Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier: NYynKCl9b8pgxgemLhL1Xb4+1MNH6L6IXjluW+VtZcg=
Subject key identifier: 80:85:DE:CE:A2:71:1E:DB:1A:BB:B7:4F:DD:CE:1E:E9:51:31:C7:23
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 0198D54EB4A19BA5FB8A5F13C79AEDE90AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number: 1119
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: dXEEjnakPjO1uwW7/qP5v41d1LCBztntKDM48H+ACVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b4:a1:9b:a5:fb:8a:5f:13:c7:9a:ed:e9:0a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=8085decea2711edb1abbb74fddce1ee95131c723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:1e:91:e2:3a:cf:69:7c:ba:55:22:fc:80:
0d:38:5d:82:06:8c:78:25:5c:4e:44:40:2b:cc:2f:
33:27:a1:fb:6f:37:b3:69:f1:36:13:5f:33:91:9d:
2b:9c:f4:0a:36:26:a8:69:6c:70:e8:90:34:c4:82:
84:f3:68:ee:7b:66:f9:fc:d0:cb:48:85:cf:f1:c9:
2c:56:ce:2f:b6:a4:8e:6b:2b:88:6e:29:d5:87:df:
e0:9f:87:5b:cf:a3:a1:3c:23:2e:a7:33:e6:9c:c1:
ef:ed:f0:b7:e5:d8:47:d9:82:7d:10:dc:23:20:a9:
f9:33:3c:01:d3:a5:58:12:db:9e:45:0f:7c:9e:75:
ef:5c:88:c7:61:e7:d7:40:1e:34:3c:14:46:e7:9a:
76:98:8c:b6:ed:80:3c:17:1d:e7:97:27:53:81:8a:
88:7b:8e:6b:04:20:1d:3a:4c:5d:6e:2d:2e:c1:8d:
25:e5:57:ba:e3:44:26:27:62:58:1d:6b:bc:81:e1:
60:b7:12:1e:3e:d0:06:2f:4c:69:f3:27:98:cd:5e:
34:0e:0e:f4:ec:95:f4:d5:68:21:5b:c7:0d:73:a8:
c6:a5:fe:10:fa:aa:87:ae:f9:f5:97:68:a1:2e:41:
12:76:99:31:02:f6:81:f6:18:f0:59:17:78:50:dc:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:DE:CE:A2:71:1E:DB:1A:BB:B7:4F:DD:CE:1E:E9:51:31:C7:23
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:05:cc:eb:cf:1c:57:10:ca:bf:09:a1:d0:78:00:52:00:dd:
47:12:98:92:02:cd:96:2e:a1:33:6b:2d:b4:41:63:1d:d6:6f:
e3:1e:24:45:4c:91:2c:b0:2c:f3:a3:04:d4:31:ce:13:b1:b2:
4e:5f:86:96:29:27:b5:26:f0:a7:de:43:79:2c:66:5f:4f:2d:
d8:c3:0a:e0:59:85:55:80:43:3a:a6:3f:b2:5a:2c:d5:f8:e1:
70:ba:b9:22:23:b4:c3:91:d1:93:c2:54:c5:49:6f:e0:b0:a2:
46:1f:37:1c:84:24:52:1a:a5:d7:92:12:0a:85:0d:b9:41:6f:
52:98:ca:5a:37:82:14:33:03:63:f2:6c:d4:2e:a2:b2:58:ea:
d3:cf:83:4b:60:83:c3:1e:38:51:f3:5d:7f:d9:1d:57:a4:00:
05:71:ad:45:ff:f4:d1:3d:87:c6:cd:54:e7:43:57:75:fb:67:
fd:65:e0:29:64:5c:a4:7a:44:7a:a5:39:c5:13:df:cd:1a:a2:
18:25:0b:f1:45:39:54:a3:88:2b:fd:b2:1f:68:71:90:7b:52:
4d:f1:ed:1b:b9:62:b7:3d:16:49:72:a8:8c:9f:40:07:f0:70:
69:f9:4a:62:89:8b:27:4a:82:49:1a:c5:af:ec:45:7f:0b:b6:
04:56:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:19 2025 by rpki-client