Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier: T6PtXdGCBznxXzFkdjQi73vM2bmM3a7LOJ+Vi0GKHx0=
Subject key identifier: C1:02:A7:06:3C:72:4E:A9:3C:8A:68:D8:50:EE:C6:EF:BD:58:65:9F
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 0198537AFC7F5EB0C61E7942AE2271D7A88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number: 0604
Signing time: Tue 29 Jul 2025 00:00:25 +0000
Manifest this update: Tue 29 Jul 2025 00:00:25 +0000
Manifest next update: Wed 30 Jul 2025 00:00:25 +0000
Files and hashes: 1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=)
2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: Ax5EXT750+M3etSGCsBBkUsty/QUZCwVc5DWu5ckBs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:fc:7f:5e:b0:c6:1e:79:42:ae:22:71:d7:a8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Jul 29 00:00:25 2025 GMT
Not After : Jul 30 00:00:25 2025 GMT
Subject: CN=c102a7063c724ea93c8a68d850eec6efbd58659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:6e:e0:c1:11:c7:67:14:18:b4:3b:d8:f0:
21:42:3a:a4:20:35:f8:45:5f:6b:81:11:33:33:03:
f8:44:8a:4d:9d:02:44:3a:ad:a7:9c:cf:3f:14:50:
2b:fa:32:8c:4a:6a:57:17:65:c8:46:f3:ab:f2:4b:
37:11:bd:aa:6a:91:bb:8b:ca:33:28:1d:99:42:70:
42:15:4d:b3:28:86:50:36:42:7c:ea:f7:1b:a7:bc:
26:08:2c:a9:4a:5e:a5:15:00:45:29:4f:dc:72:2f:
19:82:e7:a7:23:38:b3:d4:1d:77:1a:b2:d8:79:a9:
74:4a:18:ab:a3:ee:f4:4b:a1:a4:48:1a:b6:86:41:
b7:53:ac:cd:3a:ca:18:86:de:f7:20:9b:31:58:2b:
cf:de:9f:ab:23:91:55:f5:27:52:5c:75:24:80:9a:
cb:dc:41:1d:7e:b1:b7:33:d1:bc:27:04:03:45:0d:
e2:57:6c:7e:1b:6b:65:e6:f5:6d:64:31:a9:c3:bb:
f7:c8:cf:53:63:f3:92:d4:4a:42:14:4f:af:d6:d2:
b1:fc:9b:e1:68:aa:cd:51:1a:0a:fa:f3:65:87:0e:
dd:df:40:a2:5b:00:56:95:e4:12:a8:00:37:f3:98:
18:2c:29:8f:13:c5:02:49:43:65:64:9f:ab:80:0b:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:02:A7:06:3C:72:4E:A9:3C:8A:68:D8:50:EE:C6:EF:BD:58:65:9F
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6b:47:79:90:e4:c4:ad:2a:b7:98:31:55:24:e2:32:aa:25:
78:14:67:b9:63:35:8a:96:3a:bb:c5:39:8b:89:d6:e9:5f:70:
9c:68:df:97:90:4a:68:4e:6d:bc:9e:88:88:7c:17:ac:8e:1c:
e1:7a:9f:53:77:e3:d0:6e:3e:37:b6:5b:4e:6a:70:34:e7:d6:
e9:97:f0:18:79:43:67:de:ce:3b:af:39:06:b6:1f:30:35:fc:
6c:5d:4a:77:21:e3:4b:b5:eb:71:ef:a2:b3:ca:f6:93:e8:6b:
e3:63:d8:dc:eb:2e:5a:fd:60:6a:e1:b3:43:64:75:14:9a:ce:
b7:0a:21:18:e0:72:7a:ac:36:81:6d:21:86:58:23:b3:d4:44:
b0:a3:bb:fa:b6:df:11:c4:a2:66:60:30:77:54:31:1f:2d:57:
30:56:a5:3e:4e:92:00:45:d2:a7:7c:79:14:3b:12:cf:84:f3:
c9:7e:b6:5a:5e:e6:76:c0:13:18:b7:90:06:07:63:09:b3:97:
9f:2c:c9:39:60:a1:4f:7e:c3:df:c9:4c:9c:3a:b3:7f:04:c0:
47:45:05:39:2e:c1:c1:75:82:d0:db:91:d5:c4:16:a8:0f:cc:
ac:50:b1:47:2c:87:3a:5a:74:e9:5e:e1:bf:cb:5e:0d:5f:3a:
51:47:b4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:04:59 2025 by rpki-client