Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: g4ZkpxmhFP3jpHtA9O79a7G7MTB6DAQwyYcj3pBCHz4=
Subject key identifier: E8:85:88:23:5A:F2:C3:CA:FE:B4:39:FB:BA:32:AC:F2:86:C0:0F:1D
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 0198D5837F175AB7648E14FAECB0EF4A8CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 0295
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: HcN2gdm9gOEIgcHPMP-W9ZnlcUw.roa (hash: N+CqOXxB6Ih/1s1CE254m5auzMH5uFnT/go6OIZT6TM=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: BgqjFlx8vNAN+gJXH38KiFTrfTIItRIkH8v8YLAO3Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7f:17:5a:b7:64:8e:14:fa:ec:b0:ef:4a:8c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=e88588235af2c3cafeb439fbba32acf286c00f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:15:3d:66:60:70:0d:93:13:ff:d4:78:9c:
f0:fd:c6:96:b3:e8:0a:4a:46:f9:d6:7c:91:ab:40:
e6:b9:69:7b:e9:16:1b:ce:13:d8:d1:90:cd:d1:6d:
d0:c1:5c:2c:3b:38:a6:9d:40:11:a1:dc:52:6a:3a:
8c:3f:43:d5:2d:97:56:5e:e7:4b:42:c1:af:7c:4b:
00:5d:c9:06:6e:fc:2e:4e:d8:2b:08:9f:f3:90:ff:
c8:8c:ff:b8:ea:e3:2e:ab:f0:ac:05:66:bf:17:c3:
35:bf:af:e4:67:2d:a8:eb:c1:6b:a8:e6:c9:5b:64:
29:15:b6:53:b0:83:29:f9:a2:88:57:99:a5:e8:f4:
b4:65:83:e1:04:45:c5:05:c4:8a:ba:2a:ee:e4:0c:
9f:3b:9e:e2:14:7f:44:4d:9f:72:1d:ad:9e:14:99:
3d:8d:d7:cf:20:ff:54:3d:df:05:da:09:fc:da:52:
29:72:93:83:23:d3:d4:58:df:5f:91:13:09:4e:7a:
a5:fb:c2:7b:c3:e3:29:07:32:23:b7:86:92:2f:b8:
bd:41:89:a8:f7:b9:eb:8a:4c:02:0f:77:a4:32:f5:
2a:e9:94:4a:f3:46:43:40:0f:85:f2:1c:9d:c8:d5:
9a:cc:5e:31:16:f9:6f:6f:28:00:10:88:47:e7:24:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:88:23:5A:F2:C3:CA:FE:B4:39:FB:BA:32:AC:F2:86:C0:0F:1D
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ac:ee:5d:b8:ce:09:d6:98:e1:70:b3:aa:79:5b:93:3c:5c:
2b:fc:f2:4f:65:db:65:df:07:d0:9d:32:06:2f:27:8d:c4:3a:
0f:d9:87:e8:f2:5b:d9:50:9c:f7:73:e2:41:e2:c3:53:44:ca:
ac:eb:e5:70:44:9e:17:d9:b8:a7:8b:4c:f6:ff:c2:4d:a9:57:
1f:3c:7e:a2:49:bd:d9:3a:10:33:e6:8f:08:6a:69:91:3c:c5:
9b:d2:ca:31:19:8c:d9:4a:87:7b:ef:ea:9c:9c:dd:f0:bd:ff:
e7:4b:d3:88:6b:91:eb:9b:32:e4:99:c2:62:ee:58:72:7a:7b:
33:ad:5e:1b:00:8a:10:0c:5a:06:0e:c2:5a:33:a9:33:7c:f8:
ef:fc:4a:f6:f0:95:8a:45:27:ca:84:0f:77:79:e3:cd:26:99:
b5:35:e0:9c:b7:2f:f7:01:96:e2:27:5c:83:54:95:5e:55:10:
1b:ad:3f:a6:7e:91:49:f0:0f:5d:95:b8:34:15:eb:f7:e8:d6:
d5:b2:e0:17:ed:88:3e:75:62:9c:d7:2c:b3:e7:c1:66:bb:cb:
b2:55:ba:c5:13:a9:b4:7e:06:a7:03:fb:a4:67:2b:3a:d6:14:
94:44:5f:a9:35:b8:d2:4d:75:4a:90:17:d9:ff:a7:0a:df:c6:
0d:83:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:41:54 2025 by rpki-client