Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier: qesc1msCAdsvF1uscmXBObH/HmfunClx4cUyal1RJMk=
Subject key identifier: 0A:BB:C0:94:11:F4:A8:96:63:B5:12:4D:ED:BF:1C:7F:AE:DE:06:01
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 01965DCD40AF9677047CA44DC807F39EEF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number: 0FD2
Signing time: Tue 22 Apr 2025 14:00:54 +0000
Manifest this update: Tue 22 Apr 2025 14:00:54 +0000
Manifest next update: Wed 23 Apr 2025 14:00:54 +0000
Files and hashes: 1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: pOSh7s8Gmr63f75Xd/M6knpuWP5WAguQmsbtjKMZ0aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:40:af:96:77:04:7c:a4:4d:c8:07:f3:9e:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Apr 22 14:00:54 2025 GMT
Not After : Apr 23 14:00:54 2025 GMT
Subject: CN=0abbc09411f4a89663b5124dedbf1c7faede0601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:85:65:fe:49:5f:f9:dc:f8:0d:84:94:9c:
34:99:96:f8:0b:8f:9b:08:c0:96:10:c9:c4:18:c0:
e8:4f:c2:51:1b:d2:ff:81:ef:83:f2:9f:25:f3:17:
78:22:0d:91:61:78:57:fd:a3:11:99:3a:12:90:0e:
15:1e:c8:13:4d:1c:20:42:de:9a:fd:2e:83:bf:b9:
77:ea:f6:84:1c:93:66:71:73:8d:15:90:12:cf:42:
78:09:cf:e5:e1:30:96:0a:e7:99:bb:31:74:a1:8f:
6a:7e:b9:12:06:91:fe:4b:17:c2:36:da:1b:19:bf:
82:6a:f6:33:8c:9c:d3:29:c5:e0:36:f6:93:b5:98:
eb:4a:d4:fa:de:b1:fe:00:b7:c8:31:33:13:81:be:
bd:84:db:23:b8:e8:80:2e:11:a2:e5:4b:fc:14:0b:
7b:04:66:0a:a9:14:a9:1d:c7:c4:4c:a0:d8:66:0c:
81:c1:e5:af:d4:7d:72:a3:00:54:cd:4c:ab:cc:09:
84:f6:64:3a:cf:ad:2c:1e:44:88:6c:69:55:b5:fa:
ca:57:36:2c:58:2c:49:aa:5c:60:cd:3a:a9:61:46:
c8:6e:ac:d8:39:bb:a1:e3:0c:d0:bd:5c:02:fa:81:
77:6c:aa:f4:97:00:fc:6d:01:e4:e9:f1:5a:4b:8d:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:C0:94:11:F4:A8:96:63:B5:12:4D:ED:BF:1C:7F:AE:DE:06:01
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2e:7a:9b:af:9c:c7:89:0f:6b:73:85:56:20:62:7c:ca:f6:
14:da:c4:82:19:30:53:c8:a3:53:1e:26:7b:ed:c5:b4:bc:f3:
16:a1:de:d6:d8:ce:49:57:54:21:0b:8e:7b:2e:e0:2c:89:60:
33:a0:31:e0:c6:ac:7e:23:2b:30:1a:fd:be:c6:b7:06:45:b1:
82:85:0d:44:fe:38:23:0a:91:11:d7:6e:4e:d6:e5:2f:6c:9e:
e7:85:db:04:96:cc:45:fe:43:07:52:27:64:e0:09:79:77:d2:
ed:d6:bc:a7:27:08:ee:d3:06:52:e2:e1:62:68:e6:68:32:59:
41:10:99:27:a5:d1:d3:56:af:34:29:e7:e0:cd:c2:6b:18:4c:
0f:b0:d9:e9:65:2b:b3:55:01:42:1d:be:ed:0a:91:4a:0d:43:
95:b2:79:f6:b2:e1:76:8e:16:19:79:70:77:e3:35:f6:61:86:
ba:bf:9b:71:73:c6:28:95:e1:70:fd:a2:f9:76:ad:00:56:53:
6b:2f:f4:a0:48:24:e7:e7:24:a9:a8:66:c8:fd:66:57:f6:14:
07:75:d4:0b:d3:80:c7:50:5c:29:3e:81:49:a4:45:de:a0:4b:
14:a8:e5:e4:48:14:06:02:f8:79:89:08:51:48:f1:79:1c:69:
9a:7e:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:15:39 2025 by rpki-client