Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: rdhcdw7cHSBPqKw/VdoJotwi1A8Y0UbkoTBSR0mMA5Q=
Subject key identifier: 9C:42:7A:D8:A0:76:FF:95:3C:A0:73:EA:1F:8D:6B:C6:34:89:52:EA
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 0199FB461EF29A1950F850F29733F2970633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 0331
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: 0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa (hash: gf6HtAdxN0GhhrFPeZ2e6ZRLEIlkoJtABmVeq8td+ik=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: /bph3CjFFzcREUYE0PtwL4QAtoOyIHqBR56pSgSOgvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1e:f2:9a:19:50:f8:50:f2:97:33:f2:97:06:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=9c427ad8a076ff953ca073ea1f8d6bc6348952ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:03:79:66:92:e7:fa:89:e1:c8:5d:2b:31:
2c:1f:1c:7d:a4:33:85:24:51:54:98:09:c1:21:bc:
25:4e:bb:72:d5:58:a9:4c:10:f7:ef:d4:13:0c:0c:
43:75:b2:9f:96:74:5f:05:11:e3:00:89:fd:cc:9f:
99:6d:60:51:f5:e7:e6:cd:ee:0b:62:16:12:73:28:
2a:64:67:06:6b:93:f9:7d:18:74:23:14:f9:0f:eb:
15:bd:49:c8:31:42:30:fe:79:7a:d3:56:ce:ea:7e:
2b:04:d0:da:14:6f:0a:62:e6:59:20:0e:83:19:2d:
96:96:b2:67:8e:0b:ec:d3:13:6b:ec:74:e7:c5:19:
a3:99:1c:d5:ee:b7:91:75:5f:ce:42:21:d8:54:96:
61:47:2e:5b:23:a0:f0:bb:ec:10:b0:a8:26:d3:bf:
41:d2:e2:82:a1:7b:71:b1:ff:1c:3e:da:c5:40:0c:
e3:99:89:66:db:53:66:b0:49:31:97:04:36:f0:bb:
cf:f1:a2:5f:8b:63:84:e1:a9:ed:f8:59:40:2c:4c:
7a:5f:60:1f:7e:15:90:ed:4e:2f:c9:e5:90:57:39:
7a:2c:46:41:ab:52:6f:68:cc:4e:45:28:7f:ba:d1:
f7:46:e3:46:f6:b7:2f:74:54:e8:89:a8:a5:11:9a:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:7A:D8:A0:76:FF:95:3C:A0:73:EA:1F:8D:6B:C6:34:89:52:EA
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ca:a0:a7:b2:75:1a:c8:aa:f2:21:98:d4:be:78:9b:44:c0:
04:bd:87:68:c2:ad:7f:b6:8f:9d:0d:ac:91:99:a5:72:77:91:
8c:79:4c:36:f2:50:f8:7c:ed:2f:aa:2a:9f:21:50:30:cf:14:
12:ee:60:5b:57:d4:f6:a6:eb:99:7c:21:fa:44:55:2f:a1:99:
d6:2f:9c:1c:7d:20:c7:81:cb:37:2b:1a:8e:a0:56:6d:ea:f0:
67:10:81:a3:7f:ab:ea:6c:8c:ca:5b:32:b4:34:3e:5d:36:ee:
bf:14:dc:7a:10:14:f5:05:27:12:ad:f0:7e:c3:ca:26:c7:bf:
04:8e:63:53:20:d5:63:a7:5f:27:bc:c6:c1:e1:60:12:60:ff:
22:a2:83:18:12:9a:47:28:35:9d:00:d6:6e:35:18:77:1c:83:
30:13:ce:22:0e:59:1d:9f:21:2b:e7:95:9f:8b:4b:80:59:c8:
f8:1b:00:03:2a:05:aa:cb:b8:a1:39:ca:18:67:a7:87:be:ad:
b3:e5:33:c5:05:65:6c:7c:10:93:69:9d:2a:97:a3:2b:8a:12:
d3:ed:d9:63:9c:72:38:81:e3:86:1b:2a:b9:66:be:ca:39:97:
83:37:d0:5b:9f:7d:41:e3:eb:60:78:0f:48:48:89:06:ca:7b:
e4:7d:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:06 2025 by rpki-client