Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier: q3tcIsKrTWsodEAwaHWgAFRzv18rUPZ+VK6qDoRB9as=
Subject key identifier: C4:8B:33:99:54:92:DD:B3:D3:05:8A:17:01:5A:82:DD:10:60:E2:FC
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 0199228D0DD4AA3F75CE77CF817462B2F5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number: 1141
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: hAIM1k/OlXpssgTbJ2kOD1B6cyt9OU3LUTC7YEgo4ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0d:d4:aa:3f:75:ce:77:cf:81:74:62:b2:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=c48b33995492ddb3d3058a17015a82dd1060e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:cb:89:b3:89:5e:47:20:b6:05:0a:72:37:
cc:17:f2:04:43:84:93:c0:fd:22:e2:61:cc:7d:8e:
e7:51:a7:26:8b:fd:3c:87:d0:d9:b0:2a:04:f7:0a:
10:54:de:af:cf:30:7a:03:42:42:f8:74:b3:5f:60:
14:7d:9c:42:54:71:0b:0b:fa:e0:b0:93:3b:fd:21:
de:4b:8a:6a:c9:db:c2:17:a7:0a:8c:1f:54:b6:fb:
cd:be:05:71:a3:da:52:4e:e4:02:4e:11:3f:b9:1e:
a3:96:6d:b3:e7:4b:86:0c:b0:90:51:13:5c:2b:aa:
c3:df:a8:cb:3d:6b:37:e4:62:c5:6f:e8:c0:96:19:
ab:00:83:12:04:69:1e:3c:0a:5f:43:94:81:6f:33:
c4:cb:68:97:c1:48:13:76:3a:85:4b:f5:77:5f:91:
73:8e:c8:32:cc:6a:cd:46:aa:c2:57:3b:74:66:77:
ca:82:d4:51:31:46:fb:04:fd:0b:44:3d:1e:63:30:
3f:77:8f:9f:e7:55:39:6b:82:ca:c3:71:71:55:f1:
4a:f6:ba:35:d7:e1:45:9f:37:90:34:75:14:54:ee:
77:1f:0c:c0:d4:b7:2b:de:a5:5d:d2:29:b7:7d:b2:
6a:5a:e5:42:99:5e:bd:1a:75:b2:1b:ad:25:81:bd:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8B:33:99:54:92:DD:B3:D3:05:8A:17:01:5A:82:DD:10:60:E2:FC
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5b:24:80:68:e2:6d:c4:ff:00:8e:1d:f0:ea:93:e4:51:54:
db:25:56:f7:9a:cf:e2:02:52:ea:df:7d:99:4f:e5:1e:67:0e:
d3:35:2d:79:06:dc:20:53:3e:67:0b:c9:be:13:ce:81:45:69:
01:b1:7a:41:fd:b5:65:0b:79:94:08:a2:6b:4f:d1:e2:7f:64:
3f:b2:9b:40:72:c2:0b:b7:81:70:f3:34:e2:26:90:3a:ac:85:
bc:6a:74:df:28:37:2d:0c:b8:e9:3a:be:05:03:c6:61:cb:b0:
ed:6c:f4:00:54:6e:c1:08:20:90:b9:1b:e3:7e:d3:93:3c:2c:
ff:6a:0d:d0:4c:90:f8:9a:11:a2:2f:e6:45:12:45:b5:7b:b8:
c3:a1:ee:2a:e8:a8:4b:61:d7:c1:66:a6:36:aa:65:b0:6e:e2:
fb:a3:5b:06:1e:64:c5:20:fb:c3:a8:8c:6f:7d:b2:45:19:13:
ce:1f:c9:f4:71:88:25:ee:02:03:23:59:28:84:4b:91:e7:71:
37:7a:a7:66:9a:b3:90:31:67:6a:55:42:89:1b:eb:bd:72:95:
70:ab:c0:a1:2d:45:17:df:10:12:56:51:5d:7f:cf:de:89:d2:
91:28:ce:78:c0:3c:4a:d6:83:00:8e:70:49:c6:8e:41:82:b4:
ae:32:4e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:05 2025 by rpki-client