Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: eF/1sWfEE4wpPZH+ZlHXs0mdZOlK3lbUtvCT5mVMu5o=
Subject key identifier: DC:4E:DB:C0:C4:07:7B:28:C9:09:4B:F4:0E:32:0E:CC:42:77:5E:04
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 0199FC2166C8D7D0764BAD387F14AF1CE5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 0816
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: ZV5d5U3HOuVKL4fuo5yOMn087ypuulQxtD5iqiVuw2I=)
2: OgXWLzQBIYvEON5mUedF6bX5aTo.roa (hash: nqpCSiGASiQpy5G6Vl9R55sQwkNptiylFtL8c3H2opE=)
3: yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa (hash: 0sZjX5MFgI0oqX6xUWy5gWW3/d8I6ijHH576HLysTY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:66:c8:d7:d0:76:4b:ad:38:7f:14:af:1c:e5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=dc4edbc0c4077b28c9094bf40e320ecc42775e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:9c:90:63:5d:24:ba:1b:bc:ed:c4:b5:df:
c2:bc:2d:fb:87:f3:a4:ef:11:3d:2f:4f:43:1b:d6:
e4:15:8f:ba:36:89:d2:b0:96:b5:dd:39:65:93:61:
6b:e8:dc:8a:a9:9b:40:aa:d9:36:2f:0c:9c:10:fb:
88:90:57:38:84:f2:e9:b1:84:33:1e:4e:23:20:47:
c5:14:f8:17:7a:4d:92:0c:44:3e:48:1f:0c:68:cd:
1f:89:50:51:c5:54:1d:f1:66:38:a3:89:69:39:e2:
b3:5f:68:ce:c5:ab:01:c2:64:60:ae:08:8e:2c:ac:
16:d5:20:da:7c:24:23:c3:ee:33:13:3e:4c:06:4f:
99:6d:0d:5f:53:de:51:bc:91:4e:e2:e6:64:f9:6b:
fa:2c:59:85:32:a9:0e:f9:95:15:7f:8c:52:c7:dc:
6d:5e:08:4b:7e:72:0a:01:bc:75:87:7f:83:d5:c9:
61:3e:78:58:ac:64:bb:6e:a1:7a:79:68:b8:bb:fa:
c4:9e:a8:bf:a0:b6:b5:e7:4c:0d:57:c6:bd:02:cd:
5e:20:d3:de:30:2d:34:8c:6a:31:d9:a8:fd:f7:65:
ab:0c:5b:fd:45:7e:1e:cf:8f:86:2f:0c:63:ce:af:
e4:2b:a1:09:93:02:e2:ee:c1:9f:07:f0:ec:6d:3b:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4E:DB:C0:C4:07:7B:28:C9:09:4B:F4:0E:32:0E:CC:42:77:5E:04
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b1:97:b0:61:99:eb:62:d3:eb:37:5b:c2:d0:e0:f0:66:dc:
81:eb:8f:a3:06:aa:e1:dc:19:89:9b:b9:85:12:07:d7:6f:9b:
ee:93:52:66:09:7e:ee:3b:07:82:c2:42:1c:c6:1f:0f:fe:a9:
f1:74:d7:d7:c4:45:60:df:7b:7a:ee:43:05:51:74:c5:f0:dc:
1b:78:d5:11:70:09:d6:df:84:67:d5:a6:c0:a1:9a:0d:cc:a7:
b3:6b:dc:71:e1:7a:4b:98:6b:ec:9a:c8:02:7a:11:71:ed:e4:
aa:33:e1:26:0f:2d:c5:6a:2a:58:3e:1b:01:5b:b5:04:83:bc:
89:61:28:31:c6:9b:c2:4d:8a:96:3c:87:20:a5:98:48:38:c0:
03:5e:36:b6:91:a7:b9:3e:c8:46:be:3c:c9:4f:bc:01:70:e3:
e4:c0:ea:aa:8c:a4:b2:da:4c:d7:c7:fd:08:c6:50:bb:57:fc:
72:6e:6d:a5:5c:56:ac:19:53:8b:cf:65:d2:f9:dc:c6:ee:2e:
cd:85:15:ef:93:1a:49:22:f2:9b:70:c4:46:4d:f7:37:fd:de:
d2:14:6c:2a:ed:04:8c:ba:be:3a:ed:1a:ba:63:2b:c4:c2:01:
4e:3a:05:76:4a:4f:c2:c4:1e:fe:2c:2e:ad:ce:56:68:e7:08:
44:6f:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:59 2025 by rpki-client