Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File: tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier: XShgTPf5qgKrXZ9vhi850zoHBl7u93QBcVLYlkY6P+Q=
Subject key identifier: 2A:28:AF:3B:0A:61:B1:12:5E:90:DF:13:1C:B8:DC:84:9F:DF:28:C1
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 019A02C784E4A61E6D342A5EA351C7C63C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number: 0E54
Signing time: Mon 20 Oct 2025 18:00:21 +0000
Manifest this update: Mon 20 Oct 2025 18:00:21 +0000
Manifest next update: Tue 21 Oct 2025 18:00:21 +0000
Files and hashes: 1: EanRZ9gMDK33R7GhHNXcDGanaxQ.roa (hash: Kpcx953SIYsGpWl9Kj/y5GsHiQrpw2CFYNjXqQt5xb0=)
2: RtsZiXUfC477P_DYX-3X5X34UDQ.roa (hash: LLFpj2KpcJvUNnJuvkdnNa/s8rmD7AkhPqo4J1vK6IA=)
3: VMw3kqwYfQN4oSi-DRARjMQn7ps.roa (hash: mVuoVTIk9aSGegNQzJXvHOfw+zw1bYFPft1RH3s7Nqs=)
4: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: NMgX2GYhbyFEyT2yr6bezAA26NssFLlt0ZR0OPDhCIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:84:e4:a6:1e:6d:34:2a:5e:a3:51:c7:c6:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Oct 20 18:00:21 2025 GMT
Not After : Oct 21 18:00:21 2025 GMT
Subject: CN=2a28af3b0a61b1125e90df131cb8dc849fdf28c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:23:9f:6c:38:b5:ae:91:66:92:b7:61:20:
9c:40:6d:03:07:a2:b3:4f:00:bd:26:b7:2b:e1:f5:
fe:5a:32:41:32:f5:49:be:3e:85:87:dc:bd:3e:9b:
f6:20:90:13:96:a9:4d:47:b4:48:45:26:20:82:93:
73:74:6e:29:c8:86:2f:a7:cb:57:68:96:ce:14:00:
71:4e:18:4c:dd:4b:f6:d9:3f:8a:d5:2c:a8:1e:a2:
8e:a5:0b:24:04:58:d3:3a:cd:4b:97:c5:11:fb:77:
fe:d2:74:3c:d9:0e:7d:6b:30:c8:4c:04:08:b3:2b:
81:95:41:11:3a:38:64:f4:db:8e:d1:e7:6c:11:64:
58:56:36:4f:57:e8:b5:ec:31:9f:e3:ca:89:68:bc:
42:49:cc:41:a2:ba:b5:fb:72:31:e2:5a:d1:6f:36:
64:a9:f5:a2:6b:50:d1:06:40:36:8a:b5:84:f6:1c:
61:ed:ab:06:4e:12:f4:f7:9b:c9:88:81:d9:77:62:
f8:c9:29:1d:1b:e8:ec:cc:b0:ea:cb:d6:10:8c:cc:
fb:69:91:a8:5e:7a:26:8f:03:29:1b:69:bb:c4:fc:
fd:87:d7:dc:c3:b7:ef:76:37:1a:a6:4d:d6:26:f8:
77:cb:8c:b8:b3:4a:e4:0a:e2:2c:03:58:76:60:07:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:28:AF:3B:0A:61:B1:12:5E:90:DF:13:1C:B8:DC:84:9F:DF:28:C1
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:dd:2b:2d:d9:f2:f7:b0:28:fd:0a:80:c2:c3:5b:53:55:
97:92:61:25:6f:7e:d4:d8:99:6c:fe:85:f3:da:68:6b:28:87:
5c:f9:87:2e:5b:6f:12:d0:95:2e:5d:d2:4a:a3:47:f6:62:62:
ca:14:fc:9f:8a:1b:a2:b3:57:1c:84:76:e0:ba:ec:76:9a:60:
e7:6d:59:2f:d9:c1:be:40:e0:a4:83:1c:46:bd:d1:eb:05:1f:
ef:a2:a6:14:74:1a:58:83:09:14:95:da:d1:f9:11:ee:54:a4:
d3:39:69:6b:c4:96:29:85:ee:6c:4d:86:98:ca:e3:f5:5b:c3:
2b:bb:1a:06:97:8a:25:40:9b:01:3e:79:9d:10:3c:43:2d:b6:
b6:1e:b1:50:8c:22:d2:4f:30:18:23:48:64:d9:59:7d:06:61:
a9:04:87:32:da:33:2a:ac:01:a6:e5:10:97:18:19:44:1b:24:
03:bb:99:b5:ec:c5:a1:f9:d1:29:1c:79:5d:e2:49:ee:e4:cf:
6c:4a:bc:1b:77:e4:f9:21:04:78:61:da:7d:46:a1:2a:87:02:
1a:19:26:f0:94:ec:c5:74:5d:2f:d5:9d:d6:84:0d:3b:96:e4:
5e:5e:c1:d2:a1:97:ab:e0:7c:bb:f3:81:f1:51:6e:02:1b:d0:
39:4c:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:54:22 2025 by rpki-client