Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: yhYSbE727QiP1npxsfQtc7Q6kMhHf1cVdx4kHpzk8RE=
Subject key identifier: 52:C2:3B:C3:63:4E:F0:3A:7C:F6:D5:F7:EA:D6:4D:DF:63:C6:45:EF
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 0199315A90145FEE474552D534DA2EAC2DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1395
Signing time: Wed 10 Sep 2025 02:00:42 +0000
Manifest this update: Wed 10 Sep 2025 02:00:42 +0000
Manifest next update: Thu 11 Sep 2025 02:00:42 +0000
Files and hashes: 1: 1-HJDRT0gD2nhMW6JUwz556mvKj8.roa (hash: JYyO1+sMj5YlHliO+us6FbC+ChQWiYGalwTjRduJQ2E=)
2: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: 75xFDqKK4/5IaconDCpM+3NbFoDI6zprv90A9GRtIJs=)
3: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:90:14:5f:ee:47:45:52:d5:34:da:2e:ac:2d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Sep 10 02:00:42 2025 GMT
Not After : Sep 11 02:00:42 2025 GMT
Subject: CN=52c23bc3634ef03a7cf6d5f7ead64ddf63c645ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:e0:30:88:58:48:d7:a5:20:bc:01:c7:fc:
1c:35:d6:3d:87:36:ec:76:1d:68:ee:33:20:eb:b9:
fe:9b:7a:19:c9:7a:b4:86:5f:d7:25:b9:7e:02:c6:
12:4d:1d:ae:72:06:75:7a:27:f6:a8:49:cb:da:da:
5c:2e:0e:41:e9:35:f3:9b:fd:1f:f0:27:96:9b:70:
63:49:45:2e:b8:0e:3b:9f:10:75:b5:78:68:4c:a8:
20:39:02:d1:39:f5:1e:31:f9:9c:5e:29:35:68:1f:
a3:42:27:a6:8a:31:19:74:d3:b7:ab:99:33:8e:ad:
57:9c:3e:2a:5a:20:e7:12:c2:f5:5b:7d:a2:33:0f:
8a:fb:c6:67:54:11:c5:f5:20:c0:19:78:11:2d:23:
6f:79:a1:19:fa:db:79:6f:e7:10:f0:05:0d:60:7b:
3c:8f:6d:3a:4a:33:e6:3f:2f:32:b0:c2:cd:80:0f:
ce:c4:1f:46:d4:ee:b7:2d:b9:c7:ff:d3:ac:0e:99:
17:66:5a:c2:db:8c:96:d4:00:ed:44:73:d9:5a:24:
dc:f5:2f:9b:37:e5:5e:73:20:f6:10:7f:9f:61:e0:
0a:2f:b7:51:43:ae:0a:5e:d6:07:88:4e:15:da:5b:
ef:49:1e:4c:80:bb:2e:cb:a4:50:e8:55:28:08:a4:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C2:3B:C3:63:4E:F0:3A:7C:F6:D5:F7:EA:D6:4D:DF:63:C6:45:EF
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:60:23:f7:93:40:cd:c6:99:c2:be:81:a8:75:ae:0d:6e:d5:
f9:7b:36:b1:39:f7:4c:ac:8f:a7:25:e9:f0:f4:1a:bf:64:6a:
66:6b:5d:5f:49:46:a4:f1:99:b2:55:d0:0f:d2:92:f0:be:a7:
11:1b:ac:94:b9:85:c2:e8:05:3f:de:e4:68:d4:7e:61:de:0a:
6e:22:e7:46:82:fd:51:f8:98:9f:b6:30:fd:2b:06:08:f6:ed:
88:31:c0:20:7c:c4:56:fb:5a:8d:83:d9:81:67:60:d9:e6:69:
fd:94:68:2f:ec:8c:e4:ba:70:a1:ee:d2:92:af:20:42:d3:0e:
56:46:98:ca:78:61:a4:f2:c5:fd:3d:ae:3d:52:d4:a9:06:29:
49:9c:8f:11:c5:0b:6f:6c:bb:a0:ec:65:94:38:6b:5c:47:4a:
bb:57:c9:8c:f9:af:05:88:a2:50:b3:41:c1:6d:2c:c3:8a:f2:
36:79:bc:58:70:bb:63:05:3b:bc:c6:19:45:6f:36:17:c9:f0:
d1:65:55:6c:2a:0f:65:4a:a0:07:ca:3b:15:d9:cb:2e:c8:f9:
30:d1:4b:a0:9c:65:90:0e:7e:22:8d:9d:14:dd:14:11:46:a2:
d0:61:94:a0:2c:fa:9a:42:d6:dd:25:60:1a:da:c4:7d:7e:e4:
01:31:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 08:41:34 2025 by rpki-client