Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File: ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier: lF+ecGfY5F4YjSqJL8e7VsCmS73QgxiqFZttCcb+UFg=
Subject key identifier: 28:F0:DE:3B:12:BF:19:EB:7C:DE:4D:57:6A:D7:66:EF:35:B1:8D:59
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 0196A089A026E1BD717960721E1E0CDA4E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number: 1281
Signing time: Mon 05 May 2025 13:01:35 +0000
Manifest this update: Mon 05 May 2025 13:01:35 +0000
Manifest next update: Tue 06 May 2025 13:01:35 +0000
Files and hashes: 1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: +QKxWbcrEPUIILYjOwxf8uugciOySmMZ49E8LZaxZzY=)
2: Yp_lUqP28vEyFCPRb80UtGDXNsg.roa (hash: ywVUWmL4GSGoY6WsMRyetGJGnvc6akPYgfQXjeu4wCo=)
3: jA79aGVqPI-PvZSOlUeJ0j64c1Q.roa (hash: cpbrUzoeXFWleCog+F05RG8Xxbfmz0h5Ia9JXBRNANY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:a0:26:e1:bd:71:79:60:72:1e:1e:0c:da:4e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: May 5 13:01:35 2025 GMT
Not After : May 6 13:01:35 2025 GMT
Subject: CN=28f0de3b12bf19eb7cde4d576ad766ef35b18d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:ec:ba:65:00:05:39:2a:4b:17:b1:d2:65:
eb:cb:6a:1f:99:1a:9f:ec:be:75:f6:86:12:c7:b6:
26:6b:b0:c2:d5:ae:2c:8b:76:a7:df:46:e0:f7:2b:
95:ca:dd:2e:bb:ea:47:12:f5:fc:f4:05:ca:0f:aa:
65:c9:1e:7d:94:4c:84:3d:8a:01:4e:a7:bb:a2:f5:
cf:6c:a7:cf:06:b9:04:46:f8:64:12:05:c2:61:c1:
45:13:bd:f6:9e:da:f6:58:54:d5:e5:e6:d5:72:19:
0b:c5:57:58:6d:14:8a:8c:dd:c2:68:64:42:e7:e6:
1a:e1:d2:e7:4f:0b:c7:16:ab:d4:f8:96:4f:c5:4a:
59:e7:ca:b8:34:d9:dc:2d:28:09:20:26:c0:ab:72:
d3:1b:c3:a3:b9:d0:ad:78:96:ca:4f:52:fc:3b:e1:
f0:3d:eb:ac:f6:7e:eb:87:d2:d2:05:d7:cd:df:42:
bf:05:0a:2b:23:d2:91:73:5c:91:1a:9d:30:9c:72:
99:db:a5:5b:1e:b7:5a:11:f9:44:c2:dc:aa:d4:0e:
81:d7:0d:62:2b:60:5e:0e:a5:71:c4:4b:60:3e:48:
dd:2f:c2:26:d1:78:f2:d8:78:8b:e0:c6:03:2c:b9:
f8:f0:5c:4b:67:ee:b7:9d:b8:99:04:68:bf:4d:32:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:DE:3B:12:BF:19:EB:7C:DE:4D:57:6A:D7:66:EF:35:B1:8D:59
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:79:09:1c:30:2d:41:97:9e:cb:b0:84:f9:4e:8c:14:ae:0a:
39:35:cf:bd:98:bb:96:a9:d2:3d:ac:7a:a3:9d:e9:cb:51:52:
b3:ba:d5:51:05:4c:b8:f3:bb:32:14:87:1e:97:7c:66:f6:05:
b2:d2:9f:3d:c1:74:52:19:fa:c4:e0:e5:a0:44:2b:09:71:e8:
1d:3c:31:42:4c:3e:94:47:9c:ff:03:ef:3f:ec:17:6c:5d:92:
c2:22:1e:72:cd:3d:83:e2:89:f2:0f:6f:97:29:1b:e8:bb:5b:
2b:b1:05:1f:55:3a:91:84:4e:48:85:f4:bf:7f:eb:0a:fe:11:
95:a2:17:96:ab:2a:66:5e:b5:64:e1:49:d3:60:86:a0:79:a7:
98:6a:53:c6:d9:e9:fb:98:27:3f:b9:8f:35:d4:30:e9:67:38:
1d:9c:46:40:06:f3:35:a7:02:fe:70:0a:da:1a:a9:0d:72:18:
4a:72:8e:98:1e:29:84:e0:8e:7e:f9:30:f3:73:f9:93:93:81:
bf:53:13:f2:50:b8:77:df:07:99:3a:e1:bf:60:cd:fb:35:81:
96:a2:83:c0:54:aa:e5:07:6f:4e:ff:f9:55:e9:9d:c8:14:ad:
f6:df:0b:cc:c8:c8:01:b8:c9:30:2a:00:d9:57:3f:52:0e:85:
00:08:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:35:19 2025 by rpki-client