Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier: l+5kAb7EOIB7838kwGxIOskZ9AIfpOZ6mEU8SD9H2dY=
Subject key identifier: 8D:3D:A8:F0:85:27:8C:34:D0:8C:1C:55:8E:D2:42:71:10:B0:F9:E4
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 0197B70EAB5D57E2E36688D9DB90598A9CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number: 05B3
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=)
2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: 7hCO0GWVVjXpsWM+5enK8J6ulXYwEUGNTwk5V/FHBpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ab:5d:57:e2:e3:66:88:d9:db:90:59:8a:9c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=8d3da8f085278c34d08c1c558ed2427110b0f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:ff:1b:54:e1:34:d6:11:98:af:d4:a0:16:
3f:fc:71:d6:59:2a:2a:07:f6:73:12:3a:4e:75:32:
29:0c:85:35:18:2b:f4:83:bf:19:0a:e9:a3:20:11:
68:c2:7c:e9:44:8a:80:a9:22:dd:09:ac:5f:b3:90:
1a:92:d3:6a:fe:00:38:2d:8f:ac:9f:25:e2:bd:68:
30:9e:3d:05:df:ec:5e:9d:af:e3:10:9b:88:f9:87:
ea:a7:e7:ef:40:93:99:4d:b3:5a:f1:ac:93:98:9c:
9f:1c:d9:98:5f:8c:ed:77:f4:71:df:13:89:b7:84:
2e:1a:1e:58:c5:2e:6c:a2:94:20:8e:9e:cd:33:5d:
ef:88:da:13:6c:fc:bc:74:5e:10:7a:b4:2b:b0:2e:
df:75:0e:66:c9:d7:1c:75:45:52:3d:af:e4:db:fd:
70:00:be:55:cd:af:ec:bd:4a:bd:6a:fa:29:72:0e:
d0:a3:77:b2:ac:06:3f:f6:1b:1b:96:c8:74:38:73:
92:b0:f7:bd:cd:51:8f:de:27:de:68:a3:76:1d:e9:
f5:03:9d:f0:93:1c:b7:07:ca:f4:ce:16:eb:58:12:
23:f2:fe:37:df:31:d1:4a:ae:c1:2d:35:96:4d:68:
6f:d3:c2:0f:96:7d:83:9b:37:eb:72:61:15:74:31:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:A8:F0:85:27:8C:34:D0:8C:1C:55:8E:D2:42:71:10:B0:F9:E4
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e0:4d:5e:4f:20:c9:22:c9:81:c0:80:d7:bb:91:44:9b:e4:
04:29:3e:1f:7f:0a:71:ca:b6:0f:45:05:af:e6:12:90:18:1a:
1e:dd:7d:3e:38:c1:4f:d4:6c:f9:7a:55:2a:61:b7:06:fd:d9:
d5:e7:a9:f3:05:17:ab:5c:bf:73:bc:93:22:80:ab:18:a6:8e:
aa:67:66:a3:eb:d7:90:a1:7f:0e:a6:4d:bb:b9:61:b1:52:e5:
f8:6e:84:52:a8:4f:f9:d7:85:25:f5:be:a4:a9:2d:a7:36:a8:
1b:09:b9:db:a7:4d:d3:0f:4e:fb:a0:94:8d:e8:2f:16:fc:94:
8a:13:47:76:26:2d:43:53:5e:6f:dc:77:c7:84:a1:8f:03:a8:
42:a1:b6:a3:fe:d9:fc:af:e1:55:1e:1a:25:29:00:9b:53:d2:
e3:42:12:93:db:e6:56:6b:26:44:b5:df:d0:1a:53:27:4a:86:
0d:06:a9:db:46:af:1d:e7:6d:c7:4b:61:b6:9c:6e:d6:bf:4f:
f1:48:c3:47:8c:d8:5c:92:55:10:03:db:8b:26:f3:6c:c9:31:
cf:c5:bc:95:f6:e3:d5:4b:3a:ba:28:c0:e9:66:c7:da:63:e2:
90:da:4a:0c:1b:e9:bb:ac:33:e1:fd:0f:8e:0b:e1:65:2c:70:
e5:9e:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:01 2025 by rpki-client