Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: DgjU4GvhkwRYlvQUnfy17X+UJSKQQ+7aGMyWgTchWCg=
Subject key identifier: C5:32:2F:FF:95:CD:6B:83:28:4D:BA:1B:C5:58:E4:AD:94:77:59:02
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 0196488E6F14A3E5CAC65F84AA51B81FDEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 11:00:16 +0000
Manifest this update: Fri 18 Apr 2025 11:00:16 +0000
Manifest next update: Sat 19 Apr 2025 11:00:16 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: yV+kFgPHXHqYgHUBr5CzTGs2QqdsSnUewQ+ix+GvLOo=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:6f:14:a3:e5:ca:c6:5f:84:aa:51:b8:1f:de:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Apr 18 11:00:16 2025 GMT
Not After : Apr 19 11:00:16 2025 GMT
Subject: CN=c5322fff95cd6b83284dba1bc558e4ad94775902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:0f:c6:65:b4:c2:81:69:9e:f7:c7:14:20:
0a:4f:8f:52:41:21:0d:fb:89:5c:78:2b:26:2e:94:
ab:d4:91:30:e1:0c:3a:3d:af:73:24:70:34:04:97:
43:f7:9f:c9:88:d7:2a:3d:2a:cb:58:00:25:37:b6:
91:e0:c7:5c:41:e0:b9:38:e7:cc:2d:cc:7d:0f:19:
83:7c:c8:ff:cb:e5:e8:14:b4:07:f2:6d:98:63:5c:
4d:c9:6e:d6:74:11:51:87:02:8d:7e:59:96:78:70:
8a:2b:db:46:e8:f7:e8:e5:bb:8c:7a:f2:be:83:32:
5b:10:f6:bb:41:03:a8:16:27:6c:25:79:48:02:0c:
4d:31:dc:b4:2d:1e:1c:16:30:1c:c9:69:e3:e7:37:
66:af:7f:0a:91:60:d7:3a:58:2d:4f:71:c7:2a:b6:
28:14:f8:c0:2d:c3:35:dc:75:87:5b:57:e2:84:19:
ef:61:17:91:44:32:0c:d6:52:59:c3:41:50:0d:0a:
ed:41:0a:65:a3:62:52:f0:53:20:55:9d:de:d0:09:
2a:08:c0:1f:ad:d7:d2:7e:f9:dd:cb:2b:4d:f6:f5:
0d:0b:44:96:de:c7:ef:cb:36:a8:8d:64:75:7b:4a:
54:df:5f:91:7f:ae:96:cb:31:18:b3:2d:c7:00:63:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:2F:FF:95:CD:6B:83:28:4D:BA:1B:C5:58:E4:AD:94:77:59:02
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:15:c1:9e:82:a2:24:90:54:af:25:26:1f:fe:d8:16:4c:68:
e0:63:8b:a9:bc:be:11:d8:f0:6f:5e:5d:09:36:43:b7:7a:49:
5c:bb:ee:cd:e8:76:61:39:0a:b7:77:c3:b3:06:49:f5:68:2f:
ba:fe:6c:43:06:fe:28:79:64:5c:e6:04:c7:cb:53:ea:99:ae:
b2:ec:2b:54:fc:3f:2e:25:bf:80:6e:44:96:5e:30:68:8b:5b:
f9:c2:bd:f5:b2:a7:fa:d8:37:8a:1d:0a:70:d9:89:3c:55:f3:
cb:6c:21:3d:19:e5:0f:cf:35:13:f0:9b:c1:f1:0d:f8:08:f6:
f9:56:62:86:f9:32:bf:5d:c3:1b:3f:27:40:8e:4a:68:76:3f:
62:58:b6:82:2c:48:d2:fd:02:6e:b6:85:14:ae:3f:e1:1b:76:
fc:2f:f3:89:04:d8:12:2f:12:17:e6:f4:92:94:f0:f2:0c:ef:
06:6c:a4:49:33:9f:b5:a5:64:38:bb:2b:06:85:bd:28:85:af:
16:4d:46:5b:f1:9f:12:a4:38:57:26:fc:f5:74:72:1a:86:4d:
ed:0b:fe:09:4d:d8:e2:56:0a:e3:7f:09:bd:90:87:36:95:96:
6e:9e:d9:25:2c:c5:fe:77:4c:09:62:d9:37:ec:62:97:1c:56:
90:cc:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:20:42 2025 by rpki-client