Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: AoMGEFpSmDYv0wDINr0ZT+g8S2MDJNd2zZUia0ayZGo=
Subject key identifier: 94:1C:79:26:EC:9C:4E:B4:CC:69:9D:6C:40:92:B1:28:DD:F7:E8:AB
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 0196BE5C1E9384ADEB2EE7EC858EDF06A5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 08:00:30 +0000
Manifest this update: Sun 11 May 2025 08:00:30 +0000
Manifest next update: Mon 12 May 2025 08:00:30 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: FHSjA4pwpFrSpdEdrKjE96fwaSD1zfA3o53JY/smAXM=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:1e:93:84:ad:eb:2e:e7:ec:85:8e:df:06:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: May 11 08:00:30 2025 GMT
Not After : May 12 08:00:30 2025 GMT
Subject: CN=941c7926ec9c4eb4cc699d6c4092b128ddf7e8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:e3:a4:f8:a2:9d:f0:a5:72:d7:4d:b7:56:
de:f0:44:f9:f0:81:ed:7b:92:93:1c:9a:1d:37:b5:
9b:b1:ab:df:a2:89:c0:ab:09:a9:72:25:16:88:26:
5e:5a:6b:4e:ff:69:66:96:87:af:91:7a:02:3a:2b:
94:5e:62:4c:e3:6a:fb:51:91:c6:33:90:23:09:6c:
86:74:e1:9d:6e:ce:35:c2:f8:0f:9f:71:48:2b:07:
d6:e9:94:e3:db:ba:1e:bd:ae:3c:0f:e6:f8:7d:3b:
bd:00:a2:46:ad:61:41:76:84:02:98:4b:83:2e:4f:
04:45:e9:6d:d2:16:e0:19:aa:71:fc:9e:0a:db:6f:
7b:cc:5b:99:9e:23:50:11:9f:b8:d5:92:73:ae:7d:
d2:3d:82:6e:f3:28:19:59:ab:1f:46:d7:74:35:52:
03:f0:74:ff:b9:65:19:e5:ad:b4:b0:94:a6:d9:17:
77:c8:a1:08:d6:ba:7a:33:b3:bd:82:97:68:49:bd:
78:a0:b1:f8:d5:88:7f:7e:cc:c0:9d:da:0c:5c:d5:
f3:af:f5:10:39:54:94:cf:91:98:cd:83:cd:f4:7c:
05:8b:7f:5f:90:3b:90:79:87:ed:2a:7c:3d:e2:2a:
9f:fb:9b:6a:51:48:3a:ce:f2:0b:d7:05:04:1d:af:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:79:26:EC:9C:4E:B4:CC:69:9D:6C:40:92:B1:28:DD:F7:E8:AB
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:85:0f:d0:8b:2d:87:90:1a:8e:40:3a:61:f6:3f:50:fe:23:
1b:89:f1:28:df:08:8c:b2:42:79:eb:e0:60:34:f7:35:3c:3f:
68:20:fd:0c:f6:03:1f:21:2d:a0:a5:4b:8a:1f:de:4a:99:46:
56:8f:12:58:59:6e:ad:f8:61:41:6b:d1:24:cf:cf:10:72:a2:
94:ca:65:81:f2:82:a0:68:b6:b9:8c:d6:5f:a6:cc:e5:f7:25:
38:7d:28:4a:9d:c5:36:06:20:a8:7f:c8:22:10:c9:a0:7f:5d:
b9:6a:c8:7a:ba:fa:a7:32:9c:af:b2:b5:e6:7f:f5:71:ae:9b:
56:58:d1:39:f6:d0:b8:64:e5:23:d5:fc:2f:0a:92:69:1d:e8:
b9:c5:b8:8b:f9:8d:7b:77:99:2e:4b:6c:ac:57:2f:5a:8b:6b:
ac:e6:d6:a1:01:6e:16:d3:7c:63:33:aa:24:69:1a:47:a2:ca:
ee:fe:64:21:34:d6:a1:63:7f:c2:1f:c9:b5:51:eb:9d:3a:81:
23:ab:50:42:0f:99:18:54:26:4e:7d:02:92:89:35:93:62:ed:
3d:2d:e3:37:2c:34:c9:17:e9:ff:c4:11:1a:8f:4e:00:79:51:
a5:11:db:aa:2e:1a:3c:f4:ca:5c:0f:8a:25:28:b1:90:ad:4b:
99:37:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:01:02 2025 by rpki-client