Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File: ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier: idlIfY8vL/rpMkYS1HUjSiDX7MiRQXZdKedsEWB90J4=
Subject key identifier: CA:C5:27:21:0B:D6:8E:8B:7C:4C:1E:47:24:D3:23:E9:70:C6:08:B1
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 0199FBEB3001F86E640326E9AFAC41EBBEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number: 143E
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: g6jTUcCs77MwILyV+GECNZNlna2SYz/Vr/BVV8kF1fU=)
2: Yp_lUqP28vEyFCPRb80UtGDXNsg.roa (hash: ywVUWmL4GSGoY6WsMRyetGJGnvc6akPYgfQXjeu4wCo=)
3: jA79aGVqPI-PvZSOlUeJ0j64c1Q.roa (hash: cpbrUzoeXFWleCog+F05RG8Xxbfmz0h5Ia9JXBRNANY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:30:01:f8:6e:64:03:26:e9:af:ac:41:eb:be:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=cac527210bd68e8b7c4c1e4724d323e970c608b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:ea:99:e1:26:13:3a:bb:b9:bd:d3:72:1c:
53:17:4a:82:80:c9:6c:77:8c:d3:b5:64:c3:43:71:
a9:f2:22:ff:b8:5d:dd:f0:a3:d1:04:84:a7:df:a7:
9c:31:5b:cc:81:c0:3c:7e:1d:4d:e7:13:53:ed:c9:
f2:db:2b:b0:31:4e:a3:13:04:3c:26:a6:5e:e9:e0:
2f:5a:03:3b:2d:d1:06:12:9d:70:46:a4:5b:29:f4:
0f:59:db:3e:4d:0f:26:47:a2:90:af:62:75:de:ae:
b2:e5:ff:2e:da:86:ac:a9:5c:8e:88:a4:f0:3f:5c:
20:25:28:91:02:51:9c:e2:c1:e8:4b:f0:f8:54:c3:
14:7d:e5:c2:60:e3:56:bd:92:20:f4:c0:ff:a4:b3:
ab:fa:77:e6:46:2b:d9:63:58:cb:7a:af:a7:1c:57:
90:ce:37:e7:c4:aa:cc:63:b1:fa:e9:3a:70:8a:01:
12:03:9d:a8:63:b8:0b:20:27:51:5e:24:e9:45:2e:
cc:52:ab:76:be:78:12:ce:fe:07:3f:3b:23:62:84:
cf:bd:8d:c4:a2:6b:92:f5:05:e4:e5:f4:f9:2e:d7:
c7:cd:19:1f:c4:66:4b:c1:d4:23:cc:ec:d2:94:0e:
cb:3c:26:d5:72:5a:3a:29:6e:75:40:3b:09:da:8e:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C5:27:21:0B:D6:8E:8B:7C:4C:1E:47:24:D3:23:E9:70:C6:08:B1
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:83:36:3e:57:db:2c:62:ac:f2:0b:a6:ed:f9:be:d8:96:85:
9c:2d:40:a2:2d:02:0f:69:e9:d5:15:c9:d4:24:7a:b5:86:03:
69:51:4c:af:64:3e:00:a4:12:ea:7f:16:3c:02:88:88:2a:8c:
88:fe:05:22:39:c3:9d:72:e7:42:c3:70:42:d1:34:72:ff:32:
c6:53:cb:b9:9f:85:07:bb:f8:2b:ff:11:86:34:f0:15:9e:4b:
60:21:7b:f5:ab:80:92:c4:90:b8:4b:01:d8:d7:0e:4d:ec:34:
89:6b:a7:23:68:d1:da:90:6d:28:c1:f9:d9:a3:2b:75:fb:82:
34:3f:6c:cf:8b:a3:49:b8:f5:54:34:05:ce:36:ad:28:49:7b:
a8:18:13:f5:45:cd:25:8a:39:f6:35:14:15:22:6e:2e:fa:82:
5a:27:fa:3d:0f:86:b7:15:f6:18:ab:a4:d9:e8:ca:65:46:4d:
1c:f5:51:3f:4c:d5:2f:f2:5b:e7:64:fc:bd:f3:51:89:5d:0d:
98:6f:44:0c:68:64:79:f4:7b:b3:39:cf:6c:37:8b:95:c1:e7:
9b:5a:b3:c1:c5:06:a4:80:30:35:b6:6a:9d:a8:ca:e2:a8:4d:
5f:52:9a:2d:51:d1:63:da:19:d9:a4:db:49:91:61:4d:4a:ea:
77:92:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:01 2025 by rpki-client