Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier: skiJOfaa05cpj7JDT/eDaDNORYPILJgwyRuaSN0Oz60=
Subject key identifier: 8D:C6:26:97:59:7E:B8:2C:03:FC:6E:FC:A8:08:DC:A8:1B:08:32:8F
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 0199FCC605C877CB69B0088234D379D4E4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number: 11B2
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (hash: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=)
2: mUymegp4IR9xYnPFjz3cMX5BkMI.roa (hash: CAxISBtLNI96pbT2BzmUHVy5Bkyqhs+IzyfjLidQ3oc=)
3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: 8mq/vfLsfVNDab+As0xrFWMqNtII5RLZZkdDdhwd1GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:05:c8:77:cb:69:b0:08:82:34:d3:79:d4:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=8dc62697597eb82c03fc6efca808dca81b08328f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:11:66:4d:e4:88:ec:bb:6d:a0:cf:01:6d:
c5:ca:64:72:fc:f0:fb:30:ca:13:08:99:51:56:0b:
8b:31:6e:da:2e:0e:7c:6b:8d:92:96:81:df:78:e0:
55:32:07:94:11:11:52:41:a1:44:ee:c9:eb:5b:88:
db:53:66:cc:38:cf:27:46:48:d4:48:26:36:6b:21:
28:ca:34:a3:53:c8:40:2a:b1:e6:03:82:c0:30:a1:
1e:24:3f:c3:04:85:45:27:b7:68:17:82:3e:f7:58:
e6:9f:bf:0c:2b:0d:21:0a:50:e5:b0:e6:65:9f:ab:
09:59:46:80:7a:3b:be:4b:d7:fe:3c:ea:6b:25:f3:
ea:62:1e:9b:4c:cd:d3:68:a8:c2:a2:cb:2d:11:00:
de:a3:89:63:35:c9:c4:01:8b:1b:f3:cd:0a:c2:e1:
b9:24:ac:8c:e1:6b:a7:a9:a9:ee:49:b2:33:7f:70:
e3:c1:b0:70:8e:95:35:52:48:a5:64:e1:9c:c6:09:
1b:b1:38:7c:d6:2f:e6:c7:41:14:ea:df:a7:10:38:
1b:5d:e0:60:68:94:2b:d1:34:26:cd:e4:3d:d0:79:
ff:d1:04:d8:0f:91:25:6d:6d:ec:99:ea:c8:85:5d:
94:41:64:de:47:25:bc:84:a5:f4:ac:e5:07:cd:40:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C6:26:97:59:7E:B8:2C:03:FC:6E:FC:A8:08:DC:A8:1B:08:32:8F
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:00:af:b5:85:ac:91:c3:a2:64:0b:5f:93:ae:1e:90:f8:
7c:20:56:28:3b:34:38:4f:cb:93:f6:b5:db:5d:28:77:df:61:
c0:28:c1:23:eb:2c:ac:86:a0:11:7d:b4:aa:f0:e4:a6:56:b2:
9e:e1:93:25:7e:7c:28:e4:f5:cb:3e:92:7c:29:6b:f2:ce:3d:
9d:16:52:f1:0f:05:80:e3:06:66:4e:e8:0e:11:33:e4:cb:df:
b9:22:26:f5:5f:e3:6b:55:c8:c4:e4:77:72:55:e0:0d:e4:f7:
4b:7e:03:6a:ee:94:bb:05:4c:48:3a:b5:8b:3a:ea:cd:d2:c4:
b1:46:b2:a7:49:1c:04:ce:79:a4:7d:a5:02:dc:68:52:05:a3:
49:9a:3c:ec:c3:fa:a2:4f:83:f6:77:25:20:57:71:c6:be:1d:
65:c1:66:07:c6:ab:73:42:02:ad:a2:c5:ba:73:86:52:cd:e4:
5b:c3:71:1d:e8:d1:20:b0:54:ee:73:05:c8:89:06:d7:21:5a:
a1:35:5e:d8:b6:b6:ca:d5:72:88:73:ba:be:dd:c7:0e:7b:af:
88:df:fd:47:2b:a2:88:9e:16:40:fc:fc:10:6d:0a:79:22:6a:
63:0b:9c:ac:b4:43:16:23:87:fe:66:aa:d5:b8:4e:88:fd:ab:
2d:37:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:40 2025 by rpki-client