Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: YYiSQCT1dwGleHS5i8SPq5mUhzPEKA8Eph8rx4/NPE0=
Subject key identifier: 50:14:C5:F8:DE:CC:38:14:37:0B:76:50:BB:0A:F3:9F:2F:99:28:E7
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 01975FEFB34E9CB72AC4B55B384962243BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 01D1
Signing time: Wed 11 Jun 2025 17:00:33 +0000
Manifest this update: Wed 11 Jun 2025 17:00:33 +0000
Manifest next update: Thu 12 Jun 2025 17:00:33 +0000
Files and hashes: 1: BrgQXCLuJ84Be3x61GIA2EPz_cY.roa (hash: 5cowkMDuTzftle6S+PXtO8QaCOWyfMUV3y8GiwaAJ6M=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: EPMowg9u2oR33GfYO8C+KtafMYBLAZZ0CAJf8JHwzaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:b3:4e:9c:b7:2a:c4:b5:5b:38:49:62:24:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Jun 11 17:00:33 2025 GMT
Not After : Jun 12 17:00:33 2025 GMT
Subject: CN=5014c5f8decc3814370b7650bb0af39f2f9928e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:54:87:76:18:e8:c5:3f:81:be:16:cf:f0:
be:23:09:33:48:f5:11:b0:fc:1f:5a:61:ef:9a:55:
d4:32:6a:89:60:7a:be:dc:5f:40:c3:02:3d:a8:71:
3b:87:63:67:84:48:51:40:f6:3d:c9:7a:0a:f2:53:
38:f6:9a:0b:67:d3:c6:74:3b:62:e4:ab:f7:4b:73:
a3:29:c9:72:49:bc:91:56:56:9f:c7:3f:88:9b:40:
d3:f0:06:be:7b:df:2f:f7:dc:de:c4:c9:46:04:c0:
7f:9c:f7:26:5b:15:81:1c:f2:ac:fd:da:ca:23:80:
6c:01:bf:cc:d7:99:83:d8:ee:63:49:c9:e5:59:60:
2a:a6:de:97:55:73:77:9a:97:0d:42:5a:0c:4b:a8:
c0:1a:2b:65:d5:76:ab:cb:c3:e3:58:67:09:9b:57:
d6:ff:0f:2b:d3:a2:dd:00:90:44:3e:b3:1d:47:26:
ae:a8:db:99:a5:a9:32:14:25:34:75:4a:ce:28:05:
b6:fb:fb:37:cd:0e:2c:4b:b4:28:25:58:e7:31:b6:
d3:15:92:66:23:b6:51:9b:18:d9:27:e0:0e:e3:2c:
85:58:35:b0:7a:55:8f:ba:82:81:96:fb:7d:c1:d3:
5e:c1:e7:ad:5a:4c:28:04:21:83:1f:a8:38:46:42:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:14:C5:F8:DE:CC:38:14:37:0B:76:50:BB:0A:F3:9F:2F:99:28:E7
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:f5:f2:51:03:5a:d3:95:fb:79:4c:9e:13:e0:74:93:da:
61:82:ea:d1:c7:29:98:f5:0f:9f:8d:81:b0:91:1f:49:92:38:
9c:e6:d5:52:1b:f0:4a:53:ed:f1:c9:44:89:89:64:cc:5b:67:
f8:c6:90:41:b3:a5:3d:bc:40:4b:fd:bb:50:3a:98:59:16:b3:
0d:00:ec:a3:0a:da:b7:6e:ce:17:c1:5e:91:13:06:bc:e4:b2:
d0:d0:b1:15:b7:ff:6f:e5:ac:65:ff:e4:91:3b:48:74:52:3f:
4b:7e:2b:11:c1:9d:17:13:82:69:11:66:9c:25:c6:49:56:7e:
22:19:07:79:ac:84:e1:41:31:ff:c8:d3:8b:67:65:56:49:19:
32:22:31:05:c6:bf:7a:54:22:59:5b:c4:e1:00:8d:f0:02:63:
2e:be:f0:a3:5d:00:04:9a:89:45:f1:d6:ac:3c:68:fc:03:f1:
bc:37:21:ec:7b:6c:02:e3:bd:eb:10:39:f3:8c:6c:7a:27:f1:
04:c6:b4:81:78:b0:dc:e2:30:64:80:67:aa:26:0c:e7:bd:50:
70:d1:17:36:ee:e9:25:56:63:dd:3d:96:8d:d1:b6:2b:fb:05:
5a:fa:6f:55:67:67:53:3a:05:d3:6e:34:08:a8:c1:4e:3b:24:
49:71:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:09:55 2025 by rpki-client