Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier: Bxd7BJmjjRRUNhEuAXvu2+U5P6vs4lSaKNUsQIjkiWY=
Subject key identifier: 72:39:AF:E7:70:93:40:ED:71:D1:61:2E:23:DA:42:13:76:10:CA:6F
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 019756ECCC173C1BC2A0B962E322055A9BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number: 1053
Signing time: Mon 09 Jun 2025 23:00:48 +0000
Manifest this update: Mon 09 Jun 2025 23:00:48 +0000
Manifest next update: Tue 10 Jun 2025 23:00:48 +0000
Files and hashes: 1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: pkAkc1plsnirfFxnivoK8UsesAmbKNSGxJRzJpLIh0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ec:cc:17:3c:1b:c2:a0:b9:62:e3:22:05:5a:9b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Jun 9 23:00:48 2025 GMT
Not After : Jun 10 23:00:48 2025 GMT
Subject: CN=7239afe7709340ed71d1612e23da42137610ca6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:37:5d:96:e0:4d:c9:82:c1:cf:04:a6:68:
fe:37:d9:7a:5f:b2:d3:cd:bc:85:1c:56:ee:92:89:
df:c9:67:b7:6d:84:70:00:19:19:93:63:46:7c:a3:
87:3b:96:e8:90:2a:f5:12:7b:d4:75:37:8b:b2:08:
73:87:0f:09:d3:ba:c8:88:6a:03:fc:27:06:34:ea:
84:d6:4f:7c:07:82:b8:8c:37:0e:7f:3b:5b:e2:d1:
1e:d1:b2:5d:88:16:44:4b:e7:8a:06:c6:a9:8a:c2:
57:72:4f:e7:a6:ca:2c:a0:51:60:c2:3f:18:a1:fe:
df:69:58:23:ae:ed:8f:1c:16:1b:cc:84:70:0e:c7:
c9:26:6b:7b:cc:67:60:65:4c:0d:22:6c:cb:0e:ee:
e2:c0:46:55:61:d3:e8:04:4b:ba:83:5a:83:40:b9:
10:1e:d0:fb:d0:4a:e3:5d:7b:bf:d3:43:49:69:b9:
b7:07:88:8d:18:77:94:f0:f8:73:3a:eb:4d:ab:06:
9b:01:1e:b4:7d:ba:a8:c5:2b:33:c2:9e:94:e9:97:
45:7e:a7:bb:02:23:74:12:44:24:1e:ab:d0:24:51:
8f:ab:ed:b8:c7:64:35:60:00:95:4f:61:0c:63:92:
61:af:d1:72:79:54:57:90:4a:da:3e:14:b3:ca:54:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:AF:E7:70:93:40:ED:71:D1:61:2E:23:DA:42:13:76:10:CA:6F
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:1f:9d:cb:49:20:6c:83:90:5e:a4:b6:25:ce:03:ca:49:42:
df:bf:6d:28:d9:b1:eb:bd:74:87:3f:4b:53:c3:90:10:29:77:
3f:67:9b:d2:5b:c8:00:8f:70:a7:56:3c:a7:1e:e6:f8:02:b7:
49:08:c1:77:9d:3b:af:e1:6f:88:75:cc:28:cc:d1:ed:d6:94:
66:54:6e:12:4a:9c:b3:22:f2:dc:5f:92:e8:d7:f3:b9:25:50:
ff:29:cc:80:16:c3:25:86:ef:cd:c8:37:3f:95:d8:82:33:33:
a0:5d:8b:27:19:bc:6c:09:8c:88:66:1a:e0:f2:3b:9c:52:d2:
2c:62:2e:18:f7:b8:12:79:b4:00:03:70:eb:1a:e3:02:68:78:
9b:57:21:19:3a:a9:65:3f:78:27:da:be:9f:99:83:7f:31:8e:
d5:73:e5:fb:32:10:e2:9b:71:76:a0:58:f2:70:e2:75:06:5a:
dd:d2:f8:3c:e4:91:df:6a:cc:f6:ac:db:56:9a:42:30:c4:a7:
b3:4d:e8:30:d8:a3:d0:88:60:ea:d0:5c:73:36:79:c1:3a:2e:
0b:cd:4f:3f:5a:8f:7f:e8:27:1f:3f:a9:4f:5b:90:b5:71:b2:
6a:b5:c1:a0:15:e2:f0:68:4e:45:d4:ed:0f:cf:60:71:19:cb:
ca:bc:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:17:14 2025 by rpki-client