Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: cGVLRi/u22+GSvCXyc0EoUIUmOxr0luVsCR4XB2sl9Q=
Subject key identifier: 50:79:11:54:57:83:9A:6F:0C:A3:3A:64:9D:1D:05:4B:30:4C:AA:FF
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 0197B70EDC2E6E5F8B82A7C6ABC75D558DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 12D1
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: oFO8B8k3UBO8gOkHMg69RkfQVoqHDzfLw1OD1DoGRQo=)
2: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=)
3: w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa (hash: wDr5pC8ALwDb+JSgX5rgKPXkUmbOaUgv+fsaXxbR3wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:dc:2e:6e:5f:8b:82:a7:c6:ab:c7:5d:55:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=5079115457839a6f0ca33a649d1d054b304caaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:5e:28:f3:21:52:50:14:41:c1:ae:94:4f:
51:4d:45:47:76:58:8f:d2:3b:c4:e7:9b:a8:78:a3:
31:56:c1:09:c5:81:ea:a4:f6:b0:78:b3:93:0f:fb:
c1:51:3c:e2:3b:ea:bc:bd:fd:59:8a:45:29:4c:be:
f7:24:cc:45:e3:39:99:c2:85:2d:cd:3a:9e:54:bc:
29:8d:5b:82:18:47:fb:8d:e7:81:79:27:0a:68:27:
a7:4c:a3:78:94:cb:08:1f:9c:c0:9b:c4:58:a5:b6:
a1:7d:ed:79:97:bb:95:59:02:97:15:3f:f7:94:62:
e0:de:41:36:21:7c:e9:dc:db:da:84:fe:d3:4c:64:
f0:1a:06:4d:e9:70:d6:bc:7f:e6:c6:2d:72:73:b9:
65:37:fa:09:9b:0a:59:c3:98:f8:65:27:47:db:c7:
38:f0:ba:bb:83:e4:ed:be:1e:ec:8b:49:3b:5a:d8:
b0:f3:0b:9e:e6:e5:6e:b2:3d:e2:05:1a:4d:e3:90:
17:b2:1e:97:75:0a:46:2d:07:4c:f1:be:de:e1:96:
a8:e3:bf:ad:77:e7:3b:51:c4:60:83:2b:c7:75:7a:
31:25:00:7c:d0:f4:1e:27:7a:02:3b:f5:60:cb:c1:
9a:f2:9a:27:36:bd:9b:79:8e:d4:77:af:55:5d:6c:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:79:11:54:57:83:9A:6F:0C:A3:3A:64:9D:1D:05:4B:30:4C:AA:FF
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:27:3b:e3:20:69:22:c3:ce:92:b6:3d:09:f1:62:4a:0d:bb:
b9:03:d6:e5:52:ef:ba:7d:34:97:4c:fa:f4:90:4c:4a:1f:aa:
36:1e:ac:29:28:66:19:45:98:c1:f7:8f:fe:8f:9c:f7:e0:49:
be:43:e4:80:a9:8b:b8:24:4b:ad:c2:c8:ab:73:e3:02:0c:80:
75:13:ce:2c:1e:44:06:76:7c:6a:be:da:2d:36:e7:51:4f:a6:
11:80:38:65:f3:50:e4:0e:cf:ba:c6:97:18:04:ed:3b:16:fe:
60:ab:1c:8e:c8:9f:70:de:b9:c6:d0:e8:ed:0f:bc:85:c3:75:
4f:20:d6:d0:f3:0c:a7:98:a3:37:72:9f:ac:3f:c2:a3:80:d4:
f8:e9:2b:4b:09:ce:ca:72:ee:02:02:37:57:6e:0c:76:e0:72:
4c:5c:37:da:d8:73:c0:4c:ec:3f:a1:17:23:c5:74:73:9b:01:
14:8f:1b:68:3e:39:a5:9f:95:24:4f:a5:ea:59:0e:2c:94:be:
52:2e:5b:d5:eb:a1:08:70:02:9c:bb:70:e1:21:4b:bb:1e:ed:
b3:7d:84:21:f7:21:b8:95:28:7f:80:8a:b8:2c:d8:58:bb:4e:
85:c0:11:45:0a:6f:3d:18:ed:59:74:f9:fa:2b:9a:59:83:5e:
7c:b4:7d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:48 2025 by rpki-client