Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: k/iGZwAismOXoAySL/bOan+fJ8jLpdLQx446T1CE6fY=
Subject key identifier: 50:84:B7:47:0C:08:96:87:A1:90:97:4F:96:D8:47:33:01:6E:8A:6B
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 0199FB7CF2240DFCEDFB06A6F4B5601AA3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 5B
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: A_iHhKALil4lTEQzAUwPF3mIEBw.roa (hash: foFKLdP+k5Z9u1b7IqZhZYmzZ2C3HRJY7iqeg2B9yu0=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: IRPBnY3M37qUIUG+Lr03Ukosf5Co1RA93Ix29+tPocw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f2:24:0d:fc:ed:fb:06:a6:f4:b5:60:1a:a3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=5084b7470c089687a190974f96d84733016e8a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:d2:00:10:08:67:d7:f0:d6:5c:b9:66:9d:
2a:7e:1f:54:6e:d5:1d:56:99:01:df:69:3f:c6:3a:
ac:b5:3d:8f:42:12:20:c0:8f:70:1b:d2:17:21:c0:
42:34:ae:2f:de:79:13:e2:9b:c2:8c:43:27:1f:93:
36:42:1c:fb:30:ab:57:75:4e:09:04:4e:74:05:c9:
29:26:3a:36:32:a6:34:02:ac:a4:3b:b9:70:9a:88:
4f:34:3a:80:d9:b9:57:ad:fd:65:8a:26:48:31:eb:
2e:3e:8f:72:c4:50:9f:10:23:53:a4:2a:55:04:60:
ac:d9:9f:b3:1c:70:89:59:85:72:b2:80:ec:05:d9:
bf:0d:43:b1:0a:16:ed:69:03:f2:5b:fa:74:11:c8:
ac:c9:3f:be:2f:2d:54:34:75:35:b9:a4:db:d9:18:
6a:ae:b1:35:45:a2:1b:c1:b0:38:2c:60:23:aa:4e:
ea:37:2c:ca:e8:84:68:30:eb:3e:51:a7:d2:ea:4d:
87:ad:01:16:95:2e:47:0d:5b:85:ef:6a:b2:26:1d:
0d:bf:54:7a:11:58:66:b1:e4:72:67:6c:21:c0:8a:
c0:00:15:53:53:aa:e8:97:fc:f2:b5:bb:14:b2:53:
0a:e6:5b:b2:47:ad:08:35:5a:d0:23:25:38:ad:a8:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:84:B7:47:0C:08:96:87:A1:90:97:4F:96:D8:47:33:01:6E:8A:6B
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:23:67:02:4e:f1:e8:24:84:ac:48:de:b5:4b:ad:7d:d0:a8:
ac:fa:7a:2e:0b:05:f0:56:1b:59:fb:2f:72:6d:8d:1f:c2:80:
9b:48:56:19:c4:a6:b0:a4:ec:cd:16:d4:26:f0:62:70:3a:ee:
80:5f:74:24:77:64:b7:17:46:57:10:66:35:9a:1b:17:77:65:
20:0c:bf:d4:87:b9:2b:93:7f:57:c1:07:b0:a8:a8:a2:46:53:
9d:30:84:b1:3c:9e:d2:2c:03:3f:a2:62:c9:d5:63:f0:29:52:
71:54:24:0b:00:55:29:d5:e9:fc:3e:97:f9:da:de:d9:16:7b:
c3:b7:22:e2:88:13:21:5d:d6:14:1d:27:91:14:de:ba:c1:06:
d3:ba:ba:ad:b6:e2:1f:d2:ae:57:94:9b:d9:83:d2:af:da:06:
87:1a:06:b3:1f:45:00:a1:03:87:d3:b6:9c:16:15:41:d1:0a:
62:65:1b:36:06:4f:d5:a1:24:7e:20:28:1f:19:2f:2b:ca:1a:
43:ea:4d:72:58:c0:a2:8c:44:1a:5e:de:75:91:45:d9:00:42:
af:05:ee:17:8b:6d:35:58:38:16:d5:06:3e:b0:83:9f:60:bf:
87:b2:a4:1c:d2:58:f3:fd:fe:6d:1c:3a:03:fb:18:72:9f:f7:
81:c7:34:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPIkDfzt+wam9LVgGqO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZDM4YmQ0YzBkMGU5ZjMwMjgwMjE5ODRjZDgzNTU2MDQ3
ZjYzOTgwHhcNMjUxMDE5MDgwMTMzWhcNMjUxMDIwMDgwMTMzWjAzMTEwLwYDVQQD
Eyg1MDg0Yjc0NzBjMDg5Njg3YTE5MDk3NGY5NmQ4NDczMzAxNmU4YTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J7SABAIZ9fw1ly5Zp0qfh9UbtUd
VpkB32k/xjqstT2PQhIgwI9wG9IXIcBCNK4v3nkT4pvCjEMnH5M2Qhz7MKtXdU4J
BE50BckpJjo2MqY0AqykO7lwmohPNDqA2blXrf1liiZIMesuPo9yxFCfECNTpCpV
BGCs2Z+zHHCJWYVysoDsBdm/DUOxChbtaQPyW/p0EcisyT++Ly1UNHU1uaTb2Rhq
rrE1RaIbwbA4LGAjqk7qNyzK6IRoMOs+UafS6k2HrQEWlS5HDVuF72qyJh0Nv1R6
EVhmseRyZ2whwIrAABVTU6rol/zytbsUslMK5luyR60INVrQIyU4ragGlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCEt0cMCJaHoZCXT5bYRzMBboprMB8GA1UdIwQY
MBaAFGrTi9TA0OnzAoAhmEzYNVYEf2OYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2Yzkt
Y2U3MDAwNzRhN2ZjLzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2YzktY2U3MDAwNzRhN2Zj
LzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCNnAk7x
6CSErEjetUutfdCorPp6LgsF8FYbWfsvcm2NH8KAm0hWGcSmsKTszRbUJvBicDru
gF90JHdktxdGVxBmNZobF3dlIAy/1Ie5K5N/V8EHsKiookZTnTCEsTye0iwDP6Ji
ydVj8ClScVQkCwBVKdXp/D6X+dre2RZ7w7ci4ogTIV3WFB0nkRTeusEG07q6rbbi
H9KuV5Sb2YPSr9oGhxoGsx9FAKEDh9O2nBYVQdEKYmUbNgZP1aEkfiAoHxkvK8oa
Q+pNcljAooxEGl7edZFF2QBCrwXuF4ttNVg4FtUGPrCDn2C/h7KkHNJY8/3+bRw6
A/sYcp/3gcc0hA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:22 2025 by rpki-client