Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: QkCz2Ik2YUKUv1SCMowqIQ37i9fXWUZ/8tPRxoGGtXw=
Subject key identifier: DC:9B:4D:26:EB:91:3E:8D:8E:AC:18:47:49:6E:47:6A:FF:D8:AE:1D
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 0199FCC6AE204B05D4D07ACA21BD0735DABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: HDq1DSqQDO+KxceALqQLey514Z/nh463puBxYhvF6Lw=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ae:20:4b:05:d4:d0:7a:ca:21:bd:07:35:da:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=dc9b4d26eb913e8d8eac1847496e476affd8ae1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:b0:89:96:20:f8:77:68:df:3c:a5:45:87:
26:40:97:58:06:34:8f:53:85:4f:21:c3:3e:0b:c5:
cb:bc:cd:95:59:09:74:85:a0:b1:d3:a8:ae:80:88:
af:26:07:e4:d2:f6:8a:94:e4:0b:29:26:c8:b4:8c:
0a:60:4e:5b:e7:bf:4c:ad:bb:8c:a6:3a:a7:e5:ce:
15:03:52:1e:4d:07:9b:c4:d6:8c:00:9c:d5:35:06:
d4:60:8c:12:b1:1b:a0:26:a7:ac:27:cb:2e:02:5a:
80:0d:fc:ae:f8:92:f4:77:f7:25:30:88:00:68:a0:
27:58:06:5e:58:f6:f1:b2:1e:2d:db:62:0a:59:a6:
d8:88:c2:7f:be:36:e7:cd:f7:7d:68:ea:51:cd:b0:
58:aa:fd:0e:97:f4:58:af:f0:e0:10:0b:f9:36:58:
e6:46:25:4e:c2:98:cb:8b:99:99:65:3c:89:b3:cf:
7f:4f:09:94:83:95:ef:27:8f:2a:39:24:cb:a8:f4:
7c:0c:92:f6:3f:52:f3:5c:18:4e:e1:5c:f5:4a:99:
f5:e6:1c:4d:68:a4:59:57:e3:01:45:4f:cb:96:4b:
a3:24:11:ed:61:57:89:51:1c:78:4c:05:9d:80:11:
49:55:8a:3d:38:8c:78:8d:59:27:65:b7:ca:b8:a7:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9B:4D:26:EB:91:3E:8D:8E:AC:18:47:49:6E:47:6A:FF:D8:AE:1D
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:6d:3a:25:37:c8:7d:5c:c1:ca:fc:e1:e6:53:5e:b2:6d:
3e:a8:db:8e:63:25:ba:de:37:09:5f:f6:f7:4f:2f:4a:2a:90:
f6:15:d6:7f:29:bc:c8:91:2a:1e:88:a4:7b:0c:ee:75:7e:41:
e9:95:50:c0:0b:8e:c7:7e:85:81:a0:4f:dc:38:b3:bc:b8:6a:
c2:04:1b:57:84:5f:e2:b5:fb:ae:73:19:44:54:d1:ae:82:04:
9d:63:5d:4b:27:aa:90:4e:fc:09:a9:27:8d:e0:26:8a:db:2f:
4f:49:39:0a:51:bd:02:00:5a:19:fa:56:fe:19:ff:54:e6:46:
4e:69:db:af:09:fb:b0:7a:10:ce:99:bd:69:a7:be:44:a5:0f:
e0:84:da:ee:af:37:06:5e:e1:04:a8:1a:d9:fb:f3:4a:23:ec:
e6:5a:b9:b2:73:03:6a:e4:a8:3e:ee:ae:78:2c:e0:24:5e:e2:
2a:13:3c:d5:ea:ed:a6:cf:ff:db:94:a8:6b:98:cd:24:65:b0:
e1:2f:97:b1:7b:a0:ca:74:5a:26:10:35:0d:66:cb:6b:96:b8:
a6:23:55:14:bc:05:68:c9:58:f1:ce:35:6c:18:4a:c4:5b:fa:
fb:28:f6:12:97:86:6f:b0:e0:c3:36:0d:0b:a9:47:f4:5f:b0:
2d:f6:82:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xq4gSwXU0HrKIb0HNdq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGY4MTI2ODgyOTMwMWYzZDY5ZWI5NmY4YWM2MTdmYTI1
MjU2YTEwHhcNMjUxMDE5MTQwMTQyWhcNMjUxMDIwMTQwMTQyWjAzMTEwLwYDVQQD
EyhkYzliNGQyNmViOTEzZThkOGVhYzE4NDc0OTZlNDc2YWZmZDhhZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthqwiZYg+Hdo3zylRYcmQJdYBjSP
U4VPIcM+C8XLvM2VWQl0haCx06iugIivJgfk0vaKlOQLKSbItIwKYE5b579MrbuM
pjqn5c4VA1IeTQebxNaMAJzVNQbUYIwSsRugJqesJ8suAlqADfyu+JL0d/clMIgA
aKAnWAZeWPbxsh4t22IKWabYiMJ/vjbnzfd9aOpRzbBYqv0Ol/RYr/DgEAv5Nljm
RiVOwpjLi5mZZTyJs89/TwmUg5XvJ48qOSTLqPR8DJL2P1LzXBhO4Vz1Spn15hxN
aKRZV+MBRU/LlkujJBHtYVeJURx4TAWdgBFJVYo9OIx4jVknZbfKuKcbywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNybTSbrkT6NjqwYR0luR2r/2K4dMB8GA1UdIwQY
MBaAFALfgSaIKTAfPWnrlvisYX+iUlahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2It
M2U4NmQyYzI5OTY5LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2ItM2U4NmQyYzI5OTY5
LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzVtOiU3
yH1cwcr84eZTXrJtPqjbjmMlut43CV/2908vSiqQ9hXWfym8yJEqHoikewzudX5B
6ZVQwAuOx36FgaBP3DizvLhqwgQbV4Rf4rX7rnMZRFTRroIEnWNdSyeqkE78Cakn
jeAmitsvT0k5ClG9AgBaGfpW/hn/VOZGTmnbrwn7sHoQzpm9aae+RKUP4ITa7q83
Bl7hBKga2fvzSiPs5lq5snMDauSoPu6ueCzgJF7iKhM81ertps//25Soa5jNJGWw
4S+XsXugynRaJhA1DWbLa5a4piNVFLwFaMlY8c41bBhKxFv6+yj2EpeGb7DgwzYN
C6lH9F+wLfaCKw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:20 2025 by rpki-client