Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier: VJAFHUD7cG55EX6RP4srWj+A1oEGnE7J8irel85Drag=
Subject key identifier: 5C:54:2B:15:0C:4B:8C:09:4E:2E:90:DE:03:A5:C4:B6:05:ED:03:08
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial: 0197B6A14E06A6A6509C0D2F15B8105913DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number: 0A8B
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: Okc+eBdN2dPmW+6CLIDqQBJmyuH4ho7xdR5icvpxZWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4e:06:a6:a6:50:9c:0d:2f:15:b8:10:59:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=5c542b150c4b8c094e2e90de03a5c4b605ed0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:97:76:d1:60:71:29:c1:c0:f9:6b:15:08:
e8:60:53:ec:7b:8c:56:93:53:20:02:29:02:f4:18:
88:40:5e:ae:7d:df:5f:dc:71:13:4d:ec:3f:ac:fa:
b6:b4:44:6c:a3:58:0f:ab:da:ab:e5:74:f9:15:a8:
87:fd:85:a9:2b:dd:9b:7b:e0:58:9a:c2:70:47:cf:
c8:8e:9b:d0:68:be:a1:07:8e:35:70:a5:4a:33:a4:
ac:63:bf:6a:63:7c:99:d0:2e:80:06:fe:43:95:55:
90:af:11:09:8e:44:3f:13:35:91:fc:9f:0c:66:90:
8c:00:b5:6b:bb:b9:a6:f4:e3:61:03:27:61:86:db:
8f:63:9e:dd:e1:8c:fa:8f:67:0d:e2:7c:c9:2f:a3:
e4:7b:c2:31:2d:2e:26:33:70:fe:fa:4e:6d:b0:4d:
25:29:f1:f5:31:31:b7:ae:0f:94:e3:d6:92:c8:10:
aa:f8:1b:56:d4:4a:fd:2e:0e:29:e3:d8:80:09:09:
74:a9:15:27:de:fb:93:f9:9e:7e:65:0d:99:d6:8d:
23:e8:47:36:17:a8:4f:2b:78:9e:dc:e8:76:06:7b:
4e:db:a9:d5:26:bf:38:2b:f5:f0:06:e2:30:36:25:
e1:63:90:18:f5:88:c6:27:88:b9:bb:48:43:00:73:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:2B:15:0C:4B:8C:09:4E:2E:90:DE:03:A5:C4:B6:05:ED:03:08
X509v3 Authority Key Identifier:
keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8d:c7:70:42:88:f0:31:01:dd:cc:43:a2:91:e4:4f:c9:24:
8e:8d:9e:b2:21:4c:2f:78:a1:69:62:9d:1d:71:e8:04:a6:df:
28:62:9b:19:83:3e:0f:96:25:a1:41:9b:25:92:4d:9a:73:18:
1b:42:33:b3:d0:cd:bd:cc:07:70:82:e9:b3:0a:3b:7f:d7:7c:
5b:da:31:78:a3:77:fa:08:a9:f8:93:71:98:a0:6f:3e:ea:12:
05:52:93:ae:ca:4d:9b:dc:2d:b0:82:99:92:19:66:ca:ec:5c:
ec:c2:05:c0:e5:81:7d:f0:15:55:58:7f:bf:4e:73:96:d6:de:
20:6e:fc:0e:b3:92:d7:9d:79:14:fa:d3:ac:5a:23:c5:f1:9d:
fd:95:44:f2:9b:f7:ee:d2:cc:5e:d7:20:ca:7e:d1:d0:1d:f6:
73:e5:a0:9b:a7:5e:71:58:56:db:46:f9:b0:c3:ca:87:2c:53:
27:fc:bb:7c:73:6e:ea:74:6c:ee:cb:47:4a:98:ba:a0:e2:a5:
b8:1f:10:69:80:79:08:23:82:e8:3e:65:e5:21:ac:54:01:e1:
44:b6:51:c6:54:cf:fe:87:ac:83:05:a1:08:67:4f:8d:4d:4d:
54:cc:34:25:26:63:77:39:92:14:66:95:61:84:af:c4:7f:4d:
cf:f6:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:30 2025 by rpki-client