Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier: AhNs19i/sgTofw4QJ3v9qtZZj8Yz9L8j0sCr/ID/10k=
Subject key identifier: C4:65:55:C6:6C:89:76:F8:09:4A:6B:27:37:C9:84:DD:7E:D5:8B:66
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 0198D6CD30D4D2D9AE7914B13626ACA4233D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number: 0648
Signing time: Sat 23 Aug 2025 12:00:28 +0000
Manifest this update: Sat 23 Aug 2025 12:00:28 +0000
Manifest next update: Sun 24 Aug 2025 12:00:28 +0000
Files and hashes: 1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=)
2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: 7QLb424Q3nudmQQdoXkZrPdfJ1deK+00Sf2Oa2W60f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:30:d4:d2:d9:ae:79:14:b1:36:26:ac:a4:23:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Aug 23 12:00:28 2025 GMT
Not After : Aug 24 12:00:28 2025 GMT
Subject: CN=c46555c66c8976f8094a6b2737c984dd7ed58b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:67:90:e1:44:e1:f2:e3:32:2c:8a:c6:79:
0b:64:46:13:cd:95:de:ae:1c:13:0e:23:bb:68:2f:
de:7b:5b:7f:be:19:6b:62:1e:27:38:2e:1e:69:0e:
17:19:7a:82:ad:88:c0:06:a0:53:9f:1e:2b:9a:7f:
ab:19:c6:b2:29:6c:68:5f:9d:70:b2:70:c5:43:6c:
c9:f7:74:d7:a4:31:cd:5d:fc:d4:56:1c:79:36:89:
55:ab:c1:2b:a0:09:01:3f:41:f5:88:82:b2:9a:29:
1c:7d:07:12:ce:8a:f8:47:f9:b7:7c:9b:6d:fd:f0:
44:cb:f4:2c:1b:1e:d3:25:7a:72:81:05:95:ec:e1:
c0:d2:50:61:71:a5:d7:97:fc:4e:b7:ae:39:c2:10:
c4:4f:f4:7e:da:69:50:ff:9d:1b:0e:15:5c:2c:be:
ec:8e:dc:1c:6f:c8:2e:d1:28:0f:46:12:fc:81:66:
16:ef:36:f6:d4:cb:1a:76:6b:dd:dd:3d:1f:90:72:
b0:d7:34:84:be:cb:29:0f:e4:b3:71:04:81:4b:00:
e1:99:fa:b0:3f:1d:93:c3:73:eb:6b:aa:a0:64:28:
a0:c0:87:26:c1:ad:c8:4f:ae:0c:af:63:b6:b3:ad:
99:57:d8:5b:39:b8:f6:a0:18:a3:c4:bb:9a:b7:7d:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:65:55:C6:6C:89:76:F8:09:4A:6B:27:37:C9:84:DD:7E:D5:8B:66
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9f:10:bd:a5:fe:49:a6:2c:a9:bd:b0:85:5d:5c:9c:d4:a7:
55:ad:7a:77:1d:a4:35:42:0e:50:99:2a:41:db:33:0d:e3:da:
63:db:cb:88:14:f8:47:d2:2a:d7:9e:15:b0:2b:68:c6:8a:fe:
8a:c9:5b:77:03:e7:7d:7c:c7:87:b4:a8:00:ab:e5:55:32:ca:
e0:3f:4e:03:53:25:14:fd:91:92:f8:f6:0c:9d:d2:cb:36:f7:
b8:9e:9c:1f:b3:43:be:78:d4:80:52:41:86:b2:32:bc:67:f1:
85:df:f2:ab:86:33:ea:2b:77:64:11:0c:7f:7e:ce:59:6c:0a:
a8:d2:0b:ba:5f:50:c3:f2:03:cc:94:d0:a8:c2:bb:29:9b:c4:
a8:54:d8:24:fa:0d:13:4f:0e:fa:48:35:14:b8:bf:03:d8:0d:
c5:c1:5d:47:fd:ac:95:97:fa:14:2e:a0:cf:5d:6f:77:1c:50:
f5:22:ac:c1:c4:c5:78:43:45:28:c3:64:5e:39:dc:e3:25:f2:
a0:ea:06:f3:65:e0:70:01:ba:42:06:18:94:b8:72:46:eb:bc:
ab:e0:af:f0:33:36:97:00:a7:56:cb:9a:f2:c2:ad:e1:cf:73:
74:71:1e:ae:f2:bf:29:3c:01:2e:29:88:75:58:07:a5:7d:13:
b9:65:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:34 2025 by rpki-client