Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier: YCFxtcPh6p9s3X5N4xRplzR0oLDkeW/UCjJ5jqg1a+Q=
Subject key identifier: C5:0B:18:A7:B6:B6:17:E1:E8:03:5D:03:DF:40:3D:FE:62:71:A8:BE
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 019A0222E520CD1E6C8997FA150B659507D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number: 06E3
Signing time: Mon 20 Oct 2025 15:00:32 +0000
Manifest this update: Mon 20 Oct 2025 15:00:32 +0000
Manifest next update: Tue 21 Oct 2025 15:00:32 +0000
Files and hashes: 1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=)
2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: t67GElgfuxuFQF2mFm/4rZE2FTeag+8L44ZtTTbrP80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:e5:20:cd:1e:6c:89:97:fa:15:0b:65:95:07:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Oct 20 15:00:32 2025 GMT
Not After : Oct 21 15:00:32 2025 GMT
Subject: CN=c50b18a7b6b617e1e8035d03df403dfe6271a8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:d7:07:f6:7b:d4:d6:55:c9:2a:6c:30:70:
29:f0:87:b1:a6:99:09:df:df:f1:48:7c:4b:5a:70:
48:ab:17:c3:c5:35:94:27:fa:ea:c2:6e:8d:e5:32:
45:6b:eb:cf:c0:4e:5f:35:00:b8:75:cd:a7:77:cb:
97:b2:1f:55:27:b9:bc:28:19:47:ff:3c:26:ab:db:
c0:24:47:89:67:87:4c:dd:ac:fb:fa:fd:88:ac:e7:
e0:39:9a:ac:b5:71:36:9a:33:3b:1b:39:70:80:83:
34:e9:bb:8e:b6:f8:89:9e:0f:ff:06:72:75:29:43:
86:3d:11:d6:3b:54:45:d9:77:ad:e8:58:19:23:68:
e1:6a:4e:76:43:a3:04:7b:b1:4c:e6:3c:90:e2:4d:
27:40:63:45:96:40:9d:e0:d8:a7:43:3c:7e:17:ce:
5d:e4:c1:03:66:01:c8:97:8a:2d:37:c1:d3:ff:89:
db:31:25:d7:d4:46:73:4c:19:b5:17:a3:17:04:5b:
03:ce:03:b3:fc:77:fb:e9:70:3b:94:52:2b:a5:fd:
5a:90:7b:23:7a:a6:60:f9:b5:94:51:3b:e2:f8:db:
88:30:54:88:88:2c:0c:40:6d:b8:dd:51:08:39:73:
43:5e:6f:07:3f:ac:e8:69:e1:92:2b:46:2f:a7:b0:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:18:A7:B6:B6:17:E1:E8:03:5D:03:DF:40:3D:FE:62:71:A8:BE
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:73:3a:d8:de:e1:16:9f:62:29:cd:07:45:de:86:82:fd:ef:
26:a6:e0:80:ea:f0:e2:36:ee:e8:f3:f6:8b:99:bf:5c:43:4f:
56:3b:32:36:18:09:74:3e:56:b2:9b:63:79:50:30:d3:78:4c:
3c:c7:73:d8:ec:89:12:7d:95:e0:a6:7e:50:9f:fe:7f:7b:0d:
a5:81:8f:c9:24:49:2e:ae:06:68:f7:9e:0e:81:82:8e:a4:c8:
dc:3c:0f:4d:b7:9a:e1:25:f1:03:04:48:09:3b:62:cd:a0:34:
1c:00:d9:28:13:7b:90:53:fa:ad:d8:5a:3b:10:3d:7a:40:fd:
d2:da:4e:68:cb:29:ff:f2:cc:62:7b:2a:fb:4b:44:db:39:82:
dc:ec:71:0b:09:a6:2b:08:76:f3:45:36:aa:e1:42:51:5d:95:
3a:59:63:52:ec:aa:62:26:92:29:f1:a0:ff:f9:eb:f6:6c:ae:
2c:33:2c:3e:00:fd:c7:26:66:0b:a0:20:2e:9b:2e:2f:df:da:
e1:c4:a1:90:4d:38:89:d1:3f:9c:12:cb:df:40:b2:d2:78:5a:
64:c6:dd:f0:79:16:31:31:f8:14:b5:32:40:d1:da:1b:77:11:
c0:f2:93:6f:14:14:32:44:15:c9:d9:d1:28:20:d2:01:23:e1:
98:b8:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:36:36 2025 by rpki-client