Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: joBnvBpPIUTqsi6DOC2QCU/walvfMAAkzew5OOR6lgo=
Subject key identifier: E5:82:80:DE:93:0B:8A:A1:15:D4:67:1F:40:0B:C0:6D:F6:DF:A7:D6
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 019649D895FC68CF998CAC8E36407FA367C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 0140
Signing time: Fri 18 Apr 2025 17:00:52 +0000
Manifest this update: Fri 18 Apr 2025 17:00:52 +0000
Manifest next update: Sat 19 Apr 2025 17:00:52 +0000
Files and hashes: 1: 7wo8i41Up9XbCW4B5tKeIytyMsA.roa (hash: yirWyb5pij+onS9AdwvB/WtmePzfdhsn+x4XqsoWk2E=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: E4+UgUceEGUtzhxkpDrZJBus/AJA44UoDhOCH2/u+X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:95:fc:68:cf:99:8c:ac:8e:36:40:7f:a3:67:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Apr 18 17:00:52 2025 GMT
Not After : Apr 19 17:00:52 2025 GMT
Subject: CN=e58280de930b8aa115d4671f400bc06df6dfa7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:26:23:35:c6:d8:4e:15:d8:94:d1:cd:04:
38:18:7b:5d:e2:31:d4:69:40:a3:dd:fe:8a:ce:6b:
37:4f:b5:67:6c:3e:f8:87:19:9c:be:f0:b0:42:db:
07:28:61:59:cc:e6:15:0a:28:c0:a3:09:a1:60:a2:
8d:7c:c2:c7:29:a9:b1:4f:c3:66:5a:8d:b2:cc:28:
ed:46:12:1c:69:2e:20:46:ea:98:2a:db:15:3b:a3:
7d:09:d8:17:a7:e7:37:5e:8f:da:b0:79:32:8b:c7:
47:96:13:83:09:c4:45:d9:69:5e:aa:40:c1:8e:e0:
c5:28:b4:f4:6c:e3:16:46:f4:64:41:42:c2:20:a5:
f7:33:aa:3a:b3:3a:52:70:11:50:c1:21:04:ea:ea:
a0:43:91:23:48:bb:79:38:c8:d4:92:cf:ac:e2:c9:
e5:b4:9e:60:4d:10:b4:3c:33:82:98:df:c7:8e:89:
ce:92:00:22:2a:35:ac:8e:b0:82:dc:bf:9f:de:77:
b4:9b:80:58:6d:eb:56:0a:24:e7:3d:61:2b:1d:3a:
fd:c6:ed:71:99:bb:45:cf:5c:c7:f6:9f:f1:ce:4c:
0a:38:c4:d3:8d:8e:b3:2b:fa:42:24:2f:9a:22:55:
a5:f9:f5:a1:b0:c1:84:0b:11:ba:9a:77:4c:3b:17:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:82:80:DE:93:0B:8A:A1:15:D4:67:1F:40:0B:C0:6D:F6:DF:A7:D6
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:94:30:fa:58:4d:f6:0e:45:f4:43:8c:6e:7f:5e:31:f1:ab:
88:33:bd:c8:d1:78:85:cd:a8:6f:b0:f2:69:8c:63:a7:18:1a:
ec:9d:65:64:7b:f5:71:ed:2f:ce:2f:d1:57:e2:f3:fa:74:d0:
bc:a3:f3:84:83:51:fa:29:f7:cb:34:a6:93:95:4c:4d:fd:4a:
06:46:1b:a6:d9:8c:a5:66:73:92:d6:8d:00:35:2e:e5:43:0e:
e9:a6:4b:dd:b0:e9:20:e4:0e:14:b2:78:6d:b1:d2:d5:34:a2:
ce:f1:bf:66:05:a7:f6:fb:65:78:7d:84:f0:15:57:b1:14:62:
e6:90:ed:ab:96:13:e6:ed:73:b6:e3:db:bb:75:20:8d:d8:86:
d7:40:92:9c:d3:5a:80:96:dd:f5:24:8b:d1:20:3f:11:60:14:
b2:24:77:88:83:16:44:d0:11:2f:58:8b:e9:d7:81:0d:93:6d:
5e:74:74:3f:ce:3d:06:05:18:40:b4:1c:5b:71:93:f5:52:50:
77:20:73:00:91:0b:95:22:d6:62:23:b5:6a:ec:23:a8:b4:bb:
2a:33:e9:2b:bb:44:2f:8b:c8:51:7c:c0:46:07:6c:cb:d9:1d:
d7:59:9b:0a:ce:ae:2f:eb:71:bb:c1:b2:64:e5:bc:cc:09:86:
94:d3:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:10:56 2025 by rpki-client