Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: Tk5bBACYId71zwrDpelqg+LpeS7Kwd2QlSdIM8tZ10Y=
Subject key identifier: BB:61:30:C6:04:36:88:73:78:60:EC:24:D0:C2:83:E0:70:F3:33:D5
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 0198D697E75E89D01552ADE079A0FB27BD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0DAF
Signing time: Sat 23 Aug 2025 11:02:15 +0000
Manifest this update: Sat 23 Aug 2025 11:02:15 +0000
Manifest next update: Sun 24 Aug 2025 11:02:15 +0000
Files and hashes: 1: Z1Ock9m-Q_Xe050sJsCdRlWzur8.roa (hash: R9jUdjYo59CfyIvLONxZS26hQTWpSjHSiWLK1ZuX0Ik=)
2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: ryC6U/jWFBdiMjrqTPbPlR3lBRrteqwBunL8ySTPwGg=)
3: tVfNb6vANMjkCnwkn_zqjQ9R46g.roa (hash: sIFbcv+pjLFEVXCoeuZdGPtO8JDvf+xPKrDKXkHq+5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:e7:5e:89:d0:15:52:ad:e0:79:a0:fb:27:bd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Aug 23 11:02:15 2025 GMT
Not After : Aug 24 11:02:15 2025 GMT
Subject: CN=bb6130c6043688737860ec24d0c283e070f333d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:5b:11:39:84:ee:b7:e9:3d:3f:58:10:42:
16:d2:63:17:ed:56:bd:1f:48:f3:d6:6c:9e:e5:a4:
2e:75:15:76:7f:33:0c:44:17:51:f0:d8:03:72:ad:
12:1c:28:be:b4:08:49:a3:88:30:cc:90:ed:ce:b8:
e0:f3:b2:4f:84:e9:a7:43:ee:5a:7c:c9:21:c0:7c:
a8:f9:46:c3:30:39:e9:31:53:5f:f7:0e:e2:86:e3:
e8:45:b5:65:3e:c2:3f:6d:f8:af:79:13:6c:da:62:
f1:9f:59:ec:41:fa:2d:80:e9:6a:b9:6e:c8:df:54:
4a:08:e6:7b:f6:08:34:98:8e:fe:d9:67:3b:4e:0f:
b6:d2:27:78:d5:b9:c0:e0:ce:5d:af:5d:95:3d:87:
66:b8:72:9c:12:6a:5b:08:99:1d:87:54:de:aa:79:
5e:ae:4e:cf:09:30:87:ba:65:83:22:6d:fc:79:50:
ea:24:83:25:4e:4d:69:1d:b9:7f:05:90:2f:72:02:
7e:4a:b7:a4:33:82:35:a3:43:d9:51:77:67:a7:a2:
d4:b9:9e:53:18:ab:7f:87:ce:91:7e:f2:88:40:c1:
81:fb:24:9c:f1:66:ee:2c:b2:19:3e:c3:da:b0:28:
a5:dc:5b:ac:bb:60:4e:02:17:97:b8:15:5e:04:d1:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:61:30:C6:04:36:88:73:78:60:EC:24:D0:C2:83:E0:70:F3:33:D5
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:c5:8c:25:e7:0a:29:e2:f6:9f:41:05:be:7a:76:9b:aa:
85:63:b1:ec:44:83:3a:69:51:d1:08:77:60:ab:5b:bd:19:88:
b4:e8:c1:83:bb:be:e9:a0:d9:23:fa:42:c0:de:20:74:1c:5a:
8f:02:57:c8:44:d3:56:6d:d7:b1:39:d8:0b:90:f5:69:28:2e:
cd:2f:0a:73:ed:05:e9:72:fd:36:09:71:83:21:39:24:a1:1c:
a7:ec:cc:2a:37:a6:96:59:87:86:56:7c:1e:66:4f:a9:3f:34:
2f:75:9b:1b:c6:68:04:9e:b4:62:ae:03:d2:97:d4:db:08:c0:
b5:83:6a:0a:9f:b8:03:c9:8b:99:26:6f:cd:89:7c:d2:86:5d:
1a:f2:ee:7b:1e:44:5d:36:ea:f7:bd:e2:8e:47:c6:73:c2:9f:
28:04:f1:0b:5a:eb:11:2b:8d:8e:54:ac:40:36:7e:bf:06:7c:
34:84:2b:fa:75:a7:88:2a:23:57:97:c0:45:aa:a3:ce:04:39:
fd:3e:a5:5c:e9:79:44:52:ca:bb:4a:f2:2f:e8:98:09:3f:c1:
65:12:a9:18:07:ff:ea:b2:0d:9c:84:0b:8f:04:b7:24:72:1f:
eb:cf:3b:75:f1:5e:e1:c6:22:4d:70:21:73:10:71:e6:43:cf:
a9:80:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:29 2025 by rpki-client