Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: 9h8SRsPT+tHGu0KLXdwqJP517o8GCT4K7gYYff/PSYo=
Subject key identifier: 33:D8:C7:F1:A5:42:DC:4C:34:EE:B1:AB:2F:1D:20:21:D5:78:02:E0
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 01974A7AAAF5772104088C673B8ABECF06DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0CE0
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: GmqA8QHCC_5l1aRwm4_AA_zKBr8.roa (hash: //VrfLrjXO7Yeg38MyrhRoEusnw2871AyCYLfx6ldsE=)
2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: peWtsqKgPmPzxUNhljEJPaD3FhgdQl9Hffn6KoqWAf8=)
3: tVfNb6vANMjkCnwkn_zqjQ9R46g.roa (hash: sIFbcv+pjLFEVXCoeuZdGPtO8JDvf+xPKrDKXkHq+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:aa:f5:77:21:04:08:8c:67:3b:8a:be:cf:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=33d8c7f1a542dc4c34eeb1ab2f1d2021d57802e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:0e:fe:aa:c0:2a:7a:4b:8a:7d:d9:49:22:
80:56:6e:08:3a:74:2b:e2:42:86:67:76:ae:a6:3d:
4a:53:58:0c:d2:7e:31:25:a5:c5:e9:a4:ea:ed:89:
f0:17:b4:e3:18:14:a6:b9:70:0a:1c:bd:99:c4:04:
0f:35:a8:fe:9f:1d:4b:82:e3:87:1d:1f:72:8f:88:
cf:9a:23:46:1e:3f:4a:56:6e:48:59:a3:79:e9:db:
8d:08:49:79:f8:c8:32:7c:59:07:ee:c3:23:2d:4f:
9e:c4:d1:5e:2e:c9:f0:1f:12:ab:ac:f1:85:b0:eb:
f1:70:c8:08:32:b3:5f:1a:8f:71:5e:12:13:f2:e1:
17:5e:80:2d:50:76:aa:ca:f3:74:e8:bd:57:7a:67:
27:e2:4d:ac:bf:06:a5:9e:b9:06:de:71:7b:44:5a:
98:c5:d0:76:6a:2d:76:3c:0c:f6:06:5c:d7:62:ea:
9a:18:d8:b3:6a:b8:d6:ff:42:f6:83:7a:1f:e4:50:
bd:b1:e1:0b:34:61:2f:29:c0:fd:b7:e2:9b:b3:9c:
fd:c0:03:d1:7a:2d:22:35:b1:e4:68:1e:6e:79:0f:
03:50:33:d7:a4:75:b4:05:2e:87:1a:04:2e:09:4d:
78:f7:ee:97:ee:8e:98:c0:e6:b8:39:15:0c:12:ff:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:C7:F1:A5:42:DC:4C:34:EE:B1:AB:2F:1D:20:21:D5:78:02:E0
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5d:70:3e:54:4a:ae:a7:ab:31:0d:a2:dd:c8:47:ef:68:eb:
58:c8:e9:99:29:ae:e9:7d:8f:01:3e:1d:50:08:78:de:2b:dd:
56:f8:2c:4d:3c:58:5a:bc:46:5b:21:fa:e6:ba:e6:77:30:8d:
9e:58:83:fc:df:c0:b4:ab:2c:b8:cb:86:a5:fb:ea:06:a2:1f:
b8:76:f5:5e:23:f8:58:86:58:e1:de:95:5d:65:07:92:03:5e:
fa:ef:d3:de:15:64:8f:40:d2:9e:29:20:c7:99:8f:62:aa:54:
b2:40:99:b5:61:18:de:dc:2c:a5:bb:7a:52:de:f8:b2:cc:a4:
b0:46:19:05:79:f7:bf:a3:13:ea:06:bb:3a:c6:20:75:4c:36:
d3:8e:af:68:92:7a:d4:19:61:13:6c:0d:f1:0b:13:57:a5:7b:
bb:a7:88:01:17:35:6c:24:64:5e:55:9b:00:43:90:a6:ab:8e:
bb:fc:59:f8:88:d6:92:48:eb:ed:84:75:c2:2e:97:c5:b4:56:
a2:db:a1:b5:b0:63:38:9c:13:bf:fc:51:e4:38:f3:ea:1f:cb:
06:fb:ee:65:79:8b:56:73:0b:41:eb:8b:60:58:24:30:0d:b6:
d4:09:c1:38:51:30:1d:1f:bf:ec:20:1a:63:e5:c7:ee:9c:b1:
10:4f:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:41 2025 by rpki-client