaAFALfgSaIKTAfPWnrlvisYX+iUlahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2It
M2U4NmQyYzI5OTY5LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2ItM2U4NmQyYzI5OTY5
LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4IY7QNO
MiM1LiNImnCNq3U60zSENw4PSZocwkJaMA1Jp041l88VlIYfTLEhPqVWBvPik238
x09/TikR8HM1Q0aQLHY/vPN7rlL13T+j0z2+cSIsJ2bOGbX9mBg7AaMn4iUkvzHT
Jo2n02YEbmG4n2gNL5Tl8Ffu/4/EV5XiwgFKnr2OpoL81tpWxdmnB3VkfogKs/Rf
n/a5VqeebA2O450U8e39aBNpOLnLETnjbe+ju5eoaIX7vj6f899ElH9lkeG0JdgX
1YCGlYkYGdPhm4HiNxFxRTv0OzhFmr+PES1jbNeRAtCz7RXDLmnXzkYYTQnqfJ4+
K9cXCgiOR4OeBQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:45:44 2025 by rpki-client