Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: D4v/Ta505RwJ8wFXdcNmY6yz9jGB5Vtj5Hm+9EGp8hw=
Subject key identifier: CC:BD:75:B8:8E:BA:ED:EE:43:97:6A:32:41:93:2B:08:7E:42:86:8C
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 0198D54DC5056929F2D5C1EAC2B03AE31616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: K/zVCQ+vTxQXwW5/xBMGFzNHUgdq0RbSQrhQ+8Pmx7Y=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c5:05:69:29:f2:d5:c1:ea:c2:b0:3a:e3:16:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=ccbd75b88ebaedee43976a3241932b087e42868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:c2:f1:f2:b2:ac:0a:a5:b8:a8:9c:3a:d3:
69:d1:fc:d4:78:47:97:ab:17:48:0d:19:d2:b0:8f:
73:27:5c:9e:28:47:83:eb:57:45:ac:fe:37:c4:21:
3c:8b:00:64:62:14:d7:7f:e5:be:a1:ce:91:86:2c:
f5:a4:59:98:f2:e2:cd:fb:1e:71:32:f3:f5:e2:13:
ac:81:75:49:a2:08:de:65:53:79:b3:6a:2b:27:a9:
58:a2:c3:43:4e:b2:e9:37:8d:49:bc:39:bd:b0:59:
d3:31:f8:ad:58:a5:27:86:9b:5b:37:0b:74:c3:6a:
f6:8d:f3:9c:2d:6b:52:4f:96:9e:fa:22:3e:ea:54:
54:b8:0e:66:ed:f2:9b:12:89:9c:db:15:38:bc:ab:
b1:23:f0:4a:34:6b:c2:cd:ae:61:5d:f7:2c:ee:15:
44:a3:64:4e:5d:1c:ff:e2:7f:49:30:ea:11:b2:7c:
35:52:b8:be:f2:19:61:22:bb:f2:78:f8:18:a8:75:
8c:e7:bc:5c:1a:97:2b:2a:f2:5a:b0:b1:7c:a5:1e:
93:1d:73:d1:23:91:7d:5a:98:4e:1a:00:de:15:55:
3f:d0:91:a0:f1:80:b1:43:d9:0a:8a:6d:5d:38:e8:
87:27:b6:f1:61:8f:64:b5:0d:46:b7:8e:f5:01:ab:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:75:B8:8E:BA:ED:EE:43:97:6A:32:41:93:2B:08:7E:42:86:8C
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:55:a1:60:96:28:2d:85:ae:1e:de:6d:61:c0:a4:2a:b8:94:
0f:c5:0d:f0:ae:c2:98:bb:b8:39:02:60:7c:3e:00:75:99:57:
d1:8d:f3:8c:21:ac:61:d7:11:16:72:97:8e:c3:57:97:6f:06:
c3:8e:a8:ca:59:f2:b3:c0:96:e4:3c:db:87:8a:9b:5d:af:42:
eb:ed:36:69:12:a4:74:b8:f1:3f:f9:5d:d5:43:0d:29:5e:48:
b3:22:94:21:c0:c7:cf:19:18:d5:a7:fc:ec:c6:b9:3a:c5:1a:
9d:c0:59:c9:05:7b:b7:24:b9:e8:8f:3f:09:ad:7a:1e:10:b2:
19:31:e8:2b:11:69:4c:a9:e3:84:6e:8b:da:4d:c8:a7:f8:6b:
d9:b7:59:b6:8e:de:c9:a6:17:e1:a7:40:aa:20:02:c7:2f:5b:
a6:55:13:29:4b:99:a1:a9:d2:b3:4b:fc:8e:85:1b:84:cb:c9:
3e:a7:26:c8:28:e3:1e:35:73:2d:aa:97:50:84:5b:b7:ba:86:
c4:f1:15:27:df:c9:05:66:08:ab:86:6f:18:6b:f7:38:68:83:
da:15:28:6e:03:32:65:5b:46:85:5c:85:76:fc:1a:c6:13:74:
50:ed:75:a9:3c:dc:16:b8:ea:7a:67:fe:98:00:d6:91:2c:ed:
e3:81:61:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcUFaSny1cHqwrA64xYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGY4MTI2ODgyOTMwMWYzZDY5ZWI5NmY4YWM2MTdmYTI1
MjU2YTEwHhcNMjUwODIzMDUwMTQwWhcNMjUwODI0MDUwMTQwWjAzMTEwLwYDVQQD
EyhjY2JkNzViODhlYmFlZGVlNDM5NzZhMzI0MTkzMmIwODdlNDI4NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkjC8fKyrAqluKicOtNp0fzUeEeX
qxdIDRnSsI9zJ1yeKEeD61dFrP43xCE8iwBkYhTXf+W+oc6Rhiz1pFmY8uLN+x5x
MvP14hOsgXVJogjeZVN5s2orJ6lYosNDTrLpN41JvDm9sFnTMfitWKUnhptbNwt0
w2r2jfOcLWtST5ae+iI+6lRUuA5m7fKbEomc2xU4vKuxI/BKNGvCza5hXfcs7hVE
o2ROXRz/4n9JMOoRsnw1Uri+8hlhIrvyePgYqHWM57xcGpcrKvJasLF8pR6THXPR
I5F9WphOGgDeFVU/0JGg8YCxQ9kKim1dOOiHJ7bxYY9ktQ1Gt471AasezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy9dbiOuu3uQ5dqMkGTKwh+QoaMMB8GA1UdIwQY
MBaAFALfgSaIKTAfPWnrlvisYX+iUlahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2It
M2U4NmQyYzI5OTY5LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2ItM2U4NmQyYzI5OTY5
LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlWhYJYo
LYWuHt5tYcCkKriUD8UN8K7CmLu4OQJgfD4AdZlX0Y3zjCGsYdcRFnKXjsNXl28G
w46oylnys8CW5Dzbh4qbXa9C6+02aRKkdLjxP/ld1UMNKV5IsyKUIcDHzxkY1af8
7Ma5OsUancBZyQV7tyS56I8/Ca16HhCyGTHoKxFpTKnjhG6L2k3Ip/hr2bdZto7e
yaYX4adAqiACxy9bplUTKUuZoanSs0v8joUbhMvJPqcmyCjjHjVzLaqXUIRbt7qG
xPEVJ9/JBWYIq4ZvGGv3OGiD2hUobgMyZVtGhVyFdvwaxhN0UO11qTzcFrjqemf+
mADWkSzt44FhHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:31 2025 by rpki-client