
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: LGkKzLxT0n9jB0dHs5f30VowcovTWsSwTNKV8D7rUPY=
Subject key identifier: B1:F3:6E:26:C0:2C:A8:7B:2F:8B:05:F9:54:F7:6A:8D:7D:9F:D6:11
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 0198D4A7DDF9E2899AFC671AD3CD079A5B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 077D
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: 3k7CnpbXPKH6hJzRmm9o+1f6QDPQnH+YlOZ9DQm67pQ=)
2: OgXWLzQBIYvEON5mUedF6bX5aTo.roa (hash: nqpCSiGASiQpy5G6Vl9R55sQwkNptiylFtL8c3H2opE=)
3: yPU6A9p-LMtjN4Omcmkv4NrsXlo.roa (hash: 0sZjX5MFgI0oqX6xUWy5gWW3/d8I6ijHH576HLysTY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:dd:f9:e2:89:9a:fc:67:1a:d3:cd:07:9a:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=b1f36e26c02ca87b2f8b05f954f76a8d7d9fd611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:09:bc:ae:ac:ad:15:f7:bf:24:ba:e3:82:
8e:5a:13:c1:6f:c6:0a:49:33:e5:b6:dd:8a:8f:9c:
74:af:69:49:52:93:27:08:9b:e1:40:1e:1a:20:6e:
62:d1:a5:55:b2:c2:3c:8f:1a:d6:aa:69:31:4b:c9:
bf:56:5a:51:e6:8c:f1:8e:6d:88:d7:45:3e:4c:b4:
ec:1e:5a:f2:79:51:5d:d3:77:66:50:a6:6b:ff:07:
26:4c:5e:f0:67:d4:35:e8:64:34:04:fe:57:96:07:
a3:99:f6:94:8b:82:ba:83:9e:80:df:f0:2a:61:2e:
e1:b1:f0:92:85:47:65:e6:87:02:6b:3d:19:00:89:
d7:d8:8f:bc:1d:8f:0f:01:c7:c9:73:55:d3:28:d4:
ab:95:0d:be:07:5c:af:47:d0:dc:ca:e1:5c:3f:f4:
c1:b0:12:38:8f:30:ee:ca:12:90:bc:e5:d3:7c:e1:
29:e3:7d:8f:e7:00:2f:4b:47:dd:1b:52:fd:03:d2:
9a:23:cf:bf:eb:8d:c6:c4:eb:db:a5:9a:d2:26:44:
ec:43:f8:5f:a1:4f:b4:22:5b:d0:12:75:51:73:85:
97:9e:71:6b:39:95:78:78:fa:99:7e:97:e1:c7:fd:
1b:62:97:17:6c:c4:ec:05:aa:6f:82:5a:90:e8:d6:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F3:6E:26:C0:2C:A8:7B:2F:8B:05:F9:54:F7:6A:8D:7D:9F:D6:11
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:39:bd:51:f9:b6:f8:35:51:43:44:64:f5:39:61:fe:c5:4f:
c0:68:3d:b4:7c:aa:cc:da:f4:66:f4:e1:6d:61:13:16:15:16:
ca:51:e6:14:69:85:a6:aa:0a:f6:7b:a5:fb:df:ca:c6:61:73:
d6:15:fc:e9:8b:3f:a7:33:b3:86:42:6f:fd:0e:5e:d2:5f:72:
ec:91:f4:ee:a6:a4:69:cf:30:28:37:df:05:29:3d:b4:c7:26:
75:15:64:33:a3:ad:e1:a4:97:ff:4f:3c:3f:14:b4:7b:26:7f:
69:1d:ea:02:d6:b3:67:40:3d:a1:e0:13:61:73:17:f3:16:8c:
b8:55:ec:df:69:2b:1d:a5:bc:98:57:f8:a7:39:b7:5a:8e:fc:
91:c4:85:e8:b2:da:b0:cd:10:74:a7:57:27:17:e0:98:b4:40:
d5:2c:1d:3a:e1:18:ea:63:bc:b8:fe:66:97:ef:15:3c:5b:5e:
22:92:43:63:ac:6f:92:2b:34:d3:cb:30:24:9b:92:74:b7:cf:
9e:a4:41:1c:23:3a:e0:e8:d5:57:7f:5f:4f:5a:ea:92:a2:77:
31:e1:7b:4d:9b:90:3f:f0:92:61:0e:6f:ab:df:91:26:63:26:
6e:41:5d:a2:b4:5e:71:b5:b6:6b:eb:0b:11:97:c0:05:a7:d8:
e2:86:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:34 2025 by rpki-client