Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: N0wbngVVNiRE60lWfljVLAc+6sA/EVMXDcL48y70q5s=
Subject key identifier: C6:54:08:1C:AE:39:F9:BD:37:18:14:A2:D8:29:D3:F4:F8:39:18:B7
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019748FA91EBA33563652058CFBEE3322967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1298
Signing time: Sat 07 Jun 2025 06:01:10 +0000
Manifest this update: Sat 07 Jun 2025 06:01:10 +0000
Manifest next update: Sun 08 Jun 2025 06:01:10 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: TCSBTDNrNdHsKpQCcCXO1AEMmgqRgFX6tn7nfzyXp70=)
2: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=)
3: w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa (hash: wDr5pC8ALwDb+JSgX5rgKPXkUmbOaUgv+fsaXxbR3wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:91:eb:a3:35:63:65:20:58:cf:be:e3:32:29:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jun 7 06:01:10 2025 GMT
Not After : Jun 8 06:01:10 2025 GMT
Subject: CN=c654081cae39f9bd371814a2d829d3f4f83918b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:34:0d:dc:67:bb:47:ed:c6:ce:6a:9d:4e:
05:46:b6:aa:b4:f7:5c:dd:16:91:1e:6e:42:83:7a:
49:d0:27:cc:f5:f5:f5:fe:8d:e4:16:53:61:19:34:
6e:fa:47:a1:67:a1:98:f4:df:49:93:2a:eb:5e:1c:
46:16:a6:a3:ec:0b:46:23:ce:5e:ef:c7:f8:7b:14:
87:d7:44:bd:76:a0:25:17:0d:31:41:3d:09:4a:2d:
8d:be:e2:d1:dc:66:14:c9:a5:5d:d8:1e:0c:89:0f:
ea:d4:03:95:96:9c:b1:e4:96:78:7f:ee:51:bb:71:
97:1b:b1:2b:f7:39:7c:ea:ac:20:7d:f9:bd:30:a5:
58:09:a3:d9:81:c1:de:47:d6:7a:a7:a0:c7:73:24:
60:ed:fd:1e:f5:48:11:f4:f2:62:ad:e1:e7:43:0b:
76:31:22:9f:38:92:fd:c2:34:53:70:8b:46:15:db:
c3:7f:80:9e:6f:c4:90:0f:49:dd:1a:b1:44:3d:cc:
9b:3e:c4:73:00:bd:b6:d5:84:c8:fb:d1:bc:37:a9:
e1:48:b2:ac:0f:6b:c5:12:f1:95:d2:3b:5d:69:4a:
18:dd:ab:bf:92:4b:a5:7a:ca:a0:e8:dc:58:d5:41:
47:f4:34:54:a0:eb:a5:94:1a:55:a9:79:77:45:f0:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:54:08:1C:AE:39:F9:BD:37:18:14:A2:D8:29:D3:F4:F8:39:18:B7
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:38:7a:af:cf:7a:51:bb:83:e4:84:93:16:7e:a3:0c:67:84:
86:ad:63:7c:7f:6d:d3:c3:17:49:96:8f:80:e1:7e:ca:55:25:
57:bf:84:49:e4:d1:1b:18:89:f4:1c:47:1f:90:57:d6:b4:c2:
f0:17:f0:36:e6:89:19:10:a8:d5:83:fd:44:5d:2d:b7:e2:5e:
ed:d9:5f:a5:7d:84:9b:7f:19:e0:07:2f:0b:2f:00:f6:61:65:
d7:49:55:b6:d0:d7:fe:b4:d8:a2:8f:39:66:d6:7e:56:70:ee:
b5:a1:51:d5:d1:60:a6:e1:8f:a8:a4:ad:fd:38:c1:cc:4f:55:
63:83:97:dc:01:54:93:d2:18:fc:c0:c0:0c:f0:30:85:b6:a7:
e4:5d:49:2d:ab:c4:0b:d4:61:04:03:30:6e:f8:1e:a5:cf:1d:
f7:9d:30:ef:d7:1f:41:d5:dc:9c:24:70:8a:c6:8e:e6:65:20:
73:28:05:6d:5f:63:0f:26:19:ad:f8:9b:36:2e:0d:eb:2b:ea:
65:02:c4:a5:f5:68:42:37:39:49:40:3c:3f:42:7b:fe:08:85:
1a:1e:de:8f:21:99:64:b2:94:fc:01:e1:cd:06:9a:1c:46:5d:
84:a0:91:57:59:06:50:8a:a2:87:33:24:bc:d0:77:fe:af:33:
83:1c:38:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+pHrozVjZSBYz77jMilnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz
ZDcxODMwHhcNMjUwNjA3MDYwMTEwWhcNMjUwNjA4MDYwMTEwWjAzMTEwLwYDVQQD
EyhjNjU0MDgxY2FlMzlmOWJkMzcxODE0YTJkODI5ZDNmNGY4MzkxOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eU0Ddxnu0ftxs5qnU4FRraqtPdc
3RaRHm5Cg3pJ0CfM9fX1/o3kFlNhGTRu+kehZ6GY9N9JkyrrXhxGFqaj7AtGI85e
78f4exSH10S9dqAlFw0xQT0JSi2NvuLR3GYUyaVd2B4MiQ/q1AOVlpyx5JZ4f+5R
u3GXG7Er9zl86qwgffm9MKVYCaPZgcHeR9Z6p6DHcyRg7f0e9UgR9PJireHnQwt2
MSKfOJL9wjRTcItGFdvDf4Ceb8SQD0ndGrFEPcybPsRzAL221YTI+9G8N6nhSLKs
D2vFEvGV0jtdaUoY3au/kkulesqg6NxY1UFH9DRUoOullBpVqXl3RfC7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZUCByuOfm9NxgUotgp0/T4ORi3MB8GA1UdIwQY
MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct
OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj
LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjh6r896
UbuD5ISTFn6jDGeEhq1jfH9t08MXSZaPgOF+ylUlV7+ESeTRGxiJ9BxHH5BX1rTC
8BfwNuaJGRCo1YP9RF0tt+Je7dlfpX2Em38Z4AcvCy8A9mFl10lVttDX/rTYoo85
ZtZ+VnDutaFR1dFgpuGPqKSt/TjBzE9VY4OX3AFUk9IY/MDADPAwhban5F1JLavE
C9RhBAMwbvgepc8d950w79cfQdXcnCRwisaO5mUgcygFbV9jDyYZrfibNi4N6yvq
ZQLEpfVoQjc5SUA8P0J7/giFGh7ejyGZZLKU/AHhzQaaHEZdhKCRV1kGUIqihzMk
vNB3/q8zgxw43A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:37:24 2025 by rpki-client