Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: 6Y2CTFZI7XZc+f8vvaIWK7ttOnOrz020Mb5mWChrC58=
Subject key identifier: 77:E5:70:D9:A2:34:CE:2C:FE:93:9B:8D:6C:6E:93:BB:61:63:27:B1
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 01975A248F2EF715FB714FD47A2BE624E8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 01CE
Signing time: Tue 10 Jun 2025 14:00:34 +0000
Manifest this update: Tue 10 Jun 2025 14:00:34 +0000
Manifest next update: Wed 11 Jun 2025 14:00:34 +0000
Files and hashes: 1: BrgQXCLuJ84Be3x61GIA2EPz_cY.roa (hash: 5cowkMDuTzftle6S+PXtO8QaCOWyfMUV3y8GiwaAJ6M=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: rwzf6+ulRUQDNprOKhf1Z0Y24xJknIqjp7W0OslAs4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:8f:2e:f7:15:fb:71:4f:d4:7a:2b:e6:24:e8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Jun 10 14:00:34 2025 GMT
Not After : Jun 11 14:00:34 2025 GMT
Subject: CN=77e570d9a234ce2cfe939b8d6c6e93bb616327b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:f2:d0:05:f8:e6:8e:c1:b1:34:54:f3:6b:
67:e7:9e:7d:ea:a1:88:16:97:e3:62:b6:48:aa:af:
b8:52:56:c9:5e:3a:52:96:fb:10:ff:a1:e5:8b:8b:
cb:24:e8:b3:b0:03:81:3b:0d:81:aa:f3:b0:bf:13:
f9:c9:fc:3c:28:12:9d:5d:0f:84:0c:e0:86:ab:5a:
5b:f9:9e:29:c8:64:65:44:d2:bf:5e:7e:c5:c9:6c:
fa:14:6a:14:12:a0:0c:77:8d:45:2d:e3:2a:bf:45:
e6:99:45:a5:f0:a8:8c:61:a3:4d:e8:9b:34:9a:7e:
88:f7:f2:63:45:bc:1c:be:6e:a8:c8:38:aa:9d:11:
1d:9c:de:f9:ea:c1:2a:e3:28:6f:4b:e3:be:cc:c7:
b4:96:62:67:1f:c2:4b:6f:15:e7:83:48:48:88:6e:
cd:e8:52:10:93:69:82:4c:7c:cd:33:43:b5:cb:55:
90:45:6a:4f:c9:c5:70:f3:23:bc:fe:57:24:b5:c3:
4d:93:ff:d9:a6:e5:ec:9c:07:98:9b:2e:91:45:19:
b3:7d:d8:69:35:82:3d:42:87:26:40:53:78:d1:11:
ff:26:22:56:25:13:1c:11:16:51:4c:c6:9f:e5:29:
26:77:61:bd:bc:c2:c2:61:b3:c9:55:d0:82:e6:23:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E5:70:D9:A2:34:CE:2C:FE:93:9B:8D:6C:6E:93:BB:61:63:27:B1
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:29:d0:70:04:99:1b:ea:ea:ce:e6:30:34:31:80:bf:e1:
81:39:9f:c4:11:a6:d6:6b:5f:e4:0a:1b:46:32:c0:34:32:32:
0e:85:03:38:52:54:ab:54:c1:a4:f5:78:db:b9:b1:c5:d9:5c:
fc:3d:90:0b:d0:a8:92:1d:66:9b:c6:60:cb:66:77:31:25:4a:
18:e9:63:52:52:5f:9a:44:79:ad:f4:90:dc:d0:b0:62:31:f3:
78:0f:57:2d:15:1d:d7:f0:b4:9b:7d:00:64:26:f0:78:da:22:
f8:a9:26:e3:a5:28:98:d1:a3:6a:6f:d9:0b:0a:4f:30:3f:85:
9d:9c:96:1a:83:21:55:fe:fa:5d:83:38:fe:72:8e:39:23:79:
da:16:63:8d:5a:8e:5e:1d:21:11:90:fb:4f:9b:5a:72:27:5c:
f1:e8:f1:43:99:a3:14:4f:bd:14:23:ec:5d:54:b3:b5:83:d2:
21:79:b2:50:08:ca:69:4c:df:05:ab:e2:0d:39:1d:0b:25:74:
cc:cb:cd:6e:76:bf:ea:c8:6a:46:00:d3:a5:c5:67:12:93:56:
be:80:61:48:6c:00:5a:35:1c:41:cd:56:10:6e:72:a8:05:6f:
09:37:5f:94:35:22:11:76:9e:98:40:69:d0:f2:2d:df:0c:24:
d4:22:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:44:27 2025 by rpki-client