Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: CleETrOq3vPcU6wggblBcwvA8vWZZM2hNwkuCNbpWJw=
Subject key identifier: AB:7B:C8:05:FD:13:77:DC:1F:03:8D:80:AD:15:CB:9D:6A:CA:7B:A5
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 0199FFC8C0FEECD16A9425A0D7E18A04847F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:50 +0000
Manifest this update: Mon 20 Oct 2025 04:02:50 +0000
Manifest next update: Tue 21 Oct 2025 04:02:50 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: /5x2rSeq6+xYNCp806VmJ2hGLfD7PFPRHh1gNKyv/os=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c0:fe:ec:d1:6a:94:25:a0:d7:e1:8a:04:84:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Oct 20 04:02:50 2025 GMT
Not After : Oct 21 04:02:50 2025 GMT
Subject: CN=ab7bc805fd1377dc1f038d80ad15cb9d6aca7ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:60:b9:7e:b9:fd:b0:62:fc:f3:b0:cc:5f:57:
91:69:90:a4:c8:b0:98:24:b6:52:38:55:62:68:82:
4d:14:a4:2e:99:4e:e2:1b:e7:75:d5:45:bf:f4:b1:
45:a6:a7:59:1e:0f:bb:4d:5a:e0:dc:a1:d1:11:76:
10:a4:41:df:fa:0a:c0:e2:ae:a2:b5:94:79:02:6a:
94:b5:6e:00:e6:ad:ce:58:c9:ce:89:5b:29:e3:8c:
dd:4c:5d:94:61:01:e2:99:5f:90:79:1f:50:c1:37:
9e:3f:cd:e4:97:46:37:06:27:cf:1c:1d:31:28:a5:
27:06:23:2a:2e:c1:af:d6:ff:c2:52:85:b2:3e:bc:
66:a6:5c:15:20:4b:cb:10:82:09:98:ba:ab:d8:d2:
78:98:ed:99:e7:ee:f1:f1:1c:0d:14:7d:ca:7c:c1:
43:19:9c:ba:5b:9e:ca:94:90:ad:c0:f4:1a:3f:04:
8a:8c:da:6d:c3:df:9b:9e:93:04:16:aa:04:bf:a2:
30:59:94:40:23:be:2e:66:61:81:9d:40:4c:50:a6:
06:33:f7:de:71:e7:63:2e:50:2e:98:69:69:9c:34:
bc:90:f7:b4:dd:db:4d:e0:ec:44:d3:d8:bd:d7:7b:
25:18:87:ed:7f:55:de:d7:c6:dd:75:0d:eb:bd:e9:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7B:C8:05:FD:13:77:DC:1F:03:8D:80:AD:15:CB:9D:6A:CA:7B:A5
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:eb:75:4a:2a:52:4c:b6:91:95:e0:05:3b:91:2a:a7:95:4e:
07:c8:40:50:99:e8:e6:26:93:f9:f3:e1:ce:e4:88:09:45:b0:
45:2b:9a:09:4e:99:db:15:01:a8:86:ae:f7:21:53:af:48:07:
71:78:f9:f7:f6:23:44:06:82:bc:6f:85:35:79:9f:e7:d4:24:
71:4e:98:33:d1:a7:6f:f5:d4:a2:1a:ff:23:58:d8:51:56:49:
2e:5f:ed:db:fd:56:18:32:e4:46:5e:54:d1:90:a5:49:d1:ae:
f1:89:ba:89:78:9a:11:c3:45:39:dc:b3:fb:3c:0e:63:64:0a:
1a:d7:10:9b:6d:77:ad:27:79:0a:a8:e3:30:8b:a7:ee:7c:6d:
6a:82:25:79:af:c2:75:e6:5c:ee:c5:75:ca:78:a6:a6:bf:ad:
51:13:12:a1:30:4b:78:16:11:57:f6:51:2b:9c:1e:ae:1c:db:
ba:4d:7e:49:03:2e:ec:05:2f:cf:de:a9:9e:5c:ac:6a:1a:7c:
0c:9e:e7:f9:60:31:8d:97:3d:e6:0e:27:c0:6e:f2:13:46:ec:
f7:ba:ec:73:5f:da:2e:51:92:fd:b8:80:e6:8d:91:df:d6:5a:
4a:61:ea:e3:28:7c:38:ae:56:24:07:1e:76:82:dc:fc:57:4b:
4d:73:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:12 2025 by rpki-client