Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File: ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier: LoLxMvCFU3BsWPOondRvWbRUPq39//Ori6PjYVW/LrY=
Subject key identifier: 33:02:7A:69:F3:6D:4F:3B:3C:2F:C9:2E:52:FC:9A:7A:90:E6:85:AE
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 0197B6A059948C56C7F51B2FC696D95E6309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number: 1311
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: eZ4F/j3jRK/K+NxPW6GKC8N/6KCQGRCV7QkyA1wEz5g=)
2: Yp_lUqP28vEyFCPRb80UtGDXNsg.roa (hash: ywVUWmL4GSGoY6WsMRyetGJGnvc6akPYgfQXjeu4wCo=)
3: jA79aGVqPI-PvZSOlUeJ0j64c1Q.roa (hash: cpbrUzoeXFWleCog+F05RG8Xxbfmz0h5Ia9JXBRNANY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:59:94:8c:56:c7:f5:1b:2f:c6:96:d9:5e:63:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=33027a69f36d4f3b3c2fc92e52fc9a7a90e685ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:bf:36:97:e6:f4:eb:ff:9c:57:29:ab:80:
ce:60:ea:3a:01:b4:00:2c:a3:2b:e2:e5:94:8a:d5:
9a:59:83:73:e2:ce:5d:71:e3:6e:33:4b:1d:1a:2d:
97:7a:9a:a8:16:e5:5e:a6:bc:19:25:e4:00:af:ef:
32:c2:8f:8e:4d:ce:bc:9d:d2:08:c9:2a:2d:10:6f:
92:9c:8f:f7:d0:6f:df:79:09:d4:d7:d0:9d:3d:e6:
39:76:35:5a:43:c0:e5:51:06:10:ba:d6:e4:89:e5:
5e:94:c9:14:9c:f6:89:f5:11:5f:d3:a3:83:42:71:
19:7c:95:1b:f9:67:d9:b8:be:c1:9e:35:8e:75:44:
a9:50:9b:e1:08:76:62:e7:ad:0d:b2:00:19:83:1e:
64:48:ec:71:95:27:2e:06:3c:2f:f5:e7:04:52:08:
7d:1a:e4:ef:22:b8:35:2c:00:be:ba:50:7a:f5:4e:
4e:39:c5:c3:f7:7c:6a:69:05:7a:cf:2a:a4:2d:65:
fb:ec:c9:09:09:e9:a0:c9:41:53:0f:02:9b:94:d2:
c8:f8:fc:20:62:08:c2:ee:57:f5:0d:2a:92:9d:97:
a0:19:49:4b:ee:5b:a4:51:74:75:43:53:be:04:85:
ed:00:93:30:65:65:b6:8a:39:4c:dc:fa:2a:56:6f:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:02:7A:69:F3:6D:4F:3B:3C:2F:C9:2E:52:FC:9A:7A:90:E6:85:AE
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:d7:ea:d2:34:8a:46:ba:60:bc:2d:a2:1a:d3:3c:77:56:
3c:70:d4:b8:f7:45:32:df:c6:a9:41:99:96:44:ee:77:38:47:
5c:2d:f2:ec:bb:f0:a6:f0:d6:0e:16:53:1a:a3:03:2b:a7:31:
62:2a:84:9d:d8:8f:e6:37:e9:41:71:e7:3f:11:38:77:f4:e9:
41:c8:a7:95:3b:3f:7f:13:ac:b0:2f:b1:3d:82:b3:21:49:41:
70:66:97:4a:e1:70:7c:f2:ed:fc:10:05:59:06:ff:bb:58:91:
13:86:33:0b:7f:4e:70:a9:18:e2:2d:e4:11:59:4c:4e:12:0c:
b2:ac:b3:76:11:00:ee:ef:8f:d4:31:57:6e:87:f1:2c:3f:73:
08:43:a1:cc:41:69:b4:5f:2c:64:41:a6:47:9e:d6:c2:c1:f5:
59:78:71:10:b8:48:87:1a:e8:6f:fc:bb:32:8f:df:9a:c5:7d:
86:a3:a4:b3:d9:53:bd:13:48:a6:c6:d6:77:95:5d:72:8f:60:
c1:30:eb:1c:ce:01:3e:17:81:52:4c:51:46:ed:27:12:44:6b:
80:84:c9:71:da:93:52:e8:ea:c6:83:49:bf:f3:6c:74:93:a1:
13:c3:e7:01:5f:11:65:31:02:3c:9e:a5:68:62:19:4a:a7:64:
88:99:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:56 2025 by rpki-client