Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: OGeQ675+HcJbW8ujI5mPT70YSQXh9ybz2JpL+62+37Q=
Subject key identifier: EC:52:30:E5:32:C2:4E:11:D2:A4:3E:09:2C:15:28:0B:F7:E3:3E:23
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 01974D44FFC55C32559FAAF2519DEA39A4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 02:00:56 +0000
Manifest this update: Sun 08 Jun 2025 02:00:56 +0000
Manifest next update: Mon 09 Jun 2025 02:00:56 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: /GW4rPBeUGeBLNH23wuXqBRuma3uCB9Qe6n381eH7Zk=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:ff:c5:5c:32:55:9f:aa:f2:51:9d:ea:39:a4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Jun 8 02:00:56 2025 GMT
Not After : Jun 9 02:00:56 2025 GMT
Subject: CN=ec5230e532c24e11d2a43e092c15280bf7e33e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:78:ca:cd:e7:de:38:3f:a5:18:ca:8d:d2:
02:ab:46:5b:26:a6:f8:82:d2:a9:90:3d:70:29:67:
e7:93:a1:1e:ad:bc:b5:ad:66:74:37:6a:b5:89:7e:
70:4a:2f:e9:56:82:18:7c:55:20:22:04:bb:35:cd:
64:ae:aa:f4:98:ec:a6:04:98:58:ad:21:fd:09:c3:
8a:41:85:c8:6f:68:4f:e9:31:55:a7:98:e0:26:90:
c2:c4:d4:cd:03:62:b6:31:89:de:68:ec:b8:f2:4b:
e7:4c:69:12:9c:a9:04:92:25:b9:72:08:31:4a:9e:
1d:d2:86:11:80:38:e4:c4:59:6a:5b:22:ce:e6:77:
d3:57:6a:03:1b:17:4a:16:20:a9:cb:98:80:c8:3c:
ed:4a:b5:57:93:47:76:af:e0:66:72:62:f5:e8:d9:
b8:56:80:1c:af:b5:5f:c4:cc:94:1b:53:58:e5:1a:
25:2d:cd:1d:b5:dd:15:26:99:05:d9:8d:d3:14:78:
61:d1:6e:2d:26:88:18:e1:03:3e:d9:70:5e:32:a5:
2c:72:5f:9d:0e:53:02:7b:cc:71:cc:53:2d:cf:ae:
42:aa:6d:88:00:fd:ad:40:20:60:e9:7b:95:cf:49:
f9:4c:86:28:1b:97:95:9b:e3:80:74:3f:fd:69:cf:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:52:30:E5:32:C2:4E:11:D2:A4:3E:09:2C:15:28:0B:F7:E3:3E:23
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1b:8e:0a:b2:33:ab:fa:4a:41:40:5e:da:12:fd:89:68:43:
93:cb:e5:b0:2d:f8:32:e1:f5:a1:ed:3f:f6:49:fe:e0:ee:60:
a6:ac:bd:aa:f5:28:d2:c2:cb:40:aa:b2:f7:f8:ed:32:0b:83:
f6:c2:be:f8:49:e1:3d:c4:f5:38:f6:d3:3c:54:c6:08:80:2b:
39:ea:d4:24:9b:0e:74:10:f9:37:56:d8:30:4e:85:51:f6:dc:
8e:3f:0c:25:56:a6:2c:04:62:75:c5:3c:6d:5f:65:b0:bb:8e:
b5:1c:05:b3:25:6f:ad:b0:26:57:8f:ae:f7:b9:3d:63:db:51:
1e:bd:38:b6:61:37:2f:94:e5:fe:ef:db:ee:e8:10:8f:fc:e6:
43:ba:5b:9c:a4:5b:b5:51:ed:4c:c5:3f:74:64:ba:67:1d:88:
d0:d8:e7:bb:cf:ef:b0:92:8c:ed:1f:66:77:0a:71:09:03:07:
cd:15:f4:ef:e5:1e:a8:b1:26:e9:5a:ba:a1:28:1f:d8:a3:a1:
24:5f:63:93:78:94:04:b5:6b:97:1e:ff:54:2d:55:dd:91:f1:
71:73:da:fd:b3:61:2e:fb:6c:3a:65:74:87:47:84:da:9e:f3:
a1:c2:c1:e8:46:7e:4d:a9:98:a6:14:18:94:e5:b4:68:6e:af:
39:f0:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:49 2025 by rpki-client