Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: 0es93iWJG1dDJpcJD7AzeRaCGaKI2OXkBAlnv4xqpBY=
Subject key identifier: 2F:4E:F9:03:2C:B3:AC:81:4D:9C:69:23:55:D7:38:BA:FF:3D:39:CC
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 0197B88F39E7FD3D2B2D66B397D272274CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:01:23 +0000
Manifest this update: Sat 28 Jun 2025 22:01:23 +0000
Manifest next update: Sun 29 Jun 2025 22:01:23 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: voJNIm1bV9R7gwJtEDw6qqe93D/MvjYg4fHD4jCdp3k=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:39:e7:fd:3d:2b:2d:66:b3:97:d2:72:27:4c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jun 28 22:01:23 2025 GMT
Not After : Jun 29 22:01:23 2025 GMT
Subject: CN=2f4ef9032cb3ac814d9c692355d738baff3d39cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:1d:fc:8c:dd:c1:d9:3d:cf:fd:67:bc:ed:
85:7c:ee:ce:f1:aa:d7:64:19:9e:ad:49:d9:a0:09:
c5:58:00:f8:9d:f4:7b:aa:d6:3e:2e:f9:d2:19:36:
d2:cb:0d:0f:43:95:35:d2:44:00:dc:4b:49:9b:31:
a1:49:89:52:32:a8:18:24:53:36:f5:c7:8f:5a:26:
0b:72:56:36:65:1e:aa:2b:56:40:ef:4b:7d:3c:e7:
8d:18:97:0a:c2:c8:fe:3e:4f:73:f1:ec:55:a6:ba:
63:5a:87:cc:5d:27:9a:3f:64:76:6f:ad:c6:99:b5:
57:0c:d5:3f:3f:d7:19:16:82:dd:73:a5:bf:18:31:
4d:1c:69:ae:ec:c0:d5:e1:40:4f:a3:99:22:da:80:
5e:8f:b4:7c:d2:bf:46:36:c2:84:28:a2:37:07:81:
a5:2e:be:ce:98:b2:ec:ab:53:c1:ea:a0:ed:08:9c:
2f:17:d2:4e:d4:2f:b1:7b:34:5d:ce:74:c1:76:f1:
f1:95:ce:76:14:e8:92:b0:71:4d:1b:c7:af:d8:2e:
f8:8d:fa:57:b1:f5:e7:7b:d9:a6:b2:3a:6b:29:bb:
16:be:fe:ba:60:d3:a1:3e:dd:55:66:9d:cb:3f:68:
71:55:34:33:c1:ab:dd:3f:f6:eb:37:39:83:d8:d8:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:F9:03:2C:B3:AC:81:4D:9C:69:23:55:D7:38:BA:FF:3D:39:CC
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:61:e6:61:3a:fb:ae:04:f0:42:f5:1d:4b:b4:b7:68:85:9a:
1a:12:66:96:32:43:7e:91:9f:77:11:6c:fc:a8:fa:66:a7:9f:
9e:c1:ad:4f:e4:27:1c:b8:a7:8d:07:21:06:dd:ee:09:ea:75:
0e:91:39:d5:b6:c0:a8:61:05:1d:c3:6c:68:d5:6b:4e:74:96:
a1:62:4b:e5:b7:0d:77:ae:38:2b:0c:6e:b7:67:5f:d4:48:bc:
78:50:d6:9b:64:ba:f7:42:b4:36:50:a8:59:54:fe:04:ff:74:
84:96:f3:62:08:3b:2e:1b:ba:3c:f5:bb:ba:8f:2f:91:09:5b:
fe:b6:de:d0:8a:c2:0b:34:dc:49:ad:11:53:8d:7c:fe:a1:42:
2e:e2:92:b4:87:25:ba:d1:3e:67:87:00:b9:e0:d2:e2:65:61:
8f:75:77:4d:2a:f4:a9:62:81:6b:55:f0:3d:3b:15:7f:79:72:
f4:73:6b:56:f2:a5:9f:6a:50:6a:1f:4b:70:47:18:dd:7a:9a:
43:71:49:5e:32:7a:07:0a:5e:ee:cf:4e:51:81:0a:e2:95:70:
f6:37:0c:e5:a1:35:a4:89:9a:22:54:43:eb:8c:2e:19:46:e5:
3c:b6:52:e5:d7:dd:0b:c5:dc:69:52:82:de:1b:fb:14:a5:1a:
a1:4b:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:39:08 2025 by rpki-client