Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: YSDpvLvsHMiR3un1tWMITFVRIijMmUlPy81yEugrJd8=
Subject key identifier: 58:71:DD:9A:CE:B0:8D:5D:91:A1:1C:77:44:74:31:CF:9C:65:3E:40
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 0199FBEB36C14AEBDB036A22793CCEA350D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0D63
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: Vx/9MJj6s/UrP8BU/nDSd8Yrx7i5kpPI3/6WCZuPGoA=)
2: pUM6ACWqLcQahA0lg8mmij4I6d4.roa (hash: UbfUIFFNnl9kUqI4HdZKMmMa2NoguiRD4aW6tenaTi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:36:c1:4a:eb:db:03:6a:22:79:3c:ce:a3:50:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=5871dd9aceb08d5d91a11c77447431cf9c653e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:05:ee:3a:e0:d3:90:be:7d:02:9f:67:57:
9a:54:ef:8b:99:5f:ea:0b:39:f8:88:86:0c:92:14:
a1:18:48:a5:3f:29:e2:95:9f:ff:fd:ee:f1:3a:27:
6c:3d:2e:2b:57:17:d8:9b:a5:04:f7:47:69:d8:cf:
e0:25:56:21:e3:c1:e6:56:a7:58:be:04:93:57:c7:
39:8b:19:6b:8b:f1:40:fb:ff:97:e0:89:87:ff:c0:
f2:0c:fa:3b:cb:37:57:59:20:57:d5:b4:4f:d1:5f:
4f:ab:ec:b6:e3:8d:5a:b5:be:bf:22:6e:87:54:04:
09:a0:c7:8d:3f:b2:57:4c:45:d8:d5:43:1e:c6:ba:
de:ab:1a:a9:6e:89:de:a3:49:6c:eb:de:fb:0e:55:
23:b2:3f:5d:aa:94:1b:f7:2c:69:75:e6:f5:c9:d4:
b3:f5:31:bf:64:81:2d:2f:bd:6e:e5:e0:7b:0e:16:
35:f6:3a:63:86:a9:b8:a0:57:5d:ee:dc:d5:d5:8e:
57:12:b5:9c:bd:76:66:59:1f:74:dc:3c:ae:9a:06:
ce:86:98:2c:b1:f6:68:a2:2f:7d:a1:91:69:a4:e6:
bb:de:a8:8e:5d:36:7f:08:34:1a:01:89:7b:60:bb:
91:72:63:23:1c:d3:3c:36:01:4e:d2:91:42:b2:45:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:DD:9A:CE:B0:8D:5D:91:A1:1C:77:44:74:31:CF:9C:65:3E:40
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:95:9a:bc:97:6e:11:b7:97:2c:a7:99:81:bc:fd:4e:31:71:
76:87:6b:e9:34:3f:f9:c1:a2:d3:08:b8:d0:2b:c1:80:e2:80:
59:7b:c8:21:98:ed:f9:41:9a:a5:fd:d7:40:d7:1b:c8:c9:cc:
32:5c:51:f1:eb:6c:6f:b7:86:16:5a:1d:56:b1:4d:84:d3:21:
0c:43:48:08:56:c5:6c:d9:de:e5:fb:d5:7e:67:fb:d4:85:f5:
84:96:e3:c1:66:33:31:99:0a:99:45:7f:a8:86:5f:14:d2:7c:
8e:08:93:be:6d:63:27:b1:ea:c0:ef:fb:dd:79:40:c8:8a:46:
92:24:6f:3f:09:4f:e9:4a:f0:34:45:6a:60:00:24:0a:d5:37:
84:21:aa:8b:ae:87:d2:37:9c:75:45:83:93:5c:28:e9:d1:da:
80:11:11:60:41:50:d8:27:eb:b8:ab:d0:57:11:a8:bb:d0:7c:
0b:b9:ea:5c:94:d5:28:8e:ce:2d:36:dc:5b:43:30:c6:87:2b:
b0:ec:e2:5f:e9:c2:89:96:4e:a1:5c:a0:cb:54:f7:5e:0f:20:
b1:d9:21:55:a1:30:30:38:3a:28:12:33:01:98:0f:e4:e1:67:
f1:e7:30:3b:d4:ef:85:10:69:d7:5e:2b:ad:ee:54:70:ef:6b:
46:0e:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:57 2025 by rpki-client