Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: jR+nJt2lnrHQ85+lnKKUq2OHQ1bwTqRUzVUgzLTwKWg=
Subject key identifier: AD:06:8B:30:09:3F:2D:F1:D5:68:8E:3F:35:6A:B6:D9:DF:11:AB:44
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 0196CACDEC46B7E0F020A058A2EB44888E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 18:00:15 +0000
Manifest this update: Tue 13 May 2025 18:00:15 +0000
Manifest next update: Wed 14 May 2025 18:00:15 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: YxFQZpPt2O7rWEB9izgWUelRpwYwhKYtRsG7yHsOuTQ=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:cd:ec:46:b7:e0:f0:20:a0:58:a2:eb:44:88:8e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: May 13 18:00:15 2025 GMT
Not After : May 14 18:00:15 2025 GMT
Subject: CN=ad068b30093f2df1d5688e3f356ab6d9df11ab44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:8a:a3:67:a6:e6:ce:5e:94:25:0a:a1:e8:
d8:51:b9:25:22:e7:c1:1f:ca:d6:b3:98:56:24:ab:
d0:e9:b3:5f:e1:e6:9e:7d:fc:4b:6d:8f:5b:de:78:
74:6e:34:1a:68:86:f7:cb:64:3e:25:6e:a8:6f:94:
4a:87:e5:10:17:42:7a:b5:42:17:c9:f0:d7:f2:2f:
82:81:66:5a:e5:31:bb:3b:0b:27:3f:86:14:10:55:
6c:11:30:85:c9:7e:0a:3f:a9:81:58:e2:b2:51:c6:
33:68:11:69:eb:8c:c2:72:8d:2c:29:48:0a:35:5f:
4d:06:66:6a:14:1e:16:f9:6f:d3:b3:fe:d0:b7:52:
62:d8:05:64:97:63:5b:e3:84:f6:c9:bb:24:95:be:
3a:15:b5:80:33:2e:04:fe:06:d8:38:cc:83:47:04:
a7:28:3a:67:70:f3:43:36:5d:6d:b3:e3:df:13:81:
57:39:48:8f:33:b8:57:cd:e0:e4:65:d5:ee:d7:c2:
21:77:5b:0a:34:76:9e:22:12:25:fc:59:78:2d:97:
f0:55:21:13:d3:68:71:1d:9e:75:49:67:1c:30:44:
0d:f4:c2:ed:4d:3e:ad:9c:70:d7:0c:07:43:99:89:
cc:be:14:4c:6a:4e:be:5e:33:7a:8e:3e:ea:53:9a:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:06:8B:30:09:3F:2D:F1:D5:68:8E:3F:35:6A:B6:D9:DF:11:AB:44
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bd:0d:63:df:97:55:52:e1:3b:8c:c2:92:e2:2c:9d:8c:f5:
3e:f5:fc:1c:3f:74:84:b5:c3:3a:e5:17:ad:80:08:fc:46:c6:
8c:7b:a9:05:40:fa:e7:26:fc:90:23:87:90:e7:ca:48:b2:a2:
0b:65:1f:d0:56:1a:6e:db:bc:dd:6f:1e:9a:28:51:90:2f:a6:
6a:5c:3b:9f:d5:be:1f:da:e2:b0:c4:4f:07:3a:4d:e1:e4:bd:
55:2e:f7:8d:8e:73:25:1f:85:de:8d:fc:83:24:d5:e2:5d:fe:
79:35:53:8e:76:18:fc:91:37:6e:e6:0a:d6:b0:4a:fc:2f:64:
a0:d7:20:e2:f5:7a:4b:08:16:e8:09:84:db:c8:65:78:df:a3:
4a:25:1c:d5:9c:57:42:d6:60:f3:15:04:0f:f4:ea:0b:ca:e2:
f4:20:bd:46:51:a4:4b:6c:5d:82:e4:83:97:4d:b9:45:1d:83:
b6:e0:9d:3b:39:b8:85:36:e1:8e:50:d5:5e:74:b3:56:8d:24:
56:b3:42:ea:e4:b5:47:59:ab:ff:5d:22:5f:48:76:e0:f4:c4:
cc:66:1f:0c:91:b2:7c:80:06:c3:aa:70:36:ae:4c:f4:36:d9:
4d:81:d6:b7:74:45:ad:ac:e8:05:d2:c5:7b:37:98:84:97:ef:
d8:20:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:36:38 2025 by rpki-client